--- title: The Netherlands Picked NixOS. France Was Already Using It description: France's digital agency DINUM has been quietly running NixOS-based workstations for months via Sécurix, a security-hardened NixOS configuration built on ANSSI... canonical: https://daily.dev/posts/the-netherlands-picked-nixos-france-was-already-using-it-ghccska05 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: The Netherlands Picked NixOS. France Was Already Using It | daily.dev og:description: France's digital agency DINUM has been quietly running NixOS-based workstations for months via Sécurix, a security-hardened NixOS configuration built on ANSSI... og:url: https://daily.dev/posts/the-netherlands-picked-nixos-france-was-already-using-it-ghccska05 og:image: https://api.daily.dev/og/posts/ghCCsKA05.png og:image:alt: The Netherlands Picked NixOS. France Was Already Using It og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # The Netherlands Picked NixOS. France Was Already Using It **[It's Foss](https://daily.dev/sources/itsfoss)** · 3 min read · 1 upvotes · 0 comments ## Summary France's digital agency DINUM has been quietly running NixOS-based workstations for months via Sécurix, a security-hardened NixOS configuration built on ANSSI security guidelines, using FIDO2 hardware keys, TPM2, and YubiKey support. It targets roughly 250 staff workstations after a successful 70-machine pilot. Alongside it, DINUM published Bureautix, a companion reference template with KDE Plasma, LibreOffice, ONLYOFFICE, and WPS Office. The move echoes the Netherlands' DAWO initiative and reflects a broader European trend of governments favoring vendor-neutral, reproducible infrastructure over Fedora, openSUSE, or Ubuntu, all of which trace back to foreign-owned companies. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is Sécurix and how does DINUM use NixOS for government workstations? Sécurix is a security-hardened NixOS configuration built by France's DINUM (Interministerial Directorate for Digital Affairs), applying ANSSI cybersecurity guidelines without forking NixOS itself. It uses FIDO2 hardware security keys as the main login method, supports TPM2 and YubiKey, and relies on NixOS's reproducible build model. It's MIT licensed, hosted under the cloud-gouv GitHub organization, and currently in alpha at version 0.20.1. _Teams weighing NixOS for hardened, reproducible infrastructure can follow real deployments like this one on daily.dev._ ### How many workstations is France's DINUM deploying with the Sécurix NixOS setup? DINUM is targeting implementation across approximately 250 staff workstations, following a successful pilot run on 70 machines. This rollout runs alongside Bureautix, a companion reference template for office workstations shipping KDE Plasma, LibreOffice, ONLYOFFICE, and WPS Office, meant to be forked and adapted by organizations rather than run directly. _Anyone tracking government adoption of open-source desktop stacks can follow rollouts like this on daily.dev._ ## Similar posts on daily.dev - [FOSS Weekly \#26.40: NixOS is European Choice, Firefox Nova and Features, Free Terminal Course, Homelab Improvements and More](https://daily.dev/posts/foss-weekly-26-40-nixos-is-european-choice-firefox-nova-and-features-free-terminal-course-homel-puwzlawyp) · It's Foss · 0 upvotes · 0 comments --- Tags: [#open-source](https://daily.dev/tags/open-source), [#linux](https://daily.dev/tags/linux), [#nixos](https://daily.dev/tags/nixos) [View this post on daily.dev](https://daily.dev/posts/the-netherlands-picked-nixos-france-was-already-using-it-ghccska05) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"The Netherlands Picked NixOS. France Was Already Using It","url":"https://daily.dev/posts/the-netherlands-picked-nixos-france-was-already-using-it-ghccska05","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/the-netherlands-picked-nixos-france-was-already-using-it-ghccska05"},"datePublished":"2026-09-30T02:52:15.304Z","dateModified":"2026-09-30T02:52:44.736Z","description":"France's digital agency DINUM has been quietly running NixOS-based workstations for months via Sécurix, a security-hardened NixOS configuration built on ANSSI...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3eaf27799e6f78c66cf2d76e07e17565?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3eaf27799e6f78c66cf2d76e07e17565?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"It's Foss","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"It's Foss","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/582e3faed71842bfb9d3840a787d6700","url":"https://daily.dev/sources/itsfoss"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/the-netherlands-picked-nixos-france-was-already-using-it-ghccska05","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"open-source,linux,nixos","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"It's Foss","item":"https://daily.dev/sources/itsfoss"},{"@type":"ListItem","position":3,"name":"The Netherlands Picked NixOS. France Was Already Using It"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/the-netherlands-picked-nixos-france-was-already-using-it-ghccska05#faq","mainEntity":[{"@type":"Question","name":"What is Sécurix and how does DINUM use NixOS for government workstations?","acceptedAnswer":{"@type":"Answer","text":"Sécurix is a security-hardened NixOS configuration built by France's DINUM (Interministerial Directorate for Digital Affairs), applying ANSSI cybersecurity guidelines without forking NixOS itself. It uses FIDO2 hardware security keys as the main login method, supports TPM2 and YubiKey, and relies on NixOS's reproducible build model. It's MIT licensed, hosted under the cloud-gouv GitHub organization, and currently in alpha at version 0.20.1. Teams weighing NixOS for hardened, reproducible infrastructure can follow real deployments like this one on daily.dev."}},{"@type":"Question","name":"How many workstations is France's DINUM deploying with the Sécurix NixOS setup?","acceptedAnswer":{"@type":"Answer","text":"DINUM is targeting implementation across approximately 250 staff workstations, following a successful pilot run on 70 machines. This rollout runs alongside Bureautix, a companion reference template for office workstations shipping KDE Plasma, LibreOffice, ONLYOFFICE, and WPS Office, meant to be forked and adapted by organizations rather than run directly. Anyone tracking government adoption of open-source desktop stacks can follow rollouts like this on daily.dev."}}]} ```