France Deploys NixOS in Government as European Governments Seek Digital Sovereignty
France's digital affairs directorate has quietly rolled out Sécurix, a security-hardened NixOS platform, across hundreds of government workstations—joining the Netherlands and other European nations in adopting the open-source operating system to reduce dependence on foreign technology vendors.
The Netherlands made headlines with its DAWO initiative, a government-wide push to migrate public institutions to a NixOS-based platform. But France has been moving in the same direction with less fanfare. DINUM, France's Interministerial Directorate for Digital Affairs, has been operating its own NixOS workstation environment on internal machines for several months.
Sécurix and its NixOS Bet
DINUM created Sécurix, a hardened NixOS configuration designed for system administrators. Rather than forking NixOS, the project builds directly on top of it while implementing security standards set by ANSSI, France's national cybersecurity authority. The software carries an MIT license and resides in the cloud-gouv GitHub organization, currently at version 0.20.1 in alpha status.
According to reporting from The Stack's Emilien Ercolani, who attended a DINUM briefing in April, the agency plans to deploy Sécurix across approximately 250 of its staff workstations following a successful pilot on 70 machines. The platform uses FIDO2 hardware security keys as its primary authentication method, with support for TPM2 and YubiKey devices, and leverages NixOS's reproducible build architecture.
Sécurix functions as a foundation for centrally managed workstations rather than as a standalone Linux distribution. Alongside it, DINUM released Bureautix, a reference template for standard office workstations that includes KDE Plasma, LibreOffice, ONLYOFFICE, and WPS Office. The documentation characterizes Bureautix as a "dummy example" intended for organizations to fork and customize internally, not as an independent system.
Why is NixOS the go-to?
NixOS carries European credentials that appeal to government decision-makers. Eelco Dolstra developed it at Utrecht University in the Netherlands, and the NixOS Foundation operates as a Dutch nonprofit. By contrast, major Linux distributions have ties to foreign corporations: Fedora originates from Red Hat, owned by the US-based IBM; openSUSE connects to Luxembourg-based SUSE; and Ubuntu comes from England's Canonical.
The underlying strategy appears designed to sidestep projects headquartered in countries where political pressure could force compliance with government demands. France, the Netherlands, and Denmark are each pursuing distinct approaches toward the same objective: securing control over their digital infrastructure through vendor-neutral, reproducible systems.