On choosing the machine where the real work happens.

the phone is not the workshop#

I run GrapheneOS. No SIM. No eSIM. Radios off by default. By most measures, it is the most hardened daily-carry phone you can run outside of a classified environment. And it is still, at its core, a communication device. It responds. It receives. It fits in a pocket and reacts to the world.

The laptop is something else entirely.

A phone is the most surveilled object most people will ever own, and even when you have tamed it, it remains a window. The laptop is the workshop. It is where the infrastructure runs, where the writing happens, where the thinking goes deep enough to produce something. The difference is not processing power or screen size. It is intentionality. You open a laptop to do something. You pick up a phone because something found you.

When it was time to choose that workshop, I took it seriously.

linux is not an operating system#

Before the vendor, before the specs, before any of it: the machine had to run Linux.

I want to be precise about what that means, because it is not a technical preference. Linux is not an alternative to Windows or macOS the way a Ford is an alternative to a Toyota. It is a value statement. It is how a certain way of seeing the world expresses itself in the tools you use. Open. Auditable. Yours to inspect, modify, and understand completely. No black boxes. No licence that decides what you are allowed to do with your own hardware.

You do not choose Linux because it is trendy. You choose it because it is consistent with how you feel about ownership, about transparency, about who gets to make decisions on your machine. Everything else flows from there.

I will write more on this. Linux and FOSS deserve their own article, and that article is coming. But the laptop story starts here, because without this premise none of the rest of the selection process makes sense.

the landscape#

The table of Linux-friendly vendors is longer than most people expect. System76, Tuxedo, Framework, Slimbook, Star Labs, Purism, ASUS, Lenovo. Each with a different philosophy, a different trade-off, a different answer to the question of what it means to be Linux-friendly.

Ideally, I would have gone with fully open hardware. A platform designed from the ground up around a personal risk and threat model, open firmware, auditable supply chain, no proprietary blobs sitting in the management layer. That is the principled choice.

I decided instead to mitigate part of that risk at the OS and configuration layer. That decision shaped everything that followed.

Framework exited the shortlist early. Not on principle but on pattern. Too many reviewers reporting the same things: materials that felt unfinished, a build quality that hadn’t caught up with the ambition of the design. When n=1 experiences converge across enough independent sources, they stop being individual opinions and start being data. Framework didn’t survive that filter.

What remained: System76, and Lenovo ThinkPad.

the shortlist#

Non-negotiables going in: AMD CPU. Replaceable RAM and storage. Portability. A machine the wider Linux community had tested, broken, fixed, and documented thoroughly enough that the unexpected had somewhere to land.

Linux runs on almost everything, until it doesn’t. Until that late afternoon kernel panic with no obvious cause and no clear path back. I had done that before. I didn’t want to do it again on a machine I was depending on. Community-vetted meant someone had already been where I was going.

System76’s Pangolin made the cut despite being a 16" machine, which surprised me slightly. The AMD silicon was the reason. The Pangolin Pro is a serious piece of hardware, coreboot firmware, full repairability, principled from the ground up. I kept it in the list longer than the specs alone would justify because what it represents is genuinely worth respecting.

Lenovo’s ThinkPad line is a different kind of argument. Not philosophy. Thirty years of refinement. I already knew this family. Two X1 Carbon generations, a T480. I didn’t need reviews to tell me what a ThinkPad feels like. I knew. That familiarity changed the nature of the decision.

why the T14#

The T14 Gen 6 AMD, not the X1, not the T14s. The distinction matters. The X1 Carbon is locked into its specifications. The T14s solders components I want to be able to replace. The T14 Gen 6 has dual SODIMM slots, a replaceable NVMe, a swappable WiFi card. Nothing soldered that doesn’t need to be. Seven years from now I want to still be using this machine with upgraded RAM and faster storage, not shopping for a replacement because the memory ceiling was decided for me at the factory.

Cost was a real factor. Around 2000 NZD, which in New Zealand means navigating a government that taxes imported goods over 1000 NZD with quiet enthusiasm. A small bureaucratic indignity that says more about where priorities sit than any policy document could.

The firmware is not open source. I accepted that knowingly. The AMD Platform Security Processor is present and I cannot remove it. These are calculated risks, not oversights, and I’ve addressed what I can at the software layer, including enrolling my own UEFI keys. Microsoft does not get to decide what operating system runs on my machine. More on the specifics of that in a future field note.

living with it#

I have been using the T14 Gen 6 long enough to have an honest opinion.

What I said when I first described it to someone still holds: it is a man who hasn’t lost touch with his sensitive side but doesn’t lead with it. Physically capable without performing it. Present without demanding attention for being present. The ThinkPad doesn’t try to impress you at unboxing. It impresses you in month four. In the keyboard that is still exactly right after ten thousand keystrokes. In the hinge that opens one-handed and stays exactly where you put it. In the chassis that doesn’t flex when you pick it up by a corner. None of this photographs well. All of it is felt.

The AMD Ryzen AI 300 series is excellent Linux silicon. Pop!_OS and Fedora both run on it without chasing. I landed on Fedora as my daily driver, though I continue to watch the Pop!_OS and Cosmic story with interest. More on that in the FOSS article.

Two honest caveats. Battery life sits at six to eight hours, which covers my actual usage but leaves me occasionally wishing for more. And the 1080p IPS display is genuinely good, low blue light, correct colour, nothing to complain about, but 2K would have made this a perfect machine rather than an excellent one. These are known quantities I accepted going in. They remain the only things I’d change.

the workshop, open#

The phone is tamed. The workshop is chosen. The OS is running.

What sits on top of that, the tools, the infrastructure, the configuration that turns a good machine into a sovereign one, that is the ongoing work. And that work deserves its own space.

The FOSS article is coming. The field notes are accumulating. This is just where it started: with the decision that the machine where you think and build and write is worth choosing carefully, and that careful means something more than reading the spec sheet.

It means knowing what you stand for before you decide what you buy.