A secure, high-end desktop that Respects Your Freedom!
Looking for a server? Go to the Libreboot D16 Server page.
Did you know that most modern Intel and AMD computers come with backdoors implanted by the NSA and other agencies? You do now, and it isn’t pretty. And it’s getting worse. Since the Snowden revelations, we know that most hardware platforms contain backdoors or have insecure software that can have exploitable bugs. Most hardware manufacturers intentionally place insecure backdoors into their systems, for profit. With most systems from the large manufacturers, your company is at risk of data theft, corporate espionage or worse. The Libreboot D16 from Minifree changes that!
The Libreboot D16 is the only high-end, business-grade, secure owner-controlled workstation that safeguards your privacy, security and freedom. It runs 100% entirely on free and open source software, from the BIOS, right up to the operating system, drivers and applications. It comes with the free and open source Libreboot BIOS replacement, and Debian GNU+Linux, or any other GNU+Linux distribution of your choice (Qubes is fully compatible, with all security features enabled).
The variations here are sold without storage drives. You can purchase them here, and we will install them in your requested configuration:
With all of the software in your system available as source code, this means that anyone – including you – can audit the system for security. The Libreboot D16 also supports advanced security features, such as full hardware IOMMU and PCI passthrough (most other systems do not support it) – this means you’ll get the full security protections offered by Qubes. Your Libreboot D16 obeys you, and nobody else! The Libreboot D16 comes without the Intel Management Engine or AMD PSP!
Shipping worldwide via UPS! (Europe, USA, Canada and Asia included. 2-5 day shipping to most of the world), with a 2 year warranty as standard, and free technical support. Prices are in GBP; use xe.com currency converter to check currency exchange rates (e.g. GBP to EUR, GBP to USD, etc). Minifree provides invoices in GBP by default, but you can request an invoice in another currency (e.g. EUR, USD) if you prefer, and one will be provided.
The Libreboot D16 is sold in order to raise funding for the Libreboot project. Libreboot stickers are also available to purchase.
The Libreboot D16 runs on high-end, libre hardware. It uses an AMD Opteron 6272 16-core 2.1GHz CPU, with the option to add a 2nd CPU, making 32 cores in total, and it supports up to 128GiB of RAM. (You can also purchase Opteron 6204/6238/6262HE for 100 GBP extra per CPU, or 6284SE for an extra 500 GBP per CPU, or Opteron 6278 2.4GHz 16-core for an extra 400 GBP per CPU. Mention in textbox on checkout). It comes with a high-end, libre-compatible NVidia GTX 660Ti or 670 with 2GiB Video RAM (we will ship the fastest one), fully supported by free software in Libreboot and the Linux kernel, using the nouveau driver. The video card will have at least 1 VGA port and at least 1 DVI port. Where possible, we will ship cards that have HDMI ports, though you can purchase an HDMI to DVI adapter inexpensively.
The Libreboot D16 is highly configurable for your requirements, with 2 NICs and plenty of PCIe and USB slots for further expansion.
With full hardware virtualization supported, and all other features that it has, the Libreboot D16 is not only a secure, NSA-free machine, but it’s also suitable for serious professional software development, 3D rendering and even gaming. It’s perfect for serious professional usage, including in your company. Distributions like Qubes will also run on it.
This is sold on a preorder basis, with a predicted 6 month lead time. This is a very conservative estimate; we will try to ship it within 1 month, but the parts are expensive and some of them have to be imported from foreign countries.
We will install the drives in whichever configuration you request, e.g. RAID1, RAID6, RAID10, etc.
NOTE: the D16 has up to 6 SATA ports on the motherboard. The D16 also has 8 SAS ports (the connector is the same as with SATA, and SATA drives can also be used), with the optional PIKE2008 module installed. Contact Minifree for pricing on SAS drives if you need them. NOTE: a non-free option ROM is needed in order to boot from SAS (on SATA connected to a SAS port) via GRUB or SeaBIOS, but the Linux kernel can use it without an option ROM. Therefore, if you require to boot directly from SAS, we can supply a system configured with a Linux kernel payload (e.g. petitboot), bypassing the need for GRUB or SeaBIOS entirely. For most users, SATA is fine.
We supply with the GRUB payload by default, but you can request SeaBIOS payload instead if you want that. Support for the Petitboot payload is planned at a later date.
The correct power cable will be provided, depending on your country. The connector type is a standard female IEC 60320 C13, with the appropriate plug type for your country’s wall sockets (e.g. UK, Euro, USA, etc).
Your Freedom. Your Libreboot
Libreboot is free software which initializes the hardware in the system and boots your operating system. It replaces the non-free BIOS usually found in most laptops.
Minifree’s founder is also the main libreboot developer (and founder of the libreboot project). Profits from Minifree sales directly fund the libreboot project.
Debian GNU+Linux is user-friendly, secure and respects privacy
Debian GNU+Linux operating system comes preinstalled. Debian comes with all the standard applications for Web browsing, instant messaging, office and productivity, graphics editing, multimedia and more. Thousands of extra applications are also available to install from the Debian repositories, using the apt-get package manager provided. It even has games!
For servers, Debian is rock-solid and in live production use by many of the largest organisations on earth, running much of the worlds public infrastructure and companies, including internet providers.
The version of Debian that we ship is Debian Jessie, with the MATE desktop (for workstation use-case) or barebones (no desktop) for server use-case (1U or 4U case). We can also update it to Debian Stretch on request, at no extra cost.
We will also install any other distribution that you prefer, on request, e.g. Ubuntu, Linux mint, Arch, Parabola, OpenSUSE, Mageia, Manjaro, etc – request it in the textbox on the checkout page
This is a new upcoming add-on/extension for the D16, ETA some time in 2017.
FlexVer is a new, owner-controlled security technology designed to safeguard critical data and applications in the event of software or hardware tampering. FlexVer allows a system to be provisioned in a trusted physical environment, then deployed to an untrustworthy physical location while retaining system integrity. Provided that OS-level attack avenues are properly mitigated, for example through the use of TRESOR and similar technologies, FlexVer allows deployment of provisioned systems without concern of hardware and/or software tampering and subsequent extraction of sensitive material — a provisioned system can be guaranteed to be answering only to its previously configured owner, not the owner of the physical space in which the system resides. This is a major departure from prevailing security models, which largely assume that either the possibility of physical access by a malicious actor must result in loss of trust of the affected system, or that trust must be delegated to the system vendor in all situations.
Unlike existing security technologies, FlexVer™ does not depend on a fully trustworthy vendor for the root of system trust. Recent events have shown that this trustworthy vendor assumption is not valid, and in fact there is strong pressure on all vendors to compromise their root of trust for financial gain, warrant-related data extraction, industrial espionage, and related purposes.
Raptor Engineering, the company developing it, wrote a white paper about it. Read more about FlexVer here (it’s planned for a release on Libreboot D16):
FlexVer is useful in all kinds of environments, including offices and datacentres, where security is critical.
Processor / system bus
- 2 CPU sockets (G34 compatible)
- HyperTransport™ Technology 3.0
- 1 or 2 CPUs supported: both are AMD Opteron 6272 2.1GHz 16 cores per CPU (32 cores if selecting 2 CPUs)
- 6.4 GT/s per link (triple link)
- AMD SR5690
- AMD SP5100
Memory compatibility (with libreboot)
- Total Slots: 16 (4-channel per CPU, 8 DIMM per CPU), ECC
- Capacity: Maximum up to 256GB RDIMM
- Memory Type that is compatible:
- DDR3 1600/1333/1066/800 UDIMM*
- DDR3 1600/1333/1066/800 RDIMM*
- Compatible sizes per memory module:
- 16GB, 8GB, 4GB, 3GB, 2GB, 1GB RDIMM (we use 16GiB modules)
- 8GB, 4GB, 2GB, 1GB UDIMM
- Total slot: 6
- Slot Location 1: PCI 32bit/33MHz
- Slot Location 2: PCI-E x16 (Gen2 X8 Link)
- Slot Location 3: PCI-E x16 (Gen2 X16 Link), Auto switch to x8 link if slot 2 is occupied
- Slot Location 4: PCI-E x8 (Gen2 X4 Link)
- Slot Location 5: PCI-E x16 (Gen2 X16 Link)
- Slot Location 6: PCI-E x16 (Gen2 X16 Link), Auto turn off if slot 5 is occupied, For 1U FH/FL Card, MIO supported
- Additional Slot 1: PIKE slot (for SAS drives. See notes above)
- Follow SSI Location#
- SSI EEB 3.61 (12″x13″)
- Fan Speed Control
- Rack Ready (Rack and Pedestal dual use)
- SATA controller:
- AMD SP5100
- 6 x SATA2 300MB/s
- 2 x Intel® 82574L
- Onboard: Aspeed AST2050 with 8MB video RAM
On board I/O
- 1 x PSU Power Connector (24-pin SSI power connector + 8-pin SSI 12V + 8-pin SSI 12V power connector)
- 1 x Management Connector , Onboard socket for management card
- 3 x USB pin header , Up to 6 Devices
- 1 x Internal A Type USB Port
- 8 x Fan Header , 4pin (3pin/4pin fan dual support)
- 2 x SMBus
- 1 x Serial Port Header
- 1 x TPM header
- 1 x PS/2 KB/MS port
Back I/O ports
- 1 x External Serial Port
- 2 x External USB Port
- 1 x VGA Port
- 2 x RJ-45
- 1 x PS/2 KB/Mouse
- CE, C-Tick, FCC(Class B)
- Operation temperature: 10C ~ 35C
- Non operation temperature: -40C ~ 70C
- Non operation humidity: 20% ~ 90% ( Non condensing)
- 1 x User’s Guide (notes for Libreboot and Trisquel, and information about the hardware)
- 1 x I/O Shield
- 6 x SATA 3G Cable(s)
- CPU temperatures
- Fan speed (RPM)
- * DDR3 1600 can only be supported with AMD Opteron 6300/6200 series processor
The product picture of the 1u case is a representation only. The final product may look different, but it will be similar. The same applies to the picture of the tower E-ATX case.