@xavier666 Given that Canonical is a British company, that's not something that could happen at all. Red Hat is anyone's guess given that the law doesn't really mean anything to them any more.

Canonical is UK based, so scrub that.

But Redhat, Rocky, Alma are all owned by US legal entities and can absolutely be legally forced to do as you describe.

Technically blocked is something else, mind. We're clever, resourceful and motivated people and US laws wouldn't directly affect us.

However - you're thinking small. US influence of IT is massive. Routers, servers, hardware of all levels. The most enterprise level software is US led. All of these things can be restricted, or tarriffed heavily, or sanctioned entirely. If the US wants to hurt the rest of the world, it just has to tell Broadcom to turn off vmware outside of America. Ditto Cisco, Ditto Dell, Ditto... etc etc. Sure, it would be illegal, but does the American government care about that?

Anyone telling you that "Y won't happen because it's unthinkable" clearly hasn't been paying attention this year.

It's practically unrealistic. Even for a distro governed by a US-based company there are a lot of download mirrors, so restricting downloads from all of them is extremely difficult (and anyway unrestricted foreign mirrors still could synchronize with official ones via VPN). Forbidding foreign developers would require identification of each developer, but few distros do this (Debian does, but e.g. Fedora does not).

Developers would understand that such restrictions effectively kill a project, so they would shirk them.

Canonical? the US could try but Canonical isn't a US company so far as I know. The attempt would probably just piss off their "home" nation. That would be the UK, I think.

Red Hat is another story though. It's owned by IBM which is a US company, which means it is, in theory, obliged to obey any lawful order of the US government. I say "in theory" because there is a long history of companies here saying "Yes sir, Yes sir, Three bags full sir." and then doing whatever they want when no one is looking anymore. For examples see Facebook, Google, OpenAI, Exxon IBM, Coke, Ford and... Well just about every company that has been around for more than 20 years and most small businesses to boot.

Practically speaking, though. These companies are based around open source projects whose source code has been widely distributed. If you need to, (or hell, even if you just want to) fork them, rename the project to avoid trademarks, and move on. Whether you flip Uncle Sam the bird as you do so, your call.

IBM/Red Hat maybe since it’s a US company. HOWEVER we went through this with PGP already and the infamous RSA Dolphin.

So could they try? Yeah. Would it work? I don’t know.

Honestly have no idea. In current times we're seeing the law do all sorts of things that I would have told you months ago weren't possible. I'm realizing that most of what held up our current system was nothing more than good faith.

They can for red hat but canonical is (or at least I think it is) South African

Either way, it doesn't matter, it's open source software so we'll happily download it somewhere else. loads of distress to choose from

Trying to force other countries to comply? Well the US could do that 2 years ago but since Trump utterly obliterated all of its soft power it has no way of enforcing that beyond threatening with tarrics (and we all know how well that has worked) or a full on invasion which will be bad for said country but as soon as the inevitable body bags come crashing back into the country, it would kill this administration

Hello, Suse is also mature company. Just less marketed. Also BSDs are there as alternatives

Small note. Opensuse Leap is EXTREMELY stable. Just as stable as RHEL and more stable than non-LTS Ubuntu. It’s just less well marketed in the English speaking world.

ubuntu would be fine id imagine Arch is a community project so they cant really stop it and fedora/red hat who knows

No, you can’t prevent open source software being mirrored, nor can you can compel citizens and companies of other countries to stop working on it.

Compete with what ? I want to see a decent budget and at least 5 year plan first. The scenario is ridiculous, each distribution have so many mirrors that you can't just ban internet, baning development is even more unrealistic given the nature of linux development. What they gonna do, ban email ? https://git-scm.com/docs/git-send-email

Isn't it open source? Would heavily doubt it for downloads. Development, I'm not sure about

Whether or not they are US based entities I think is moot since several developers have already been booted from kernel development due to their affiliations largely at the behest of the US.

Also if they try prevent downloads it would have the interesting side affect that: all the folks out there seeding and torrenting Linux ISOs might have to now also claim they only share the un-embargoed ones, wink.

The US govt has done worse (cf. Phil Zimmerman)

Yes, absolutely. And they can drag Canonical into it as well if they wish though it's harder. Being UK based doesn't protect them from the long arm of US law including arresting any US personnel, freezing and seizing their funds, putting out arrest warrants for and harassing those in the UK with the fear of arrest and rendition to the US if they go to a third country (for a conference, vacation, etc, most would buckle rather than live under that). Additionally the US could sanction them for non-cooperation by making it illegal for US companies to sell them products and services, for US citizens to work for or aid them, etc.

They can go after community led projects too, just send the feds over to the houses of some senior US developers and threaten and intimidate them, intimate their imminent arrest and prison sentence unless they stop contact and work with parties from whatever countries the US wishes to choose to name. Raid their houses, seize their electronics, detain them for hours in poor conditions. Lots of ways to apply pressure that doesn't even have to stand up to extensive legal scrutiny (they can keep devices and things and the people would have to sue to get them back).

The code itself is likely to exist in multiple places so if someone wanted to fork from say next week's builds for an EU build they could and there would be little the US could do to stop that but they could stop cooperation and force these developers to apply technical measures to attempt to prevent downloads from IP addresses known to belong to sanctioned countries of their choosing.

It's not like the US can slam the door and take its Linux home and China and the EU and Russia are left with nothing, they'd still have old builds and code and could develop off of those though with broken international cooperation it would be a fragmented process prone to various teething issues.