· 7 min read ·

Digital Sovereignty Has a Deadline: Why France's Linux Move Is Different This Time

Source: hackernews

France’s government is moving to ditch Windows for Linux, framing US technology as a strategic risk. The announcement is not the first time a European government has tried this, and the history of such attempts is not encouraging. But the conditions driving this particular push are different from anything that came before, and France has more existing infrastructure to build on than its peers.

What Changed

The core driver is not cost savings or ideology. It is the US CLOUD Act, passed in 2018, which compels US technology companies to hand over data stored anywhere in the world when presented with a valid US legal order. This includes data belonging to foreign governments. For years, European governments acknowledged this as a theoretical risk and did little about it. The return of the Trump administration in January 2025 converted it from theoretical to operational. When a government has demonstrated willingness to use technology access as a geopolitical lever, and when figures involved in US government IT have publicly involved themselves in European politics, the calculation for European IT administrators changes.

France’s Direction interministérielle du numérique (DINUM), the body that coordinates digital strategy across French government ministries, has been working toward this for years. What the current moment provides is political will to accelerate.

France Already Has the Largest Government Linux Deployment in the World

Before treating this as aspirational, it is worth noting what France has already built. The Gendarmerie nationale, France’s national police force, migrated approximately 90,000 workstations to Ubuntu Linux starting in 2007. By 2014 those machines were running a custom Ubuntu-based distribution. Lieutenant Colonel Stéphane Dumond gave widely cited interviews at the time describing annual savings of roughly two million euros in licensing costs and a significant reduction in malware incidents compared to the Windows environment they replaced.

This is not a pilot program or a proof of concept. It is 15 years of production operation at scale. When French government officials say they are considering Linux for wider deployment, they are not speculating about whether it can work in government environments. They have evidence.

La Suite Numérique: The Software Layer Already in Place

The operating system is only one piece of the problem. A bigger challenge for any Microsoft migration is replacing the productivity and collaboration software that government workers use daily. France has been building that replacement for several years.

La Suite Numérique is DINUM’s collection of open-source tools for government employees. It includes Tchap, a government-only encrypted messaging platform built on the Matrix protocol and the open-source Element client. It includes video conferencing via Jitsi, collaborative document editing through Collabora and OnlyOffice integrations, file storage through Nextcloud, and email infrastructure. The intent is to provide everything a government employee needs without touching Microsoft 365 or any US-controlled cloud service.

France also maintains the Socle Interministériel de Logiciels Libres (SILL), an annually updated official catalog of recommended open-source software for government use. This is not a suggestion box. It is formal policy codified by the 2016 Law for a Digital Republic, which requires that software developed with public funds be released as open source by default. The catalog covers hundreds of software categories and gives government IT departments a pre-vetted list of alternatives to proprietary tools.

The infrastructure for a Linux migration is not theoretical. It exists and has been in partial deployment for years.

The European Picture

France is not moving alone. Germany’s state of Schleswig-Holstein committed in 2024 to migrating roughly 25,000 government PCs from Windows to a Debian-based Linux distribution, replacing Microsoft Office with LibreOffice and Nextcloud for file collaboration. The German federal government’s BSI (Federal Office for Information Security) has been pushing for reduced Microsoft dependency for several years, and the German government has a public open-source code sharing platform at Open CoDE.

Italy’s military has migrated 150,000 PCs to LibreOffice. Various Spanish regions have experimented with Linux for government workstations. The Netherlands commissioned a study in 2024 on reducing Microsoft dependency in light of CLOUD Act exposure. The specific pressures vary by country, but the direction is consistent across the EU.

The European Commission’s GAIA-X initiative, while more focused on cloud infrastructure than desktop operating systems, reflects the same underlying concern: European institutions do not want critical public infrastructure running on US-controlled software where US law can compel access to their data.

The Munich Lesson

Any honest assessment of government Linux migrations has to reckon with Munich. The city’s LiMux project, launched in 2004, migrated approximately 15,000 city employee PCs from Windows to a custom Debian-based distribution. By 2013 the project was largely complete, and estimates suggested it saved around ten million euros in licensing costs. Then in 2017 the city council voted to reverse the decision and return to Windows. Microsoft had recently moved its German headquarters to Munich, and the lobbying that followed was effective.

This story gets cited constantly in discussions about government Linux migrations, usually as evidence that political will is unstable and that Microsoft will always find a way to reassert itself. That reading is partly correct but misses what was specific to Munich. The migration suffered from genuine usability problems: LibreOffice compatibility issues with complex Word and Excel files, groupware integration difficulties, and an underestimated training burden. But it also suffered from the political problem of a city council that was susceptible to lobbying from a vendor with a strong local interest in the outcome.

France’s situation differs in two important ways. First, the geopolitical framing makes a reversal politically harder. A French government that reverses a Linux migration because Microsoft lobbied them would be making an explicit statement about digital sovereignty that would be embarrassing in ways Munich’s city council did not have to worry about. Second, France has the Gendarmerie as a working reference implementation. Munich had to build on theory. France can point to a 90,000-machine deployment that has been running for 15 years.

The Real Technical Obstacles

The Linux desktop in 2025 is not the obstacle it was in 2004. Hardware driver support for x86 enterprise equipment is largely a solved problem. Web application compatibility has improved as browsers have standardized on modern APIs. The smart card and PKI infrastructure that French government employees use for authentication works well on Linux, in part because French digital ID systems were designed around open standards.

The genuine obstacles are three. First, legacy Windows-only government software. Customs systems, tax filing platforms, and court management software built specifically for Windows are not easily replaced. Wine and Proton have become viable for running many Windows applications on Linux, but adding that layer to enterprise IT management adds complexity and creates a support burden.

Second, Microsoft Office macro ecosystems. LibreOffice handles most standard documents well. Complex Excel macros using Visual Basic for Applications are a different story. Government agencies have decades of accumulated VBA automation. Auditing and replacing those macros is slow, expensive work.

Third, change management. The Gendarmerie’s migration success was partly attributed to a dedicated support structure during the transition. Government employees accustomed to Windows do not automatically adapt to a new environment, and a poorly supported rollout generates the kind of user complaints that give political opponents ammunition to reverse the decision.

None of these are insurmountable. All of them require sustained investment and careful planning.

What They Would Actually Deploy

France is unlikely to pick an off-the-shelf commercial distribution. Ubuntu, while popular for enterprise Linux deployments, is a product of Canonical, a UK private company, which does not fully solve the vendor dependency problem. Red Hat is now part of IBM, an American company.

The most likely outcome is a custom distribution based on Debian, which is community-governed with no single corporate owner. DINUM or a French systems integrator would maintain a Debian derivative pre-configured with SILL-approved software, hardened with AppArmor profiles, and integrated with the existing La Suite Numérique toolchain. This is essentially the model the Gendarmerie used: take Ubuntu (itself Debian-based), customize it for the deployment context, and maintain it internally.

There have been periodic discussions in European Commission circles about a shared “EU OS,” a common Linux distribution for European government use. This would allow shared maintenance costs and security patching across multiple countries. It has not materialized into anything concrete yet, but the political conditions in 2025 are more favorable for that kind of coordination than they have ever been.

Whether This Holds

The honest assessment is that France’s migration, if it proceeds, will be a multi-year project with significant friction. The Gendarmerie took roughly six years to complete its migration and had the advantage of a relatively homogeneous workload. Migrating the full breadth of French government ministries, with their varied legacy software and accumulated workflow dependencies, is a larger and more complex undertaking.

What is different this time is that the political pressure is external and durable. Previous European government Linux migrations were driven by cost savings or ideology, both of which are easy to deprioritize when a vendor offers a good deal or lobbying pressure increases. A migration driven by genuine concern about US government access to sovereign data is harder to walk back, because the concern does not go away when Microsoft offers a discount.

France has the precedent, the existing tooling, and now the political motivation. The technical challenges are real but documented. Whether the sustained political will survives contact with procurement cycles and IT contractor relationships is the open question, as it always has been.

Was this interesting?