Debian

Discussing

The debian-devel mailing list has seen 30+ messages on age verification compliance, with the thread active through March 10. The community is split into four camps:

Alex North-Keys (March 8) posted a detailed argument that anonymity protects children better than age verification, and that building age infrastructure into the OS undermines the privacy of the users it claims to protect.

No General Resolution has been proposed. No DPL statement has been issued.

Source: lists.debian.org/debian-devel/2026/03/

Ubuntu / Canonical

Watching

Jon Seager (VP Engineering) stated that Canonical is reviewing the situation with legal counsel but has "no concrete plans on how, or even whether, Ubuntu will change." Rainbolt's D-Bus proposal was cross-posted to ubuntu-devel, but the discussion there has been limited compared to Debian.

Source: discourse.ubuntu.com

Fedora

Exploring

Jef Spaleta (Fedora Project Leader) posted on Fedora Discussion that the project is exploring options. Key points from his comments: no telemetry, a local-only API would handle it, and the implementation could be as simple as a new file in /etc/ populated during account creation.

The legal list is aware of the issue. No mechanism has been shipped or formally proposed within Fedora.

Source: discussion.fedoraproject.org

System76 / Pop!_OS

Opposed

Carl Richell (CEO, System76) published a blog post opposing age verification mandates. His central argument: the laws are technically ineffective because any child can spin up a virtual machine and set their age to 18. He expressed hope that the laws will be repealed.

Source: blog.system76.com

Arch Linux

Silent

A forum thread and mailing list thread exist, but no official position has been taken. The community is largely dismissive — Arch lacks centralized account infrastructure, has no installer-driven account setup flow, and its rolling-release model doesn't lend itself to mandatory compliance features.

Sources: bbs.archlinux.org, arch-general mailing list

openSUSE / SUSE

Silent

No discussion found on any official mailing list, forum, or blog.

Red Hat / IBM

Silent

No public statement found from Red Hat or IBM regarding OS-level age verification. The Fedora discussion (above) is the closest proxy, but Fedora and Red Hat operate with separate governance.

Valve / SteamOS

Silent

No response from Valve. Notable: the Steam Deck is an Arch-based Linux device actively marketed to minors, making it a conspicuous target for age verification mandates. Valve's silence is likely strategic — they already have age gates in the Steam storefront and may argue that's sufficient.

MidnightBSD

Excluding

MidnightBSD modified its license to exclude California residents from desktop use, effective January 1, 2027. The project is also excluding Brazil (effective March 17, 2026) and threatening Colorado, Illinois, and New York exclusions if pending bills pass.

The project has separately drafted an alternative compliance approach: writing age data to a root-only readable file. However, the license exclusion appears to be the primary response.

Source: lunduke.substack.com

Kicksecure / Whonix

Complying

Aaron Rainbolt is driving the D-Bus proposal from within these projects. Kicksecure and Whonix are positioned to be the first distributions to ship an implementation.

This has not been well-received by the projects' own user base. Whonix forum users — people who chose Whonix specifically for privacy — are calling the proposal "a privacy disaster" and "a new fingerprinting mechanism: age bracket."

Source: forums.whonix.org

DB48X

Excluding CA/CO

DB48X, an open-source calculator firmware, declared itself "probably an operating system under these laws" and added a legal notice forbidding use by California and Colorado residents. A calculator firmware taking this position illustrates the breadth of the statute's language.

Source: github.com/c3d/db48x

Ageless Linux

Refused

Deliberately noncompliant. Distributes removal tools. That's us.

Read the docs

Industry Organizations

The following organizations all sat out AB 1043 during its passage through the California legislature. None submitted testimony, published public analysis, or filed formal opposition on the record:

  • Open Source Initiative (OSI)
  • Free Software Foundation (FSF)
  • Software Freedom Conservancy
  • Linux Foundation

A law that mandates behavioral changes in every operating system distributed in California passed without a word from the organizations that claim to represent free and open-source software.