Librem

Last updated
Librem
All librem devices-2021-header.png
Developer Purism
ManufacturerPurism
Type Laptop/Netbook, Desktop, Smartphone, Server
Release date2014 (2014)
Operating system PureOS, QubesOS
CPU Intel Core
Graphics Intel HD Graphics
Marketing target Computer security purpose
Website puri.sm

Librem is a line of computers manufactured by Purism, SPC featuring free (libre) software. [1] [2] The laptop line is designed to protect privacy and freedom by providing no non-free (proprietary) software in the operating system or kernel, [3] [4] [5] avoiding the Intel Active Management Technology, [6] and gradually freeing and securing firmware. [7] [8] Librem laptops feature hardware kill switches for the microphone, webcam, Bluetooth and Wi-Fi. [1] [2]

Contents

Models

Laptops

Librem 13, Librem 15 and Librem 14

In 2014, Purism launched a crowdfunding campaign on Crowd Supply to fund the creation and production of the Librem 15 laptop, [9] conceived as a modern alternative to existing open-source hardware laptops, all of which used older hardware. [10] [11] [12] The 15 in the name refers to its 15-inch screen size. The campaign succeeded after extending the original campaign, [13] and the laptops were shipped to backers. [14] In a second revision of the laptop, hardware kill switches for the camera, microphone, Wi-Fi, and Bluetooth were added.

After the successful launch of the Librem 15, Purism created another campaign on Crowd Supply for a 13-inch laptop called the Librem 13, [15] which also came with hardware kill switches similar to those on the Librem 15v2. [16] The campaign was again successful and the laptops were shipped to customers. [17]

Purism announced in December 2016 that it would start shipping from inventory rather than building to order with the new batches of Librem 15 and 13. [18]

As of January 2023, Purism has one laptop model in production, the Librem 14. [19]

Comparison of laptops

Librem model Coreboot version CPU Intel ME ReleaseMax RAM (GB)
15 v1 [20] Intel Core i7 5557UEnabledJuly 201532
13 v1 [21] 4.21 (2023) [22] Intel Core i5 5200UEnabledSeptember 201516
15 v2 [23] 4.21 (2023) [24] Intel Core i7-5557UEnabledSeptember 201532
13 v2 [25] 4.21 (2023) [26] Intel Core i5 6200UDisabledJune 14, 201716
15 v3 [25] 4.21 (2023) [27] Intel Core i7 6500UDisabledJune 28, 201732
13 v3 [28] 4.6 (2017) [29] Intel Core i7 6500UDisabledOctober 201716
15 v44.21 (2023) [30] Intel Core i7 7500UDisabled [31] January 201932
13 v4 [32] 4.21 (2023) [33] Intel Core i7 7500UDisabled [31] January 201916
14 v1 [34] 4.21 (2023) [35] Intel Core i7 10710UDisabled (but not "neutralized") [36] [ unreliable source ]early Q4 202064

Librem Mini

The Librem Mini is a small form factor desktop computer, [37] which began shipping in June 2020. [38]

Librem model Coreboot version CPU Intel ME ReleaseMax RAM (GB)
Mini V14.21 (2023) [39] Intel Core i7-8565UDisabled (but not "neutralized") [36] [ unreliable source ]March 2020 [40] 64
Mini V24.21 (2023) [39] Intel Core i7-10510UDisabled (but not "neutralized") [36] [ unreliable source ]November 2020 [41] [42] 64

Librem 5

Phosh, the GNOME mobile shell that runs on the Librem 5. Phosh, the GNOME mobile shell, developed by Purism and GNOME (2018-05).jpg
Phosh, the GNOME mobile shell that runs on the Librem 5.

On August 24, 2017, Purism started a crowdfunding campaign for the Librem 5, a smartphone aimed to run 100% free software, which would "[focus] on security by design and privacy protection by default". Purism claimed that the phone would become "the world's first ever IP-native mobile handset, using end-to-end encrypted decentralized communication." [43] Purism cooperated with KDE and GNOME in its development of Librem 5. [44]

Security features of the Librem 5 include separation of the CPU from the baseband processor, [45] which, according to Linux Magazine , makes the Librem 5 unique in comparison to other mobile phones. [44] The Librem 5 also features hardware kill switches for Wi-Fi and Bluetooth communication and the phone's camera, microphone, and baseband processor. [46]

The default operating system for the Librem 5 is Purism's PureOS, a Debian derivative. The operating system uses a new user interface called Phosh, based on Wayland, wlroots, GTK and GNOME middleware. [47] It is planned that Phosh/Plasma Mobile, [44] Ubuntu Touch, [48] and postmarketOS can also be installed on the phone.

The release of the Librem 5 has been postponed several times. In September 2018, Purism announced that the launch date of Librem 5 would be moved from January to April 2019, because of two hardware bugs and the holiday season in Europe and North America. [49] The Librem 5's DevKits for software developers were shipped in December 2018. The launch date was later postponed to the third quarter because of the necessity of further CPU tests. [50] On September 24, 2019, Purism announced that the first batch of Librem 5 phones had started shipping. [51] The finished version of the Librem 5, known as "Evergreen", was finally shipped on November 18, 2020. [52]

Librem Server

The Librem server is a rack mounted server, released to the public in December 2019. [53]

Librem Key

Announced on 20 September 2018, the Librem Key is a hardware USB security token with multiple features, including integration with a tamper-evident Heads BIOS, which ensures that the Librem laptop Basic Input/Output System (BIOS) was not maliciously altered since the last laptop launch. [54] The Librem Key also features one-time password storage with 3x HMAC-based One-time Password algorithm (HOTP) (RFC 4226) and 15 x Time-based One-time Password algorithm (TOTP) (RFC 6238) and an integrated password manager (16 entries), 40 kbit/s true random number generator, and a tamper-resistant smart card. The key supports type A USB 2.0, has dimensions of 48 x 19 x 7 mm, and weighs 6 g. [55]

Operating system

Initially planning to preload its Librem laptops with the Trisquel operating system, [56] Purism eventually moved off the Trisquel platform to Debian for the 2.0 release of its PureOS Linux operating system. [57] As an alternative to PureOS, Librem laptops are purchasable with Qubes OS preinstalled. [58] In December 2017, the Free Software Foundation added PureOS to its list of endorsed GNU/Linux distributions. [59] [60]

BIOS

In 2015, Purism began research to port the Librem 13 to coreboot [61] [62] [63] but the effort was initially stalled. By the end of the year, a coreboot developer completed an initial port of the Librem 13 and submitted it for review. [64] In December 2016, hardware enablement developer Youness Alaoui joined Purism and was tasked to complete the coreboot port for the original Librem 13 and prepare a port for the second revision of the device. [65] Since summer 2017, new Librem laptops are shipped with coreboot as their standard BIOS, and updates are available for all older models. [66]

Purism calls a collection of these six components, involved in the boot process, as PureBoot: [67]

  1. Neutralized and disabled Intel Management Engine [68]
  2. coreboot
  3. A Trusted Platform Module (TPM) chip
  4. Heads, which has tamper-evident features to detect when the BIOS or important boot files have been modified [69]
  5. Librem Key, Purism's USB security token
  6. Multi-factor authentication that unlocks disk encryption using the Librem Key

PureBoot protects the users from various attacks like theft, BIOS malware and kernel rootkits, vulnerabilities and malicious code in the Intel Management Engine, and interdiction. [67]

See also

Related Research Articles

<span class="mw-page-title-main">UEFI</span> Technical specification for firmware architecture

Unified Extensible Firmware Interface is a specification for the firmware architecture of a computing platform. When a computer is powered on, the UEFI-implementation is typically the first that runs, before starting the operating system. Examples include AMI Aptio, Phoenix SecureCore, TianoCore EDK II, InsydeH2O.

coreboot Open-source computer firmware

coreboot, formerly known as LinuxBIOS, is a software project aimed at replacing proprietary firmware found in most computers with a lightweight firmware designed to perform only the minimum number of tasks necessary to load and run a modern 32-bit or 64-bit operating system.

<span class="mw-page-title-main">Apple–Intel architecture</span> Unofficial name used for Macintosh models that use Intel x86 processors

The Apple–Intel architecture, or Mactel, is an unofficial name used for Macintosh personal computers developed and manufactured by Apple Inc. that use Intel x86 processors, rather than the PowerPC and Motorola 68000 ("68k") series processors used in their predecessors or the ARM-based Apple silicon SoCs used in their successors. As Apple changed the architecture of its products, they changed the firmware from the Open Firmware used on PowerPC-based Macs to the Intel-designed Extensible Firmware Interface (EFI). With the change in processor architecture to x86, Macs gained the ability to boot into x86-native operating systems, while Intel VT-x brought near-native virtualization with macOS as the host OS.

<span class="mw-page-title-main">Comparison of open-source wireless drivers</span>

Wireless network cards for computers require control software to make them function. This is a list of the status of some open-source drivers for 802.11 wireless network cards.

In the context of free and open-source software, proprietary software only available as a binary executable is referred to as a blob or binary blob. The term usually refers to a device driver module loaded into the kernel of an open-source operating system, and is sometimes also applied to code running outside the kernel, such as system firmware images, microcode updates, or userland programs. The term blob was first used in database management systems to describe a collection of binary data stored as a single entity.

<span class="mw-page-title-main">Intel Active Management Technology</span> Out-of-band management platform

Intel Active Management Technology (AMT) is hardware and firmware for remote out-of-band management of select business computers, running on the Intel Management Engine, a microprocessor subsystem not exposed to the user, intended for monitoring, maintenance, updating, and repairing systems. Out-of-band (OOB) or hardware-based management is different from software-based management and software management agents.

System76, Inc. is an American computer manufacturer based in Denver, Colorado that sells notebook computers, desktop computers, and servers. The company utilizes free and open-source software, and offers a choice of Ubuntu or their own Ubuntu-based Linux distribution Pop!_OS as preinstalled operating systems.

Linux for mobile devices, sometimes referred to as mobile Linux, is the usage of Linux-based operating systems on portable devices, whose primary or only Human interface device (HID) is a touchscreen. It mainly comprises smartphones and tablet computers, but also some mobile phones, personal digital assistants (PDAs) portable media players that come with a touchscreen separately.

<span class="mw-page-title-main">Intel Management Engine</span> Autonomous computer subsystem

The Intel Management Engine (ME), also known as the Intel Manageability Engine, is an autonomous subsystem that has been incorporated in virtually all of Intel's processor chipsets since 2008. It is located in the Platform Controller Hub of modern Intel motherboards.

<span class="mw-page-title-main">Purism (company)</span> Computer manufacturer focusing on software freedom

Purism, SPC is an American computer technology corporation based in San Francisco, California and registered in the state of Washington.

<span class="mw-page-title-main">Anbox</span> Software to run Android apps on Linux

Anbox is a free and open-source compatibility layer that allows Android applications to run on Linux distributions by using containerization techniques. Originally introduced by Canonical, Anbox executes Android applications in a lightweight system container, isolated from the host system for security and efficiency.

<span class="mw-page-title-main">PureOS</span> Linux distribution

PureOS is a Linux distribution focusing on privacy and security, using the GNOME or KDE Plasma desktop environment. It is maintained by Purism for use in the company's Librem laptop computers as well as the Librem 5 smartphone.

postmarketOS Free and open-source operating system for smartphones, based on Alpine Linux

postmarketOS is an operating system primarily for smartphones, based on the Alpine Linux distribution.

<span class="mw-page-title-main">Fractal (software)</span> Messaging software for GNOME

Fractal is an instant messaging client and collaboration software for the GNOME desktop based on the Matrix protocol.

<span class="mw-page-title-main">Phosh</span> Graphical interface for mobile devices

Phosh is a graphical user interface designed for mobile and touch-based devices initially developed by Purism. The project is maintained and developed by a diverse community and the default shell used on several mobile Linux operating systems including PureOS, Mobian and Fedora Phosh. It is also an option on postmarketOS, Manjaro, and openSUSE. Its components follow a six-week release cycle.

<span class="mw-page-title-main">Librem 5</span> Linux-based 2020 Smartphone

The Librem 5 is a smartphone manufactured by Purism that is part of their Librem line of products. The phone is designed with the goal of using free software whenever possible and includes PureOS, a Linux operating system, by default. Like other Librem products, the Librem 5 focuses on privacy and freedom and includes features like hardware kill switches and easily-replaceable components. Its name, with a numerical "5", refers to its screen size, not a release version. After an announcement on 24 August 2017, the distribution of developer kits and limited pre-release models occurred throughout 2019 and most of 2020. The first mass-production version of the Librem 5 was shipped on 18 November 2020.

<span class="mw-page-title-main">PinePhone</span> Smartphone with Linux-based mobile operating system

The PinePhone is a smartphone developed by Hong Kong–based computer manufacturer Pine64, designed to provide users with full control over the device. This is achieved through the utilization of mainline Linux-based mobile operating systems, assembly of the phone using screws, and facilitating simplified disassembly for repairs and upgrades. The 2G-4GLTE modem, GPS, Wi-Fi, Bluetooth and both cameras can be physically switched off. The PinePhone ships with the Manjaro Linux operating system using the Plasma Mobile graphic interface, although other distributions can be installed by users.

The scope for this page is that used for list of open-source mobile phones.

<span class="mw-page-title-main">Framework Computer</span> American computer company

Framework Computer, Inc. is an American laptop computer manufacturer. The company positions itself as a proponent of the right-to-repair movement, and their laptops are designed to be easy to disassemble, with replaceable parts.

References

  1. 1 2 Miller, Paul; Krales, Amelia Holowaty (2017-08-23). "Librem 13 laptop review: physical security for the paranoid". The Verge. Archived from the original on 2018-10-21. Retrieved 2018-08-28.
  2. 1 2 Wallen, Jack (2018-03-26). "Purism Librem 13 review: This Linux-based laptop takes your privacy to the next level". TechRepublic. Archived from the original on 2018-09-25. Retrieved 2018-08-28.
  3. Kyle Rankin. "Purism Librem 15 Review". Linux Journal. Retrieved 6 December 2016.
  4. IEEE Consumer Electronics, Vol 5, Number 1, 2016 January, "Veillance Integrity by Design A new mantra for CE devices and services", pp. 33-143, By Steve Mann
  5. Bridgwater, Adrian (2015-01-26). "Purism Librem: 100% open source crowdsourced 'high-end' laptop". Computer Weekly. Retrieved 2017-04-15.
  6. Armasu, Lucian (2016-08-29). "Purism Explains Why It Avoids Intel's AMT And Networking Cards For Its Privacy-Focused 'Librem' Notebooks". Tom's Hardware. Retrieved 2017-04-15.
  7. Ung, Gordon. "Purism discovered how to make open-source software laptops even more open". PCWorld. Retrieved 2017-04-15.
  8. Armasu, Lucian (2017-04-12). "Purism Laptops To Use 'Heads' Firmware To Protect Against Rootkits, Tampering". Tom's Hardware. Archived from the original on 2017-04-14. Retrieved 2017-04-15.
  9. "Librem 15: A Laptop That Respects Your Rights". Crowd Supply. Retrieved 2018-10-25.
  10. "Purism Librem 15". Linux Journal. Retrieved 2018-10-25.
  11. "Purism Aims To Build A Philosophically Pure Laptop". TechCrunch. Retrieved 2018-10-25.
  12. "Purism Librem 15 Linux laptop blends high-end hardware with totally free software". PCWorld. Retrieved 2018-10-25.
  13. "Purism's high-end, open software-stuffed Librem 15 laptop hits crowdfunding goal". PCWorld. Retrieved 2018-10-25.
  14. "Librem 15 Laptop: Shipping Update". Crowd Supply. 2015-06-09.
  15. "Librem 13: A Laptop That Respects Your Rights". Crowd Supply. Retrieved 2018-10-25.
  16. "Purism Puts Physical Kill Switches on Latest Laptop" . Retrieved 2018-10-25.
  17. "Purism Librem 13 Review". Linux Journal. Retrieved 2018-10-25.
  18. Weaver, Todd (2016-12-15). "Growing to Ship from Inventory in 2017". Purism. Retrieved 2017-04-15.
  19. "Librem 14 version 1 – Purism" . Retrieved 2023-01-03.
  20. "Librem 15: A Laptop That Respects Your Rights". CrowdSupply.com. Archived from the original on 30 July 2015. Retrieved 23 July 2020.
  21. "Librem 13: A Laptop That Respects Your Rights". CrowdSupply.com. Archived from the original on 10 December 2015. Retrieved 23 July 2020.
  22. "librem_13v1 · master · firmware / releases". GitLab. 2022-01-27. Retrieved 2022-04-04.
  23. "Librem 15: A Laptop That Respects Your Rights". CrowdSupply.com. Archived from the original on 10 November 2015. Retrieved 23 July 2020.
  24. "librem_15v2 · master · firmware / releases". GitLab. Retrieved 2022-04-04.
  25. 1 2 "Products - Purism". puri.sm. Archived from the original on 30 June 2017. Retrieved 23 July 2020.
  26. "librem_13v2 · master · firmware / releases". GitLab. Retrieved 2022-04-04.
  27. "librem_15v3 · master · firmware / releases". GitLab. Retrieved 2022-04-04.
  28. "Products - Purism". puri.sm. Archived from the original on 10 October 2017. Retrieved 23 July 2020.
  29. "Coreboot". wiki.puri.sm. Archived from the original on 25 May 2019. Retrieved 14 August 2019.
  30. "librem_15v4 · master · firmware / releases". GitLab. Retrieved 2022-04-04.
  31. 1 2 "The Purism Freedom Roadmap: Road to FSF endorsement, and Beyond". Purism. 2018-04-04. Retrieved 2019-02-18.
  32. "Librem 13 version 4". puri.sm. Archived from the original on 24 January 2019. Retrieved 23 July 2020.
  33. "librem_13v4 · master · firmware / releases". GitLab. Retrieved 2022-04-04.
  34. "Purism- Librem 14". puri.sm. Retrieved 23 July 2020.
  35. "librem_14 · master · firmware / releases". GitLab. Retrieved 2022-04-04.
  36. 1 2 3 "Are Laptops For Sale or Not?". Purism community. 2021-03-10. Archived from the original on Jan 3, 2023. Retrieved 2023-01-03.
  37. "Purism Librem Mini is a FOSS-Focused Linux PC". OMG! Ubuntu!. 18 March 2020. Retrieved 2020-08-30.
  38. "Librem Mini is Shipping". Purism. 23 June 2020. Retrieved 2020-08-30.
  39. 1 2 "librem_mini · master · firmware / releases · GitLab". GitLab. Retrieved 2023-01-03.
  40. "Announcing the Purism Librem Mini". Purism. 2020-03-18. Retrieved 2023-01-03.
  41. "Announcing the Librem Mini V2". Purism. 2020-11-02. Retrieved 2023-01-03.
  42. Sneddon, Joey (2020-11-02). "Librem Mini Desktop PC Gets a 10th Gen Intel Refresh, But No Price Increase". OMG! Ubuntu!. Retrieved 2023-01-03.
  43. Holwerda, Thom (2017-08-24). "Librem 5: a security and privacy focused GNU/Linux smartphone". OSNews. Archived from the original on 2018-08-29. Retrieved 2018-08-29.
  44. 1 2 3 Byfield, Bruce (2018). "Librem 5 and the Challenge of the Free Phone". Linux Magazine. Archived from the original on 2018-09-04. Retrieved 2018-08-29.
  45. Rankin, Kyle (11 March 2019). "Lockdown Mode on the Librem 5: Beyond Hardware Kill Switches". Purism.
  46. "Purism Librem5 modem revealed, will provide LTE and GPS support". TuxPhones. 2 April 2019.
  47. "Phosh". developer.puri.sm.
  48. Verma, Ardash (2018-04-25). "Open Source Smartphone Librem 5 Will Officially Support Ubuntu Touch". Fossbytes. Archived from the original on 2018-06-12. Retrieved 2018-08-29.
  49. Faerber, Nicole (2018-09-04). "Progress update from the Librem 5 hardware department". Purism, SPC. Archived from the original on 2018-10-14. Retrieved 2018-10-13.
  50. Weaver, Todd (21 February 2019). "Massive Progress, Exact CPU Selected & Minor Shipping Adjustment". Purism.
  51. PurismBeautiful; Secure; Laptops, Privacy-Respecting; Phones (2019-09-24). "First Librem 5 Smartphones are Shipping". Purism. Retrieved 2019-10-20.{{cite web}}: |first3= has generic name (help)
  52. Hamner, David (November 18, 2020). "Librem 5 Mass Production Phone Has Begun Shipping" (Press release). Retrieved December 19, 2020.
  53. "Librem Server". Purism. 17 December 2019. Retrieved 2020-08-30.
  54. "Introducing the Librem Key". Purism. 20 September 2018. Retrieved 2018-10-25.
  55. "Librem Key". Purism. Retrieved 2018-10-25.
  56. Rahl, Jon (2015-05-17). "Production and Shipping Update". Purism. Retrieved 2017-01-26.
  57. Weaver, Todd (2015-09-18). "Weekly Update on Librem Production 2015-09-18". Purism. Retrieved 2017-01-26.
  58. "Best Qubes Laptop is the Secure Librem 14". Purism. Retrieved 2022-02-13.
  59. "FSF adds PureOS to list of endorsed GNU/Linux distributions". Free Software Foundation. Retrieved 2018-10-25.
  60. "OpenNews: Фонд СПО признал PureOS полностью свободным дистрибутивом". www.opennet.ru. Retrieved 2018-10-25.
  61. Moberg, Larry (2015-07-20). "Freeing the BIOS: Memory Init". Purism. Archived from the original on 2017-01-05. Retrieved 2017-01-12.
  62. Moberg, Larry (2015-08-14). "2015-08-14: Librem 13: Weekly BIOS Progress Update". Purism. Retrieved 2017-01-12.
  63. Moberg, Larry (2015-08-21). "2015-08-21 Librem 13: Weekly BIOS Progress Update". Purism. Retrieved 2017-01-12.
  64. Laurie, Duncan (2015-12-22). "Gerrit Code Review". review.coreboot.org. Retrieved 2017-01-12.
  65. Alaoui, Youness (2017-01-05). "Diving back into coreboot development". Purism. Archived from the original on 2017-01-13. Retrieved 2017-01-12.
  66. "Downloading and installing coreboot on Purism Librem devices". Purism. Retrieved 2018-04-02.
  67. 1 2 "PureBoot, the High Security Boot Process". Purism. 25 February 2019. Retrieved 2022-06-10.
  68. "Deep dive into Intel Management Engine disablement". Purism. 2017-10-19. Retrieved 2024-09-02.
  69. "Heads - Purism - Librem products documentation". docs.puri.sm. Retrieved 2024-09-02.