CERN switches accelerator control computers from Red Hat to Debian Linux

CERN, the laboratory that operates the Large Hadron Collider, is transitioning its accelerator control systems from Red Hat Enterprise Linux (RHEL) derivatives to Debian. The move was described by two CERN engineers, Federico Vaga and Nikos Tsipinakis, at the MiniDebConf Winterthur 2026 in Switzerland last month.

For over 20 years, CERN ran Red Hat-family Linux on the majority of its computers. Initially it used Scientific Linux, a joint effort with Fermilab that began in 2004. After Red Hat brought CentOS in-house in 2014, CERN switched to CentOS 7, expecting a stable long-term platform. However, in 2020 Red Hat cut CentOS 8's support from 2029 to the end of 2021, leaving CERN with a precarious upgrade path.

CERN plans its accelerator operations up to 15 years in advance, and many of its control computers are specialised embedded systems — including VMEbus single-board computers and custom monitoring hardware on parallel PCI cards. When evaluating CentOS Stream 9, CERN discovered that RHEL 9 (and thus CentOS Stream 9) requires a minimum CPU capability of x86-64-v2, which would eliminate 47 percent of the existing front-end computers. RHEL 10, released in 2025, further raised the bar to x86-64-v3, eliminating another 17 percent of remaining systems.

Replacing all affected hardware would require redesigning 11 custom boards, hiring additional engineers, and potentially digging new tunnels 100 metres underground. Engineers estimated the project would cost at least CHF 5.4 million ($6.7 million) and had only a 20 percent chance of success.

Instead, CERN evaluated alternative distributions along axes of control, maintenance burden, and integration with its existing platform. The organisation concluded that Debian offers the right balance, avoiding the hardware-forcing constraints of the Red Hat lineage while still providing the stability and long-term support CERN requires. The migration is now underway for the underground control computers, though the scale and complexity mean it will take time to complete.

CERN's shift is notable given the institution's history as a major Linux user and the birthplace of the World Wide Web. The decision underscores the challenges faced by organisations with very long hardware lifecycles when upstream distributions impose increasingly strict hardware requirements.

Why This Matters

CERN's migration affects one of the world's most complex scientific computing environments; success or failure will inform other research organisations and industrial users with long-lived embedded systems.
The decision highlights a growing tension between Linux distribution maintainers (who target modern hardware) and users who cannot replace specialised equipment frequently.
It signals that even the most committed Red Hat ecosystem users may switch distributions when upstream decisions create untenable upgrade paths.

Background

CERN has been a major Linux user for decades, initially co-maintaining Scientific Linux with Fermilab from 2004. When Red Hat absorbed CentOS in 2014, CERN adopted CentOS for its stability and binary compatibility with RHEL. The abrupt end of CentOS 8 support in 2021, combined with rising minimum CPU requirements in RHEL 9 and 10, forced CERN to reconsider its distribution strategy. The front-end computers — located underground, directly controlling accelerator hardware — are particularly sensitive because they include custom boards and interfaces that cannot easily be replaced.

Key Perspectives

CERN: Needs long-term stability and hardware compatibility for equipment that may remain in service for 15+ years. The cost and risk of replacing 65% of specialised control computers was deemed unacceptable compared to migrating to Debian, which supports older hardware and gives CERN more control over maintenance.

Red Hat (as representative of upstream direction): Focuses on modern hardware capabilities to enable security features and performance improvements. The x86-64-v2 and v3 requirements reflect industry trends, but they create challenges for users with embedded systems that cannot be upgraded without extensive redesign.

Critics / Skeptics: Moving from a Red Hat derivative to Debian introduces new operational overhead — different package management, configuration tools, and support ecosystem. CERN must retrain staff and adapt monitoring and management systems. Some may question whether Debian's long-term support cycle is sufficient for CERN's 15-year planning horizon.

What to Watch

CERN's progress in migrating the first batch of front-end computers, and any unanticipated compatibility issues with custom hardware.
Whether other research laboratories, such as Fermilab, adopt similar strategies.
How Red Hat responds — if large users like CERN defect, it may prompt Red Hat to offer extended support options for older hardware or adjusted CPU requirements.

ZOTPAPER