Certifying Linux: State of the Art and Lessons Learned after Eight Years