If you can get an old final-intel-gen MBP in decent nick, they can make pretty decent Linux machines if you’re okay with not being able to do any internal hardware upgrades.

tiny-dfr is your friend if you happen to get one with that touchbar F-row, which is probably the only big downside compared to a conventional laptop.