Is is possible to use PureBoot on Librem 11 (not Basic) with a key like on Mini v2?

[HG7789]

The Mini and Librem 11 lack a TPM but the Mini uses a key + Pureboot and the 11 uses Pureboot Basic.

Is it possible to use full PureBoot + Librem Key on the 11 (with a USB C adapter)?

If not, and I wanted a solution like this, what would I need to look at as another option? Generic Coreboot + Heads?

Thank you

[irvinewade]

@jonathon.hall

[FranklyFlawless]

Yes you can.

@joao.azevedo

It will ship Pureboot by default (Coreboot+Modified HEADS) on all Librem 11 devices. To be specific it will ship Pureboot Basic (Introducing PureBoot Basic – Purism). Which allows to use the device without a Librem Key.

If you have a Librem Key, you can enable the full features of Pureboot in the Pureboot menu. Thus enabling the tamper detection feature of Pureboot+Librem Key.

The USB ports of this first iteration of the Librem 11 are USB-C, but with an USB-A to C adapter you can use the Librem Key.

It should be possible to provide a different bootloader option (Coreboot+seabios or others).

But Pureboot basic provides the same features as seabios: Hardware information, Booting the device, selecting to boot from a USB device, but adds to that (among other things) a graphical interface, which our previous coreboot+seabios did not provide. And also a recovery shell for different operations if needed
And has the option to enable full Pureboot if you prefer.

EDIT: A coreboot+seabios option already exists. And you can flash it with the usual scripts.

[JCS]

Yes, it is possible. Like the Mini v2, the Librem 11 doesn’t have a TPM (so there’s no TPM admin PIN).

To boot the tablet with tamper-detection, you will need to insert a Librem Key and USB-C adapter into the Librem 11 prior to powering it on. Existing Librem Keys are all USB-A, but there are plans to eventually offer USB-C variants.

This video shows PureBoot configuration steps on a Librem 14, but the PureBoot aspects are all the same. The initial OS setup is different on the Librem 11 (there is no initial setup wizard) but that’s a very small disparity in the video. Additional PureBoot documentation is located here.

[HG7789]

Fabulous, thank you