[hparadiz]

I think it's a feasible option I just can't use it for work because here's how that goes:

> "Hey can you remove MDM from this Macbook so I can install Linux?"

No.

> "Hey can I get a linux laptop for a hardware refresh?"

Sure.

Asahi on an M2 Macbook Pro supports almost everything https://asahilinux.org/fedora/#device-support

[wat10000]

Almost everything, and that's already three generations behind.

[hparadiz]

I don't really need USB-C displays or Thunderbolt for my use case. The touch ID is easily replaced with a Yubikey.

Everything else just works. What is the problem?

[Rohansi]

Sounds great for you! What about everyone else?

Many people prefer to get new devices so that they can be covered by Apple Care. That completely removes Linux as an option because Asahi Linux never supports any of the recent models.

[MarsIronPI]

Many people don't care about Linux support in the first place. Generally these two groups are overlapping.

[wat10000]

"Buy this computer, it's several generations behind and a bunch of stuff doesn't work" is not a ringing endorsement, even if it does work well enough for you.

[hparadiz]

I still do all my work on an M1 MBP ¯\_(ツ)_/¯

[Modified3019]

That’s wonderful for you and apple.

[Melonai]

What does Apple gain from this scenario?

Just to add, I also do my work from an M1 MacBook that I crammed Asahi onto. I got it used for a few hundred dollars last year and it's a perfectly fine experience (for me).

[luipugs]

Same. If not for the required hardware refresh in our company I would have used it until it broke.

[GeekyBear]

USB display support was demoed at a conference at the end of last year.

[Shank]

We’re already almost halfway through this year. A demo half a year ago isn’t shipped. This is like when Apple demos something at WWDC that doesn’t ship until 9 months later in spring the following year.

[GeekyBear]

A patch set landed shortly there after.

https://asahilinux.org/2026/02/progress-report-6-19/

[curt15]

"Hey can you remove MDM from this Macbook so I can install Linux?"

Is there no MDM for Linux clients? How do the big tech companies with Linux developer machines (Google, Facebook, etc) manage their inventory? Do they roll their own MDM?

[michaelt]

IT departments can mandate tools like ninjaone and kolide, which let them run queries across the fleet of devices, and (as I understand it) basically gives them root-level remote code execution.

The corporate VPN (or equivalent) can then perform 'posture checking' requiring that the tools be installed and working before connecting to the corporate network.

Obviously, 99% of Linux users have root on their device so nothing stops them wiping it and installing something new from scratch. But then they'll fail the posture checks until the device is returned to the approved setup.

[hparadiz]

Kolide admin provides a web UI for osquery so you can query things. It allows remote osquery queries but not remote code execution. You generally pair it with CrowdStrike Falcon.

Kolide does a spot check like "is falcon sensor running" but if the user logs in, has the session token created, and then disables whatever the session token would still be valid.

Also Kolide doesn't actually count as an MDM. Has a bunch of missing features. I recently evaluated it.

[pjmlp]

Failing compliance in many jobs isn't a simple "ooops, sorry".

[hparadiz]

It's a nudge. Like "update your OS". You could also just be logging into a machine after a few weeks away. The software tells you what you need to update before letting you in.