I’m thinking of picking up an old HP Microserver (gen8) and was wondering if it is a bad idea from a security standpoint.
I mean it’s only 10 years old - is there any exploit or something like that?
What about a N36L Microserver?
I’d probably run Debian headless on it.
I’d only use it for Syncthing and as a backup NAS.
UPDATE
Everybody made really good arguments against the microserver and I won’t be getting one. Thank you for your inputs
With hardware like that the main issues are power inefficiency and (often) lack of UEFI support making it hard to install modern distros on them.
Otherwise there should be mitigations for the CPU issues, so unlikely that it will be a real issue from the security perspective.
Its not worth the energy cost, honestly. Plus you’ll be quite limited on memory, which reduces the potential uses. Any $200 minipc from the last 5 years would be a better buy.
They’re pretty slow, come with less RAM and replacement parts have become more expensive, because they’re not as available as ones for modern computers. Also my N54l consumes like 45W in idle…
I wouldn’t spend money on one, today. You can probably get something way faster and more capable for less money. Security isn’t an issue though. That mostly depends on the operating system you put on it, not the hardware. The security issues in the processor and such, should have been fixed by microcode and software updates.
So I still have one from back in the days. But I wouldn’t run it 24/7. I’ve built a small server like 8 years ago that consumes a third of the power and is far better in every regard. I use the Microserver to store backups and just turn it on every few weeks. But interacting with it feels sluggish and copying files over USB 2.0 takes hours and hours. It doesn’t feel like it can make use of the Gigabit ethernet, and it took me some effort to install because you need to do additional things, patch the BIOS to unlock full SATA speed.
Get one if it’s free and electricity is cheap whereever you are. But don’t spend too much money on an really old computer. The sweetspot of buying used computers is somewhere around 5 years, not 15.
Uh, that really depends on the use-case.
I like to follow the recommendations of the German PC magazine c’t: https://www.heise.de/ratgeber/Bauvorschlag-fuer-einen-sparsamen-Heimserver-aus-c-t-3-2024-9587594.html
Other than that: An Intel NUC, one of those cheap chinese Mini-PCs from Amazon where you get 16GB of RAM, a fairly recent processor generation and 512GB SSD for like $250 or my advice: get a refurbished laptop for $250. That’s energy efficient by design and has everything on board. And available in abundance.
Downsides of these approaches: You don’t get a lot of SATA ports for harddisks, if at all… So for storage, I wouldn’t consider those. So it’s gonna be an old PC, Server or NAS. Comparing mainboards and energy efficiency isn’t easy. That’s why I rely on PC magazines. But that’s for new stuff… Not used components. So tipps from the internet are probably your best bet.
If you’re not from a country where electricity is that expensive, you might want to have a look at some of those refurbished PC shops. An server or a Dell Workstation from 5 years ago should be affordable.
I’ve had N40L and N54L, still running one, and I would absolutely not suggest buying one. They’re too old and underpowered, and they’re honestly quite inconvenient to service. If you get one for free, then sure, but if you’re going to spend money, you can get something cheap, more powerful, and easier to work on, like a used optiplex.
I was just thinking yesterday that I should replace my one remaining N40L instead of waiting for it to die.
I got one 1-2 years ago for ~250€, with a Xeon and 4GB of RAM.
I use it as a “NAS on steroid”: basically a NAS-like storage + data processing server (Paperless-NGX, downloader (games I bought on DRM free stores + Usenet), Syncthing middleman…)
It’s exactly what I wanted (with the limitation I had) so it’s perfect for me (it’s still on the 4GB of RAM and I don’t need more even with the dozen of container I run).
If the form factor is irrelevant for you, just get the equivalent tower (normal HP Proliant Gen8, or something more recent) for half the price with the same spec, you’re paying basically double for the MicroServer form factor.
From a security standpoint, it’s irrelevant. Yes the CPU are vulnerable to all the shitty Intel flaws (that Intel thought would never be discovered), but they’re all solved via kernel mitigation (that cost you 50% of the performance the CPU originally had)
Be warry of 3 things if you buy it:
-
Finding the cable to use an SSD in the ODD slot is harder than you think (only a single brand make it), it’s also harder than you think to configure the raid card to use it (and it sometimes but rarely resets) - this is only relevant if you want to use that slot
-
First 2 sata slots are SATA3, others 2 are SATA2 (and they’re not fast), ODD slot is SATA2, I think, I might be wrong
-
The motherboard chipset has a bug: you must disable one of the virtalization option (I don’t remember which) if you virtualize / run a RDP docker container, otherwise the system will freeze after 30-1h of running said virtualized stuff in the background (took me days to find the solution, it’s not documented anywhere on the internet except for like one place)
