The Thunderbolt Security Daemon
In Ubuntu Linux, boltd is a background system daemon that manages Thunderbolt 3 and Thunderbolt 4 devices. Thunderbolt is an incredibly fast hardware interface, but because it allows direct access to the system’s PCIe bus (PCI Express), it presents a significant security risk known as a DMA (Direct Memory Access) attack. To mitigate this, boltd requires you to explicitly authorize new Thunderbolt devices before they are allowed to interact with the operating system.
While this security layer is crucial for modern laptops that frequently connect to public or untrusted docks, the boltd daemon is completely unnecessary on hardware that does not possess a Thunderbolt port. If you are running an Ubuntu server in a rack, an older desktop PC, or a virtual machine, running a background daemon to monitor non-existent Thunderbolt hardware is a waste of memory and CPU cycles. To optimize your system, you should disable it.
How to Disable the Boltd Service
You can permanently stop this Thunderbolt management daemon using systemctl.
Warning: Only perform this if your computer does NOT have Thunderbolt 3 or Thunderbolt 4 ports (USB-C ports with the lightning bolt symbol). Disabling this on a Thunderbolt-equipped machine will prevent you from authorizing new docks or external GPUs.
- Open your Ubuntu Terminal or connect via SSH.
- Stop the active service if it is currently running:
sudo systemctl stop bolt.service- Disable the service to prevent it from starting automatically on the next boot:
sudo systemctl disable bolt.service- To ensure no other hardware discovery tools attempt to wake it up, mask it completely:
sudo systemctl mask bolt.serviceYour Ubuntu system will immediately stop monitoring for Thunderbolt device connections, slightly improving boot times and freeing up resources on incompatible hardware.