Hello . Thanks for the answer . If you look closely, this is the same motherboard MUO1_MB, it is installed on Librem Mini on NitroPC 1 on NVISEN Y-MU01.
As for the software, you can use PureBoot or you can use Coreboot, I think this is a separate topic, what is the difference and what is more free from the point of view of blobs…
Hello . Yes, you’re right, version with Intel Core i7-10510U processor (Intel Management Engine (CSME 14.x) (v2)
expensive .
Possibly peruse the FAQ at FAQ – Purism
Basically, they are both boot firmware. Pureboot gives you the option of a trusted boot path / detects the Evil Maid Attack. Coreboot has a traditional BIOS payload i.e. just boot but without boot integrity check.
Hello . Thank you very much for your answer.
I wanted to understand the difference not in bootloaders, but in terms of hardware.
Do I understand correctly that this is the same motherboard as for Librem Mini, NitroPC1 or NVISEN Y-MU01?
If we talk about Pureboot or Coreboot, it seems to me that you can set a password for Grub and sign the kernel; this will have the same effect from a security point of view as Pureboot.
OK, sorry, I completely misunderstood your question then. I can’t answer your actual question as I have no familiarity with those other devices (NitroPC1 / NVISEN Y-MU01).
What you propose won’t provide integrity for the firmware itself.
Putting that another way … you (someone?) can sign the kernel but what code is checking the signature?
There are (at least) two ways of doing it.
Librem Mini wasn’t based on NitroPC 1 (nor was Mini v2 based on NitroPC v2, etc.), as far as I know. While they share board designs, as far as I can tell the Minis came first, and the respective NitroPCs ship Mini firmware modified with Nitrokey’s configuration. (See e.g. the NitroPC firmware builder, the NitroPC v2 configuration is CONFIG_BOARD_PURISM_LIBREM_MINI_V2 with the vendor name set to Nitrokey, etc.: coreboot-builder/nitropc-defconfig at main · Nitrokey/coreboot-builder · GitHub)
I can’t say for sure whether it will work. Designs like this often have many options and can be populated in different ways. Some of the obvious ones you can see in the photo are the optional COM port headers, the option for a second Ethernet interface instead of the rear USB 2.0 ports - but those are just the obvious things. The design may support alternative parts for any number of internal components that wouldn’t impact end-user functionality, but allow the vendor to adapt to fluctuating component availability. The EC firmware may change, possibly requiring corresponding changes in the system firmware. If so, it should come with matching vendor firmware, but work in coreboot might be needed to interact with the EC in the right way.
When we ship devices, we ensure that everything works, either by ensuring they have the same components where it matters or by adding the necessary support to coreboot for the variations that we have shipped. For example, Librem 14 recently gained support for new Comet Lake steppings, and Librem 11 added a second set of HDA verbs for an alternate audio codec.
So I can’t know for sure whether a device from another vendor will work with our firmware. You’re always welcome to try it, and contributions upstream to coreboot to support more variations are appreciated.
Right, it is the other way around. The Librem Mini v2 was announced three months before the NitroPC 1.
They both have the same hardware, as stated by Jan Suhr in the comments. Jan also mentions about them being based off OEM hardware manufactured in Asia.
Thank you very much for your answer.
If I knew for sure that the motherboard for Librem Mini, NitroPC1, NVISEN Y-MU01 is from the same manufacturer, then I could experiment)) But as you correctly noted, for example, the Purism company could buy these boards and then adapt them for certain software and this could differ from the same NitroPC1 board.
I’ll try to read more and study who the manufacturer of these boards is.
I meant something like this:
mkdir --mode 0700 keys
gpg --homedir keys --gen-key
gpg --homedir keys --export-secret-keys --armor > boot.secret.key # backup
gpg --homedir keys --export > boot.key
I wonder if it is secret information from which manufacturer Purism orders the motherboard for the Librem Mini, where can you find the technical information?
Actually my point is that ODMs like this often vary components in the devices both for configuration options and component availability, like I discussed above. So even if they are from the same manufacturer, there isn’t a firm guarantee whether firmware from Purism or Nitrokey will work, work partially, or not boot at all.
You will have to estimate the likelihood that the firmware will work acceptably (depending on what is acceptable to you) and weigh that against the difference in cost 
I can’t really characterize that likelihood, but I can give examples of things could vary that require changes to firmware, like the Librem 14 and Librem 11 examples above. Hope that helps
I agree with your idea, but still, if you know who the manufacturer of the motherboard for Librem Mini (v1, v2) is, I would be grateful for the information.
I would like to buy this board and then flash Pureboot and then Coreboot and compare the performance.
I hope Purism does not hide this information from users))
I also wanted to understand if, after purchasing Librem Mini 2, I could install Coreboot and then return Pureboot again
Try contacting Nitrokey about the OEM hardware information.
Yes, you can choose which one you prefer at any time.
thank you for your responses
Found another clone ))
Am I right in understanding that the Purism company orders mini computers Eglobal 8th Gen i7-8565U computer Windows 10 pro /Linux Mini PC DDR4 64GB Gaming PC from eglobaltech.cn in China, then modifies them, installs Coreboot and sells them to users?
If the Purism company has its own production in the United States of America?
That’s an 8th gen Intel CPU, Librem Mini v2 is 10th gen. No, we do not buy them from a retail vendor. They are produced in China and we do final assembly in Carlsbad, California.
In fact, it was a friendly question, it’s a pity that now in 2024 I see the inscription “made in China” on the motherboard instead of “made in the USA”. I understand that manufacturing in the USA is not economically profitable now, so you buy and modify motherboards, plus other expenses, I understand that.
I’m sorry, I see my response looks a bit curt, I was just attempting to answer the questions directly
We’re certainly interested in bringing Made in USA electronics to more of our devices beyond the Liberty Phone. It’s far from easy though!
Your response looked perfectly fine to me.
I guess the previous poster was talking about the Librem Mini v1 … which was an 8th gen. By the way, you should be aware that the “User Manual” and the pics of the motherboard for the Mini v1 FCC ID match the eglobal machine. Furthermore the “User Manual” for the Mini v1 on the FCC website shows the American Megatrends BIOS ( https://fccid.io/2AT9R-LMV1-01/User-Manual/User-Manual-4772946.pdf ) … which is kind of funny, right???
As an aside: I don’t see any FCC ID information/filing for the Mini v2. Any reason why not?