The NovaCustom NV41 Series laptop is Qubes-certified!

It is our pleasure to announce that the NovaCustom NV41 Series laptop has become the fifth Qubes-certified computer for Qubes 4.X!

About the NovaCustom NV41 Series

Photo of the NovaCustom NV41 Series

The NV41 Series is a 14-inch laptop from NovaCustom, a European vendor known for their highly customizable, Linux-friendly laptops. This 12th Generation Intel Core (Alder Lake) laptop comes with Dasharo coreboot open-source firmware, USB-C charging, the latest Intel Xe graphics, and up to 64 GB of memory.

Qubes-certified configurations

The following configuration options are certified for Qubes OS 4.X:

Processor:

  • Intel Core i5-1240P processor
  • Intel Core i7-1260P processor

Memory:

  • 2 x 16 GB Kingston DDR4 SODIMM 3200 MHz (32 GB total)
  • 1 x 32 GB Kingston DDR4 SODIMM 3200 MHz (32 GB total)
  • 2 x 32 GB Kingston DDR4 SODIMM 3200 MHz (64 GB total)

M.2 storage chip:

  • Samsung 980 SSD (all capacities)
  • Samsung 980 Pro SSD (all capacities)

Wi-Fi and Bluetooth:

  • Intel AX-200/201 Wi-Fi module 2976 Mbps, 802.11ax/Wi-Fi 6 + Bluetooth 5.2
  • Killer (Intel) Wireless-AX 1675x M.2 Wi-Fi module 802.11ax/Wi-Fi 6E + Bluetooth 5.3
  • Blob-free: Qualcomm Atheros QCNFA222 Wi-Fi 802.11a/b/g/n + Bluetooth 4.0
  • No Wi-Fi/Bluetooth chip

Notes on Wi-Fi and Bluetooth options

  • When viewed in a Linux environment with lspci, the “Killer (Intel) Wireless-AX 1675x M.2 Wi-Fi module 802.11ax/Wi-Fi 6E + Bluetooth 5.3” device displays the model number “AX210.” However, according to its Intel Ark entry (in the “Product Brief” file), they are actually the same Wi-Fi module.

  • Similarly, when viewed in a Linux environment with lspci, the “Blob-free: Qualcomm Atheros QCNFA222 Wi-Fi 802.11a/b/g/n + Bluetooth 4.0” device displays the model number “AR9462,” which seems to be just the Wi-Fi chip model number, whereas “QCNFA222” seems to be the model number of the whole device (which include Bluetooth). Meanwhile, the Bluetooth device presents itself as “IMC Networks Device 3487.”

  • The term “blob-free” is used in different ways. In practice, being “blob-free” generally does not mean that the device does not use any closed-source firmware “blobs.” Rather, it means that the device comes with firmware preinstalled so that it does not have to be loaded from the operating system. In theory, the preinstalled firmware could be open-source, but as far as we know, that is not the case with this particular Atheros Wi-Fi/Bluetooth module. (Qualcomm has published firmware source code in the past, but only for other device models, as far as we are aware.) Meanwhile, the Free Software Foundation (FSF) considers unmodifiable preinstalled firmware to be part of the hardware, hence they regard such hardware as “blob-free” from a software perspective. While common usage of the term “blob-free” often follows the FSF’s interpretation, it is worthwhile for Qubes users who are concerned about closed-source firmware to understand the nuance.

Special note regarding the need for kernel-latest

Beginning with Qubes OS 4.1.2, the Qubes installer includes the kernel-latest package and allows users to select this kernel option from the GRUB menu when booting the installer. At the time of this announcement, kernel-latest is required for the NovaCustom NV41 Series to function properly. Therefore, all potential purchasers and users of this model should be aware that they will have to select a non-default option (Install Qubes OS RX using kernel-latest) from the GRUB menu when booting the installer. However, since Linux 6.1 has officially been promoted to being a long-term support (LTS) kernel, it will become the default kernel at some point, which means that the need for this non-default selection is only temporary.

What is Qubes-certified hardware?

Qubes-certified hardware is hardware that has been certified by the Qubes developers as compatible with a specific major release of Qubes OS. All Qubes-certified devices are available for purchase with Qubes OS preinstalled. Beginning with Qubes 4.0, in order to achieve certification, the hardware must satisfy a rigorous set of [requirements], and the vendor must commit to offering customers the very same configuration (same motherboard, same screen, same BIOS version, same Wi-Fi module, etc.) for at least one year.

Qubes-certified computers are specific models that are regularly tested by the Qubes developers to ensure compatibility with all of Qubes’ features. The developers test all new major versions and updates to ensure that no regressions are introduced.

It is important to note, however, that Qubes hardware certification certifies only that a particular hardware configuration is supported by Qubes. The Qubes OS Project takes no responsibility for any vendor’s manufacturing, shipping, payment, or other practices, nor can we control whether physical hardware is modified (whether maliciously or otherwise) en route to the user.


This is a companion discussion topic for the original entry at https://www.qubes-os.org/news/2023/05/03/novacustom-nv41-series-qubes-certified/
8 Likes

Congratulation with this amazing achievement!

Do I understand correctly, that Intel ME is disabled on this laptop by default? Or is this an additional (paid?) option? What about ME neutralization?

1 Like

is suspend working?

I think this is a question for @novacustom.

Suspend works. It just requires updating Qubes OS normally after installing (which we recommend doing anyway).

It’s not disabled by default, but you can simply set the Intel ME to Disabled (soft or HAP) in the firmware settings.

Suspend (S3) works.

4 Likes

Miracle.
I also have i5-1240P based laptop (Thinkpad T16) and Qubes OS never suspends properly on any kernel there.

This looks promising, does anybody know if this has secure boot? or a similar setup? I can’t find any information online about it? I saw that there is trench boot on another desktop with Qubes and Dasharo? does this apply here as well?

It took a lot of effort to make the firmware compatible with S3 suspend mode in Qubes OS :wink:

3 Likes

It has secure boot: Secure Boot - Dasharo Universe

Unbelievable, seriously that is major, this has been one aspect that has been lacking from QubesOS for a long time. I think it is time to order a laptop :wink:

The laptop having secure boot is not the same as Qubes OS being able to use secure boot.

You can use it with other OSs, but it doesn’t work with Qubes OS.

1 Like

Thanks for clarifying that, hopefully there will be some form of boot security that works with QubesOS soon like TrenchBoot.

Ah, Qubes OS doesn’t support secure boot (yet)? I’m sorry I didn’t know that! I would have added that information.

The FAQ says it has to do with Xen not having good support for Secure Boot.

FAQ : is secure boot supported

1 Like

4 posts were split to a new topic: NovaCustom NV41 Series

@novacustom thank you so much for all your efforts to make the NV41 Series 14 inch coreboot laptop - NovaCustom a Qubes-certified option!

Much appreciated!

2 questions:

  • Is there anyplace an interested party should watch for NV41 boot security developments?

  • Will Novacustom be at any future conferences, for example DEF CON 31 in Aug in the USA, or elsewhere?

Great thanks and Bravo! on Qubes certification.