cross-posted from: https://lemmy.ca/post/62271746

Add a required birth date prompt (YYYY-MM-DD) to the user creation flow, stored as a systemd userdb JSON drop-in at /etc/userdb/<user>.user on the target system.

Motivation

Recent age verification laws in California (AB-1043), Colorado (SB26-051), Brazil (Lei 15.211/2025), etc. require platforms to verify user age. Collecting birth date at install time ensures Arch Linux is compliant with these regulations.

This is just a pull request, no changes yet.

The pull-request discussion thread has been locked, just like it happened for the similar thread in Systemd, owing to the amount of negative comments…

  • spectrums_coherence@piefed.social
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 day ago

    I hope they make it very clear that setting this value is not recommended in most jurisdictions.

    Since this value can be used for fingerprinting, and in the future many site will be able to at least get the age range of the user. The more people set this value, the more exposed everyone is.

    • Eldritch@piefed.world
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      1
      ·
      4 days ago

      The problem is, its not just the US by any stretch. And targeting volunteer devs etc is more likely to backfire. They are as much victims as the rest us. Just trying to keep these failing states from targeting them.

      • ScoffingLizard@lemmy.dbzer0.com
        link
        fedilink
        arrow-up
        1
        ·
        1 day ago

        They just jumped with no discussion. I hear systemd removed the merge so I thought it was settled by now. In any case, systemd is pain in the ass anyways. Those network commands are too long and I can’t ever recall them. I miss Linux without having to make so many notes all the time.

      • endlesseden@pyfedi.deep-rose.org
        link
        fedilink
        English
        arrow-up
        7
        ·
        4 days ago

        they will anyways. first person that gets found lying or disables it, they target the distro.

        the law was written to make compliance the metric for dissidence. all “users” are minors. identities flagged as not a minor is a lie, as users cannot be minors only “account holders”.

        it’s not written to support the Linux ecosystem. it’s specifically worded to exclude and target the Linux ecosystem if it tries to comply without using meta/google/Microsoft to handle accounts.

  • Aeri@lemmy.world
    link
    fedilink
    arrow-up
    3
    ·
    4 days ago

    Just make it default to 0-0-0000 and do zero validation, yeah it might seem weird that most of our users are thousands of years old but we’re too lazy to investigate.