Tricks with boot process
Published here.
Microsoft Finds Another Excuse to Block GNU/Linux
Summary:
T
Well, in a blog post that we mentioned a couple of days ago,
...
"Microsoft could lock out Linux with Tivoization" was Homer's (Slated.org) explanation. He pointed out that "The upshot is that in order to run Linux on machines with UEFI secure boot enabled, the new bootloader, kernel and all other binaries must be signed by a key that is accepted and distributed by the OEM. In practice this means Linux will only run on machines that are either preinstalled with Linux by the OEM, or on machines where UEFI secure boot is not enabled. Given Microsoft's demands, the latter seems unlikely, and the former would essentially spell an end to Linux (or any other OS) users having any sort of autonomy WRT which distro they use, on the extremely rare occasion Microsoft's subjugated "partners" even bothered to preinstall Linux at all. On most machines, Linux would simply be locked out entirely.
"If this does pan out the way I'm sure Microsoft would like it to, our only hope is for antitrust regulators step in and force OEMs to allow consumers to opt-out of UEFI secure boot, to enable them to install whatever they want on their own damned property.
"This is by far the biggest threat to consumers' freedom and choice we've yet seen on PCs. It literally turns the keys to the entire PC industry over to Microsoft.
"I wonder how much Linus "likes Tivoization" /now/?
Sam Varghese writes
Sean Michael Kerner
Sam Dean apologises or gives the benefit of the doubt to Microsoft
"It's highly doubtful this will end up being a concern when the final version of Windows 8 comes to fruition. Microsoft has become increasingly aware that IT administrators are interested in heterogenous environments where many people want to use multiple operating systems. We've also noted that Windows 8 is taking some of its cues from Linux. It's not in Microsoft's best interest to box out alternative operating systems."
gentle headlines exist as well and they come from the expected sources. Microsoft boosters try to belittle the problem, whereas Linux advocates do not. Based on antitrust material we know that Microsoft often does this knowingly and deliberately, based on internal communication.
"This was discovered by Linux developer Matthew Garrett, who's been doing a lot of work with EFI booting in general for his day job. Recent UEFI specifications have allowed for "secure boot" that requires an OS to have a signed key in system firmware to work."
Mr. Corbet summarises
Katherine Noyes,
Steven J. Vaughan-Nichols
Microsoft tries to block Linux off Windows 8 PCs
"Microsoft must clarify the Windows 8 boot spec and how it impacts Linux"
█
Microsoft Finds Another Excuse to Block GNU/Linux
Summary:
T
MICROSOFT loves blocking or suppressing GNU/Linux installation, typically using a process it keeps describing it as a feature. Microsoft has been sabotaging the MBR using the [cref 16965 excuses] that it is [cref 51830 hard] [cref 48120 to support it] (funny how one or two GRUB developers can handle it fine). There is antitrust evidence about it [cref 6163 going decades back] and there there is the war on [cref 3448 fast] [cref 4553 booting] [cref 4097 systems] and battles against Linux using VM restrictions (fighting Linux with a Windows EULA). We have covered many such examples, even those that [cref 4080 extend to ACPI].
Well, in a blog post that we mentioned a couple of days ago,
...
">http://www.theregister.co.uk/2011/09/21/secure_boot_firmware_linux_exclusion_fears/"> Computer scientists warn that proposed changes in firmware specifications may make it impossible to run “unauthorised” operating systems such as Linux and FreeBSD on PCs.
Proposed changes to the Unified Extensible Firmware Interface (UEFI) firmware specifications would mean PCs would only boot from a digitally signed image derived from a keychain rooted in keys built into the PC. Microsoft is pushing to make this mandatory in a move that could not be overridden by users and would effectively exclude alternative operating systems, according to Professor Ross Anderson of Cambridge University and other observers.
"Microsoft could lock out Linux with Tivoization" was Homer's (Slated.org) explanation. He pointed out that "The upshot is that in order to run Linux on machines with UEFI secure boot enabled, the new bootloader, kernel and all other binaries must be signed by a key that is accepted and distributed by the OEM. In practice this means Linux will only run on machines that are either preinstalled with Linux by the OEM, or on machines where UEFI secure boot is not enabled. Given Microsoft's demands, the latter seems unlikely, and the former would essentially spell an end to Linux (or any other OS) users having any sort of autonomy WRT which distro they use, on the extremely rare occasion Microsoft's subjugated "partners" even bothered to preinstall Linux at all. On most machines, Linux would simply be locked out entirely.
"If this does pan out the way I'm sure Microsoft would like it to, our only hope is for antitrust regulators step in and force OEMs to allow consumers to opt-out of UEFI secure boot, to enable them to install whatever they want on their own damned property.
"This is by far the biggest threat to consumers' freedom and choice we've yet seen on PCs. It literally turns the keys to the entire PC industry over to Microsoft.
"I wonder how much Linus "likes Tivoization" /now/?
Sam Varghese writes
">http://www.itwire.com/opinion-and-analysis/open-sauce/49889-will-windows-8-succeed-in-locking-out-gnulinux"> Is Microsoft finally resigned to the fact that Windows can never again be the dominant operating system on our planet? Or is the behemoth planning to make one final attempt to control what you use?
Sean Michael Kerner
Sam Dean apologises or gives the benefit of the doubt to Microsoft
"It's highly doubtful this will end up being a concern when the final version of Windows 8 comes to fruition. Microsoft has become increasingly aware that IT administrators are interested in heterogenous environments where many people want to use multiple operating systems. We've also noted that Windows 8 is taking some of its cues from Linux. It's not in Microsoft's best interest to box out alternative operating systems."
gentle headlines exist as well and they come from the expected sources. Microsoft boosters try to belittle the problem, whereas Linux advocates do not. Based on antitrust material we know that Microsoft often does this knowingly and deliberately, based on internal communication.
"This was discovered by Linux developer Matthew Garrett, who's been doing a lot of work with EFI booting in general for his day job. Recent UEFI specifications have allowed for "secure boot" that requires an OS to have a signed key in system firmware to work."
Mr. Corbet summarises
">http://lwn.net/Articles/459569/"> Matthew Garrett has posted an article about the UEFI "secure boot" feature and its potential impact on Linux.
Katherine Noyes,
Steven J. Vaughan-Nichols
Microsoft tries to block Linux off Windows 8 PCs
">http://www.zdnet.com/blog/open-source/microsoft-tries-to-block-linux-off-windows-8-pcs/9572"> If this wasn’t so sad, it would be funny. After Microsoft recently declared victory over Linux, it turns out that Microsoft appears is still trying to arrange it so that Linux won’t even boot on the next generation of PCs that come with Windows 8. Yeah, Linux isn’t on your enemy list anymore right Microsoft? Sure.
Matthew Garrett, a Red Hat engineer, gets the credit for spotting Microsoft’s latest anti-Linux move. In a blog posting, Garrett explains that Windows 8 logo guidelines require that systems have Unified Extensible Firmware Interface (UEFI) secure boot enabled. This, in turn, would block Linux, or any other operating system, from booting on it.
There’s nothing in UEFI that’s wrong. Indeed there’s a lot of good in UEFI. It’s a 21st century replacement for your PC’s basic input/output system (BIOS). Its job is to initialize your hardware and then hand over control over to the operating system.
">http://www.desktoplinux.com/news/NS6948856710.html?kc=rss">
Microsoft cheered Windows users earlier this month when it demonstrated the upcoming Windows 8 operating system booting in eight seconds. Part of the technology behind the fast boots, however, could enable Microsoft and its PC vendor partners to block users from loading Linux on a Windows 8 PC, according to a Matthew Garrett, a mobile Linux developer at Red Hat, writing in a Sept. 20 blog post.
"Microsoft must clarify the Windows 8 boot spec and how it impacts Linux"
">http://thenextweb.com/microsoft/2011/09/21/microsoft-must-clarify-the-windows-8-boot-spec-and-how-it-impacts-linux/"> This is not a small issue. If Microsoft does attempt to make it impossible for the average consumer to install and run Linux aside of Windows 8, it will lose whatever inroads that it has made with developers in the past few years. Even more, it’s restrictive and could open the company to even more anti-trust scrutiny.
Perhaps there is no issue. It could be that Microsoft has foreseen this issue and has a workaround (at worst). But we don’t know, because Microsoft won’t tell us. They will, but the company will have suffered from its reticence to not pipe up with the truth.
█