Second, it would put Fedora in a "privileged position" because Red Hat provides one of the larger Linux distributions and has more leverage with hardware manufacturers. The company did not want to exploit that position at the expense of other Linux distros. "Systems with a Fedora key would boot Fedora fine, but would they boot Mandriva? Arch? Mint? Mepis? Adopting a distribution-specific key and encouraging hardware companies to adopt it would have been hostile to other distributions. We want to compete on merit, not because we have better links to OEMs," he wrote.
Another option: Developing an overall Linux key for all distros. Doing so is not feasible, according to Garrett, because it would require finding an entity willing take responsibility for maintaining the key. "That means having the ability to keep the root key absolutely secure and perform adequate validation of people asking for signing. That's expensive. Like millions of dollars expensive," he wrote. "It would also take a lot of time to set up, and that's not really time we had. And, finally, nobody was jumping at the opportunity to volunteer. So no generic Linux key."
Thus, Red Hat will likely go with what Garrett described as "the least worst" option: Developing a boot loader that will be signed by a Microsoft key via Microsoft's signing services. Registering the boot loader will cost Fedora a one-time fee of $99 -- which would go to VeriSign, not Microsoft.
Red Hat's first-stage boot loader will be a simple one with the sole function of loading a real boot loader. That, in turns, gets signed with a Fedora signing key. "Using the Fedora signing key there means that we can build grub updates in our existing build infrastructure and sign them ourselves. The first stage bootloader should change very rarely, and we don't envisage updating it more than once per release cycle. It shouldn't be much of a burden on release management," Garrett wrote.
Defending the decision, Garrett said that using Microsoft's key is "cheaper than any realistic alternative would have been. It ensures compatibility with as wide a range of hardware as possible and it avoids Fedora having any special privileges over other Linux distributions. If there are better options then we haven't found them."
Garrett's blog post has attracted more than 130 comments thus far, many critical of Red Hat's plans. "The minute a Linux vendor sells out -- like this -- is the minute we're all doomed," read one anonymous comment. "Microsoft will lead them on for a couple of years, and then quietly insist that x86 vendors comply with the same restrictions that ARM vendors have already kowtowed to -- at which point, only Red Hat Linux will boot and run. No others, at least not until all of the others also sign up and pay MS for permission to run non-MS software on end-user hardware."
Correction: This article has been corrected from its original version. Fedora is paying the one-time fee to Microsoft to run Red Hat on Windows 8 machines. Users will not have to cover the cost, as first stated.
This article, "Update: Fedora to pay service fee so users can run Red Hat Linux on Windows 8 machines ," was originally published at InfoWorld.com. Get the first word on what the important tech news really means with the InfoWorld Tech Watch blog. For the latest business technology news, follow InfoWorld.com on Twitter.