Update hardware recommendations for SVS

[zenmonkeykstop]

the SVS requires a fully airgapped machine, preferably a laptop to avoid the use of peripherals. Laptops with removable networking cards are becoming rarer, so we should identify viable candidates and update our recommendations.

[zenmonkeykstop]

Some thoughts...

Current reccos are not great:

• T420s are long gone
• NUCs are on the way out and models without integrated wifi are rarer now.

Potential selection criteria:

• ability to remove wireless card (duh)
• availability on reasonable timescales via consumer retail or procurement channels
• anti-tampering options? (some thinkpads do have this)

[zenmonkeykstop]

team discussion:

• can remove specific models
• describe criteria in this ticket
• update docs based on consensus in issue

[nathandyer]

After reviewing a relatively large set of possible options, I find myself a bit dismayed at the state of the Linux-friendly laptop market in 2024, with a couple notable outliers that give me hope.

The most obvious candidates for SVS systems would be to continue recommending a Thinkpad model, as we have traditionally done in the past. That being said, I personally can't recommend that we continue to suggest Thinkpads. Although the Linux compatibility that we need is largely still there, the hardware itself is continuting to be far too locked down to serve as an air-gapped SVS. The ThinkPad T14 Gen 4 has a soldered wireless card, which makes it a non-starter as an SVS. As an aside, it also has soldered RAM, which I also think detracts from its usability in this case (in the event that memory goes bad, downtime is significantly reduced if all that needs to be done is slapping a new stick of RAM in it).

Generally, the same goes for the rest of the ThinkPad line, including the X1 Carbon Gen 12, and the P14 Gen 4. Given those limitations, and the increasing cost of the systems, I don't think they're a good fit.

Most of the "traditional" laptop vendors are trending the same direction, or have systems that either don't work on Linux, or that have not been sufficiently tested. There are vendors like System76 and Purism that have options that might be of interest, but there are supply chain and support considerations to be had there as well.

After everything, I think there are two reasonable routes we can go. One, which is not a surprise to anyone, would be the Framework. Although they are designed to be expandable, the expansion ports are just USB-C based, which any other laptop would have on-board as well. Given this, I don't see them as having any inherent risk greather than any other model that incorporates USB (either A or C). Having them embrace opening the laptop, and making it so the wireless card (and any other peripherals) can be completely removed make it a good choice for an SVS. And Linux support is something that they are specifically interested in, and actively test.

The other recommendation is probably going to be surprising, but I think the recent Dell Inspiron line has a lot to say for itself. They are easy to open up, the wireless cards are removable, there are no built-in ethernet ports, and Linux works flawlessly with them (I personally have an Inspiron 7425 where everything functions perfectly, even tricky stuff like fingerprint readers). And from my research, even the more recent models continue this trend. That fact, paired with the wide distribution, relatively low cost, and the ability to walk into big box stores to purchase them off-the-shelf, makes me think that for this specific application, the Dell Inspiron line may actually be the overall best choice.