Hello. Many of the older thinkpads were regarded as being peak for the ability to repair and easily see into them at both the hardware and software levels.
I was wondering, what PC, if any, is similar in this regard? Aside from building your own PC ofc. Any opinions are welcome. Thank you.
Well, I haven't been in an HP in a long time, but them forcing proprietary ink in their printers or bricking it is enough for me to not buy their computers as well (laptops or desktops).
I have had several used dell / hp motherboards, the only thing proprietary was that some were 12V only and needed a 6 usd adapter to work with regular atx psus.
And also the power button connector, you have to figure out which pins are the ones that turn the PC on.
Lenovo ThinkPad T14 Gen 3
2022
PROS
Most repairs are very straightforward and require only basic tools.
The keyboard replacement procedure is best in class.
CONS
Partially soldered memory and I/O ports hinder certain repairs.
It scores 7/10 on their repairability meter. Definitely not the best, but far from the worst.
I own a Dell T1650 and Dell Optiplex 9020, and yes you are correct about them making everything proprietary, but the motherboard can still be used as long as you have the adapters for it. You will need to DIY, or buy a custom cable from a vendor that makes them for the motherboard. I use a Dell Optiplex 9020 MT motherboard in my NZXT case, I use a EVGA 700BR, a custom 24 pin to 8 pin connector, and a molex to fan adapter cable for my other fans, and everything works great! Also, I added Libreboot support for it as well :D
You can absolutely repair with off the shelf parts, dell will sell you just about anything and will probably have it in stock for years, that's literally what they do. What they typically don't do is conform to consumer form factors/standards.
Are you talking about a pre-built PC that has decent repairability? If so you'd really just want to avoid brands that use proprietary or irregular parts. For example Dell Optiplex computers can be bought cheap but they use their own power supply and some have smaller cases that might not fit most graphics gards.
Is there any reason you are posting this to a privacy community? Were you hoping for something that is Libre/Core boot compatible like some ThinkPads are?
I was looking for something that I'm confident doesn't spy at the hardware level.
I used Thinkpads as an example because after the early 2010 ones, they got those weird i7 (I believe) processors and we don't know much of what they do but some speculate they record keystrokes and phone data home.
What PC can you trust has good hardware in privacy? I don't want to buy a PC and run Linux, trying my best, and the thing spies at the hardware level.
They absolutely do not record keystrokes and phone that home. You’re talking about the Intel Management Engine, which is completely useless to almost everyone, but there’s no evidence that it spies on you. There have been security vulnerabilities found in it that could let someone else compromise your system (notably: only if you’ve provisioned Intel Standard Manageability), but there is practically zero chance that Intel is doing that or even selling that sort of capability.
Well you can find a list of Libreboot compatible hardware here. I feel like your biggest issue, especially if you are relying on a prebuilt Windows PC, is all the bloatware they come with on top of Windows itself.
Then all you need is to network <insert worst computer EVER> through an OpenWRT router. No matter how bad the ring access is for Intel ME or AMD PSP or whatever else, all of it is stopped on your network router. No amount of spying paranoia or folklore bypasses that.
You can buy any computer in the world with this strategy/method, even something CIA or MI5 themselves manufactured.
If you are not a top secret journalist or activist talking to some high profile entity, or someone running a leaker or drug website on darknet, you are going to be just fine with Linux on a ThinkPad, with (Medium mode) uBO/Firefox, a good systemwide HOSTS ruleset, GUFW turned on and a decent DNS provider.
I should just add that even though I am one of the fiercest critics of USA and its entities, NSA does not get constant access to your keystrokes or other stuff. The amount of data transmission for it would be staggering and noticeable instantly, even if we assumed they hypothetically collected such text data, compressed it as TAR.GZIP and sent it. The main function of Intel ME is for enterprise management and remote control of computers by businesses.
While I agree, it's hard to find a cheap and reliable laptop that's not a thinkpad. The keyboards have suffered and some of the models are harder to repair. But they're still spill proof, tough, and have lots of ports. I don't regret my thinkpad t14 gen 3 purchase. I might get a thinkpad t14 gen 2 soon.
I got my PC built for me by a local computer shop for $100. Worth it to me for the time it saved plus they did a 24 hour stress test on it to make sure all the components worked.
There is no "budget option" if you value repairability, nor has there ever been. The best you can do is buy a secondhand ThinkPad or other workstation laptop. If you don't like that option, make more money.
Are you looking for a laptop or a desktop machine?
Framework laptops seems kinda cool but they don't ship to me yet so I have no personal experience. https://frame.work/
Many computer stores offer to build your computer from parts for a fee, that would give you the custom PC without building yourself.
Can recommend a framework as a laptop. It also allows you to just use the motherboard as a standalone machine. But it being laptop hardware and only having one m.2 slot might be a deterrent for OP.
For a laptop, Framework is absolutely peak for repair and upgradability. They even offer newer generation motherboards that continue to work with older generation framework laptops. Enabling you to upgrade the core components while not having to rebuy the chassis, monitor, etc.
For a desktop, either build one yourself or buy from one of the companies that assemble it for you. Companies like Maingear.
A friend of mine once had fancy thin Fujitsu computer with all sorts of non-standard shenanigans. Upgrading anything other than the HDD (yes, it was many many years ago) and RAM was a complete nightmare. In the end, it was easier to sell the whole thing and spend to money + some extra on a better computer.
If you're interested, the Dell T1650 is currently supported by Libreboot. I use it for everything; it has a Xeon E3 1275 V2, 32GB DDR3L ECC RAM, NVIDIA 2080 SUPER, 2x4TB HDD (RAID 1), 1TB NVMe M.2 (PCIe x4 adapter needed), and a 700W PSU (EVGA 700BR). It handles all my games, and I use Proxmox VE as my host, allowing me to create virtual machines where I can passthrough my GPU and use anything proprietary in the VM. Even the GPU drivers can be passed through (no need to install on the host), so essentially, I'm running 100% free software on my host.
Obviously, nothing can be 100% FOSS in the hardware (proprietary ECs, proprietary CPU microcode, proprietary storage firmware, etc.), BUT you can free the BIOS. There is currently a blob needed for the PCIe x16 slot, but it can be reverse-engineered in the future – not sure if there is anything else; I'll have to ask. There is one board coming soon that I know can be made blobless in the BIOS, and that is the Dell Optiplex 9020 MT. It's a Haswell board capable of using an i7 4790K with AVX2 instructions. I'm actually the first person to use this board, as I'm the one who made the port along with some help from the Libreboot team. The board is currently in its testing phase still, but soon in the next couple weeks we will make it freely availble.
This is super cheap hardware; you can find the whole PC on eBay for like $50-$60, or you can just buy the motherboard for like $15-$25. I bought only the motherboard because I'm using it in my gaming computer case. Also, you don't even need any fancy flashing equipment, all you need is a insulated screwdriver to short one of the SERVICE_MODE pins on the motherboard to unlock the BIOS chip, which then allows you to flash Libreboot through your OS. Libreboot is more secure than any non-free BIOS/UEFI. At least with Libreboot, you can have transparency, and you get new updates with better features coming out.
For example, Libreboot supported Argon2 encryption in GRUB for fully encrypting your storage drive. This allows you to encrypt the /boot partition and fully encrypt your disk with ease when installing a fresh operating system. Also, you can run Windows on the host with Libreboot, it is supported but not officially. I highly recommend Libreboot, as you can tell.
Honestly, any enterprise OEM will be similar, such as Dell or Lenovo. Yes, their mainboards are proprietary, but you can easily source them from legitimate parts vendors. That's why there are so many refurbished Optiplexes and ThinkCentres on Amazon. They're trivial to repair and most don't even require tools.
You cannot easily upgrade to a dedicated GPU unless replacing an existing unit, which is standard for laptops as well.
I don't have a recommendation but I can point you to Gamers Nexus YouTube channel / website and filter on prebuilts to see reviews.
Big names like Dell HP and Lenovo are bad for ability to repair/upgrade. Although I do love buying their old servers because there are so many cheap ones on eBay.
All respect to Steve, but in this regard he's wrong - the parts might be proprietary in a lot of regards, but these machines are repairable af, they're just not aimed at the average consumer. Local site support will rock up to your desk and stick a new display adapter in for some extra monitors or take them away and swap out broken parts and have the same PC on your desk next day. Big enterprises buy these machines precisely because they're repairable and upgradable and getting stock typically isn't an issue.
That only applies to a large corporation with contracts.
and upgradable
If it's not something that can go in a slot for Dell HP and Lenovo there is no upgrade. They aren't going to swap an upgraded CPU because Dell doesn't do official bios patches to upgrade old PC's to cpus that come out later. Nor can you get a new motherboard dropped in an old Dell/HP/Lenovo chassis because of the power supply requirements/changes.
Edit: I couldn't even put a modern GPU in my old Dell Xeon because the power supply didn't put out the watts. I had to find a weird Dell to ATX converter cable off of eBay and Dremel the Dell case a little so the regular ATX would fit.
Are you under the impression that PCs and laptops are different? Because they're not. The word you are actually looking for is "desktop", but OP didn't use that word.
Custom PCs are one, but if you want to get mainstream off the shelf, Lenovo is where it's at. Lenovo has the best aftersales, best customer support, you do not pay the proprietary Apple/Dell tax, and you can considerably modify your PC hardware. M Though beware, your PC will have a hard time getting onsite customer service after 10ish years. Anything under 7-8 and it will stay easy, mostly because new generation of PC components make old ones hard to procure.
This Lenovo AIO we have is 13 years old, last month dualboot installed Debian 12 alongside Windows 7. 7 is untouched due to legacy hardware and peripherals, made an image backup, installed Kaspersky Free and an anti-executable and it chugs well. Debian 12 GNOME runs really well on 4 GB RAM, though just another 4 GB would really improve things. Not even SSD is needed, just a HDD replacement after 13 years.
Dell Optiplex... You can buy them used all over still. Find one with a decent processor and upgrade everything else. The fans are easy to find and replace. I've got a Linux based MCPC that's about a decade old that's still going strong. I've got one for my kids with Linux on it. I've bought several for elderly relatives and upgraded the ram and drive to ssd. They really just seem to go forever.