This device works great for me as a PFSense host, but it's support for CoreBoot is limited to using binaries provided by the vendor, and there is no support for users making their own CoreBoot builds from source.  For me, this defeats the purpose of paying extra for a device that supports CoreBoot, as I have no more trust in the integrity of Protectli's builds than I do of any other vendor.  It's a binary blob that could be doing anything under the covers, no different than standard AMI BIOS.  I want to be able to build my own from source.I interacted several times with the Protectli on this topic, and to their credit, they were quite responsive to my emails.  They use a contractor/partner to do their CoreBoot builds, and I got the impression that they don't quite understand the CoreBoot ecosystem.  I don't think they believe that they are allowed to offer full support for customers doing their own builds (redistributing Intel FSP binaries is an example of one of their concerns).  I don't believe this is the case, as vendors do offer their customers the ability to perform their own builds.In the end, I ended up bricking a device using the tip of the Coreboot master branch.  Protectli allowed me to send it back and the reflashed it within a few days.  I was then able to get an older CoreBoot revision to build and install correctly, and have been using that for about the last year.  The Git hash of that revision was 7896b8ce59f88d7cd65bf7c9dfc3f9b1f9f2c640, in case anybody wants to do something similar.Bottom line, this is a great little device for running PFSense, if you can stomach it's price (which seems to go up every month or two of late), and aren't turned off by having to only use vendor provided binary BIOS builds.