Topic: Cheap & silent mini PC for Bitcoin node & blockchain explorer? - page 2. (Read 1920 times)

Sure, there are several companies who are making laptops like this, for example MNT Reform, Pinebok, Librem, etc.
There are also some laptops with RISC-V chips, and I think in future we going to see more laptops with ARM chips, as alternative to Intel and AMD processors, they are cooler, more quiet and can be very powerful.

Not you and me certainly
There are developers who are willing to do this, maybe coming from OSWA.org aka The Open Source Hardware Association.

I get your point. But i mentioned Intel ME and similar stuff, since it's usually seen as security concern, security issue or even backdoor by security expert. And even if i and almost everyone doesn't audit the code, at least i know the company have some degree of transparency.

To some people everything, to others very little.
Personally I don't care much since I know there really is nothing I can do about it.

Between the CPU, support chipsets, BIOS and everything else there is no possibility of anyone knowing it all.
Some people feel open source is more secure, but even with things like Open SSH with 1000s of eyes on it you still have gaping holes
https://www.akamai.com/blog/security-research/2024-openssh-vulnerability-regression-what-to-know-and-do

-Dave

Who's going to check the inner workings of a processor, even if it's open source? Checking software sources is already too much for almost anyone. Even reading the licenses is far too much work. Realistically, how much does it matter if hardware is open source?

It's great laptop. But i would say it's mostly open source, since few discussion mention existence of Intel ME and similar stuff[1-3].

[1] https://community.frame.work/t/does-intel-chip-have-intels-management-engine/1260
[2] https://community.frame.work/t/intel-management-engine-me-active-management-technology-amt-instructions/6521
[3] https://community.frame.work/t/will-the-amd-version-have-the-amd-platform-security-platform/7403/6

maybe like this one or its variants?

https://frame.work/products/laptop13-diy-intel-ultra-1

It's much easier than i expected, considering size of the mini PC. I've seen few mini PC brands which require you separate the motherboard, fan and fragile/thin cable first before you can add/change SSD.


Do such laptop really exist? I've seen laptop claim being open source, while in reality only some parts is open source.

Safest way would be to fully flash and install open source BIOS like corebot or librebot, but that is only available for some limited number of Thinkpad laptop models.
Otherwise, you can consider all devices with normal BIOS firmware to have backdoor built inside, and that is a whole separate operating system inside of your BIOS.
There are some brand new laptops that are fully open source, but they are always available or they are not super fast.

The GMKtec NucBox G5 has one M.2 SATA 2242 slot. I replaced the 256GB SSD with a 2TB SSD. I could only find one manufacturer of a 2TB M.2 SATA 2242 SSD, so I went with that one. The SSD is accessed by removing the 4 screws on the bottom side. It's very simple to replace the SSD, but keep in mind that you also have to install an OS on the new SSD.

If it's one of these:
https://www.amazon.com/GMKtec-G5-Business-Computer-Ethernet/dp/B0CZRJL7JM
or these:
https://www.amazon.com/Beelink-Desktop-Computer-Support-Ethernet/dp/B0BVLS7ZHP

It's 4 screws and it comes apart. Very easy.

there are a bunch of variations based on the manufacturer but for the most part they have 1 x m.2 and 1 x SATA ports.
A few have 2 x m.2 and no SATA. I have not seen any with 2 x SATA

-Dave

The worst part are re-flashing the BIOS doesn't always guarantee Computrace (or similar stuff) removed permanently.


Just wondering, how easy or difficult to open and place the additional SSD on your mini PC?

So it's basically BIOS malware. If it can do this, it could also be used to steal your private keys.

I can top that: I'm a fan (pun intended) of quiet energy efficient laptops. If they don't even have a fan, there's nothing that can make any sound.

Back on topic ...


Previously, I had a RPi 4 node set up using the Raspibolt guide. It was slow and a little unreliable because the RPi 4 is not a very powerful processor. Problems with availability of the RPi 5 led me to buy the GMKtec setup that I mentioned above. As stability is a priority, I went with Debian Linux.

Here is my report.

TL;DR: It's a winner.

Setup

I followed the Raspibolt guide again because it generally works with any hardware setup and Linux distro. There were a few problems setting up because there are some small differences between Raspian and Debian. Minor deviations from the guide are necessary. The biggest problem was the difference between the default permissions for the /home directory. I was unable to install the OpenTimestamp client, but I didn't bother to figure out why because it is not required.

I was able to copy the block chain data from my RPi 4 node and so it only took several hours to get a fully synced block chain.

Operation

I am running Bitcoin Core, Lightning, JoinMarket, Electrum server, and a block chain explorer. Everything is directly accessible on my local network and externally through TOR. I control the node via SSH.

The new node is much faster and much more responsive than the RPi 4 node. I ran the RPI 4 node as a backup for a while in case there was a problem, but the new node has run so smoothly that I retired the RPi 4 node.

I like the internal SSD as I assume that it is much faster than a USB SSD. However, the G5 has a SATA M.2 interface and 2 TB SATA SSDs are not as common as NVMe, so that might be a consideration when choosing the hardware.

The node is silent. I hear the fan running for a few seconds only occasionally.

As I like to use used computer hardware that is mostly available for a good bargain, I always skim through BIOS settings to turn off unwanted features and get the device to good settings that I can rely on.

If possible I flash the last available BIOS firmware or try to re-flash it when the device is already on the latest available version (if possible it's necessary to flash an older version first). Reason for this procedure is: I want the firmware to be surely as published by the vendor.

I never use any pre-installed OS, especially not with an used device. I always wipe internal storage completely and install the OS new myself. Re-flashing BIOS firmware and wiping internal storage should get me rid of potential rootkits or other nasty stuff.

Its not just the OS it's the OS and BIOS settings.

You can wipe / replace the drive / whatever. If Computrace (and similar) are active in the BIOS is will follow to the new OS if the OS recognizes the fact that it's on and active in the BIOS it will use it.

So yes, you get a used machine, you replace the drive, you install an OS Windows or Linux that recognizes the security lock and you now have a paperweight.

And yes I keep calling it BIOS I know it's more UEFI but it's been BIOS to me for 40+ years so it shall always be known as that.....

Isn't tech fun.

-Dave

Are there still people who trust second hand operating systems without wiping it?

yeah pulling the hard drive/ssd is a must. linux is a good idea once you did that.

This might be a bit fringe issue but something to keep in mind when getting used make sure that things like Computrace and similar are DISABLED when buying and setting up a used machine.

https://www.youtube.com/watch?v=er9sAereb30

For the people that don't want to watch the video, guy bought a used PC, years later MasterCard who had previously owned it remotely disabled it. No idea if it was legit stolen or they messed up and never took it off inventory or some other reason. He had to wipe and install linux to make it work again, but this can put a large crimp in your day if you can't get into your node for some reason.

-Dave

So does the cia/nsa 

I don't know exact details about it and I don't own intel processor anymore.
If there is a passive cooling for processor than temperatures could go a bit higher, but I don't think running only bitcoin node be a problem.

I trust Dell, Lenovo or HP more than Wish.

From what I've seen, it's only a problem when they consume more than 65W. That's far more than the silent PC from this topic should consume.