France Moves to Linux: Inside Sécurix and Bureautix, the Government’s Open-Source Strategy

In early April 2026, France took a major step toward digital sovereignty. The Direction interministérielle du numérique (DINUM) officially launched its transition from Windows to Linux.

But this isn’t just another OS migration. At the heart of the initiative are two open-source projects with distinctly French flair: Sécurix and Bureautix.

Together, they represent a broader shift toward security, reproducibility, and independence from proprietary ecosystems—and could reshape how governments deploy IT systems.

Why Not Ubuntu? The Case for NixOS

A natural question arises: why not use a popular distribution like Ubuntu?

The answer comes down to one key concept: reproducibility.

Unlike traditional Linux systems, NixOS uses a declarative configuration model:

• Every system is defined by a configuration file
• Applying the file guarantees the exact same setup
• Thousands of machines can be deployed identically

With Ubuntu or Debian, even automated deployments (via tools like Ansible) can lead to slight differences between systems. NixOS eliminates that uncertainty.

NixOS vs Traditional Linux: A Different Philosophy

On conventional systems:

• Software is installed into shared directories like /usr/bin
• Dependencies can conflict
• Updates may break existing setups

With NixOS:

• Each package is isolated in /nix/store
• Multiple versions can coexist safely
• Updates are reversible via built-in rollback

The Nix ecosystem also provides access to over 120,000 packages, more than enough for administrative use.

However, this power comes with complexity—making NixOS less suitable for beginners but ideal for controlled environments like government infrastructure.

Sécurix: A Hardened, Security-First System

Sécurix is not a standalone OS—it’s a secure configuration layer built on NixOS, designed to meet strict guidelines from the ANSSI.

Key Security Features:

• Hardened Linux kernel
• Advanced security modules
• Default compliance with ANSSI recommendations

Passwords Are No Longer the Norm

One of the most radical changes:

• Traditional passwords are replaced by FIDO2 hardware keys

Users authenticate using physical devices (like USB security keys), significantly reducing risks such as phishing or credential theft.

Passwords remain as a fallback—but are no longer the primary method.

Bureautix: The Desktop Environment for Government Agents

While Sécurix focuses on security, Bureautix provides a usable desktop environment.

It acts as:

• A ready-to-use configuration template
• A customizable base for administrations
• A full workstation setup built on NixOS

Unlike Windows environments tied to Active Directory, Bureautix uses:

• Git-based configuration management
• Static user directories
• Code-driven system configuration

This approach replaces centralized directory systems with version-controlled infrastructure.

A Familiar Interface with KDE Plasma

To ease the transition, Bureautix uses KDE Plasma, a highly customizable Linux desktop.

It can mimic Windows with:

• A bottom taskbar
• Start menu-style launcher
• File explorer interface

This reduces friction for users switching from Windows.

A Surprising Software Stack

The default Bureautix setup includes a wide range of applications:

Office Tools:

• LibreOffice
• OnlyOffice
• WPS Office

This triple-suite approach ensures compatibility with Microsoft Office formats.

Communication:

• Thunderbird
• Signal
• Element

These replace proprietary tools like Microsoft Teams.

Technical Tools (for advanced users):

• Wireshark
• tcpdump
• Neovim
• VSCodium
• VeraCrypt

This confirms Bureautix is designed as a flexible base, not a one-size-fits-all solution.

A Gradual Rollout

For now, the deployment is limited:

• 250 workstations within DINUM

Scaling up will require:

• Training IT teams on NixOS
• Adapting workflows
• Managing compatibility challenges

A Broader Sovereignty Strategy

This OS migration is just one piece of a larger puzzle.

Other initiatives include:

• Tchap
• FranceTransfert
• Government-backed collaboration tools

Together, they aim to reduce reliance on foreign tech platforms.

The GitHub Paradox

One ironic detail: both Sécurix and Bureautix are currently hosted on GitHub—owned by Microsoft.

DINUM notes:

• The projects are open-source (MIT license)
• They can be migrated to another platform at any time

Still, the symbolism hasn’t gone unnoticed.

Conclusion

France’s move toward Linux with Sécurix and Bureautix is more than a technical upgrade—it’s a strategic shift toward control, security, and independence.

By leveraging NixOS and a declarative infrastructure model, the government is building systems that are:

• Reproducible
• Secure by design
• Adaptable across agencies

The real question is no longer if this transition will happen—but how fast it can scale and whether practical challenges will slow its momentum.

If successful, this initiative could become a model for governments worldwide seeking to reclaim control over their digital infrastructure.