@darius since you mentioned secure boot on the X1, note that there is a WONTFIX security issue related to the MOK key that DKMS generated that allows a local adversary to sign new kernel modules and bypass lockdown protections. bugs.launchpad.net/ubuntu/+sou