Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ubuntu 26.10 completes transition to Rust-based coreutils

omgubuntu.co.uk

Post reply on HN
Print view View original

81–90 of 270 posts

Re: Ubuntu 26.10 completes transition to Rust-based coreutils

#81

Post by egorfine »

lioeters wrote: post #76
egorfine wrote: post #49

Earlier quoted context omitted.

For now you can list dependent packages manually in apt-get install: https://packages.ubuntu.com/resolute/build-essential But it's clear that Ubuntu will remove coreutils, genuine sudo and other tools from the future versions. It's the direction, it's ideological and thus nor merit nor our feedback will change anything here.

> genuine sudo That made me curious, it sounds related to this: Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords - 5 months ago (413 comments) https://news.ycombinator.com/item?id=47464134

nah

i was referring to their counterfeit sudo emulator written in rust. It's called "sudo-rs" afair.

Re: Ubuntu 26.10 completes transition to Rust-based coreutils

#82

Post by lioeters »

egorfine wrote: post #81
lioeters wrote: post #76

Earlier quoted context omitted.

> genuine sudo That made me curious, it sounds related to this: Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords - 5 months ago (413 comments) https://news.ycombinator.com/item?id=47464134

nah i was referring to their counterfeit sudo emulator written in rust. It's called "sudo-rs" afair.

Ah I see, found it.

Security issues discovered in sudo-rs - https://lists.debian.org/debian-security-announce/2025/msg00...

Sudo-Rs Affected by Multiple Security Vulnerabilities - https://www.phoronix.com/news/sudo-rs-security-ubuntu-25.10

Sudo-rs enables password feedback by default - https://www.phoronix.com/news/sudo-rs-password-feedback

Re: Ubuntu 26.10 completes transition to Rust-based coreutils

#83

Post by stouset »

Ygg2 wrote: post #74
stouset wrote: post #63

Earlier quoted context omitted.

There have been twelve CVEs reported against coreutils in the past twenty years. There were forty-four against this project in just the last audit. I am all for RIIR in cases where it makes sense. This does not even remotely appear to be one of them. By all appearances the quality of the code is extremely amateurish at best. coreutils has not been a significant source of vulnerabilities in the past, and they’re repla…

> There were forty-four against this project in just the last audit. Was there an audit against coreutils? If not, it's not really apple-to-apple comparison.

It doesn’t even matter. The sheer disparity in vulnerabilities over twenty years versus one year is impossible to hand-wave away.

We are talking about fourfold more CVEs over a twentyfold reduction in time.

Re: Ubuntu 26.10 completes transition to Rust-based coreutils

#84

Post by IshKebab »

tosti wrote: post #68
IshKebab wrote: post #67

Earlier quoted context omitted.

It's a stack overflow which means it's using recursion and for historical reasons that don't make sense any more, stacks are teeny tiny on 64-bit Linux - apparently only 8 MB on Linux! I'm not sure why they don't raise it to something reasonable like 4 GB. I guess because they want consistency with 32-bit? Maybe we can finally change it if/when they phase out support for 32-bit Linux. Apparently it might not be that…

OIC. Rust doesn't guarantee optimizing tail recursion. How unfortunate for a language that's getting widespread adoption.

Do any widely used languages guarantee tail call optimization? It's a pretty niche feature.

Re: Ubuntu 26.10 completes transition to Rust-based coreutils

#85

Post by gpm »

IshKebab wrote: post #84
tosti wrote: post #68

Earlier quoted context omitted.

OIC. Rust doesn't guarantee optimizing tail recursion. How unfortunate for a language that's getting widespread adoption.

Do any widely used languages guarantee tail call optimization? It's a pretty niche feature.

Scala, ocaml, racket, clojure, zig.

For recursion only kotlin.

(For most of these only with syntax specifying it)

Re: Ubuntu 26.10 completes transition to Rust-based coreutils

#86

Post by gpm »

stouset wrote: post #83
Ygg2 wrote: post #74

Earlier quoted context omitted.

> There were forty-four against this project in just the last audit. Was there an audit against coreutils? If not, it's not really apple-to-apple comparison.

It doesn’t even matter. The sheer disparity in vulnerabilities over twenty years versus one year is impossible to hand-wave away. We are talking about fourfold more CVEs over a twentyfold reduction in time.

It really does matter. I don't know enough about this specific case, but multiple order of magnitude differences in CVE numbers are frequently explained by different policies towards finding and assigning CVEs in many many cases.

Absent more information the default should be to hand wave it away as probably such a difference. CVE counts are not a even slightly reliable metric.

Re: Ubuntu 26.10 completes transition to Rust-based coreutils

#87

Post by skrtskrt »

amiga386 wrote: post #37
skrtskrt wrote: post #25

Earlier quoted context omitted.

Does this actually matter that much for some tools when the kernel is GPL?

I does. The OP says "Linux" but means "Linux distros", which are made of thousands of "commingled" pieces (i.e. the licence of one piece does not affect the other). Each piece that becomes MIT means less pressure on corporate users to give back any changes they make, and we'll end back up in the 1980s again where "Amazon Linux" is full of secret-sauce they refuse to publish and makes the base system incompatible with…

In theory there could be a the MIT version relicensed to GPL and this version could be carried as a standard if having MIT software as core utilities was considered enough of a threat - right? You just have to retain original license/attribution.

That would be an awfully awkward move in the realm of Linux-related politics but if having an MIT-licensed coreutils was such an existential thread, at least you can fix it with aggressive license moves and not code.

Re: Ubuntu 26.10 completes transition to Rust-based coreutils

#88

Post by skrtskrt »

jmclnx wrote: post #80
qwj18 wrote: post #33

Earlier quoted context omitted.

1) Corporate forced slop acceptance by e.g. Linus and Debian. 2) Seeing how bad the Linux kernel is with all the AI CVEs. It will get worse. BSD is the future.

You were down voted, odd. But this I fully agree with, the latest thing for me is Wayland being forced upon us.

X11 and everything around it is unfixable security hazard slop, just slop that was painstakingly created by humans.

Also Wayland is it being forced on us? I have plenty of coworkers that run X daily because they are still afraid of the Wayland boogeyman despite the fact that their supposed clipboard and screen sharing problems in Wayland (the only two supposed problems they can name) have been solved for years.

Re: Ubuntu 26.10 completes transition to Rust-based coreutils

#89

Post by skrtskrt »

amiga386 wrote: post #79
bigstrat2003 wrote: post #72

Earlier quoted context omitted.

That doesn't matter. Amazon or whoever can add as much secret sauce as they like; people can freely use the original so there's no issue.

We've balkanized Linux but you're free to use the original (which we are deliberately incompatible with, as is rival #2, rival #3, rival #4, etc. and we're all mutually incompatible with each other)

Amazon and other clouds already patch the hell out of Linux, but they don't distribute physical devices with that Linux on it to anyone, so they don't have to deliver source code either.

I am not totally sure I see the actual concern here, that a company is going to sell devices with a really great `find` implementation but not contribute it upstream?

Re: Ubuntu 26.10 completes transition to Rust-based coreutils

#90

Post by 0x696C6961 »

amelius wrote: post #17
collinfunk wrote: post #5

I really don't understand why Canonical rushes this. If 'rm' can't remove all possible directory entries, that is a big issue: $ podman run --rm -it ubuntu:26.10 $ apt update -y; apt upgrade -y $ rm --version rm (uutils coreutils) 0.10.0 $ gnumkdir -p $(yes a/ | head -n $((32 * 1024)) | tr -d '\n') $ rm -rf a Segmentation fault (core dumped) rm -rf a $ ls a a $ gnurm -rf a $ ls a ls: cannot access 'a': No such file o…

Let them first fix Snap.

They need to kill snap ...
Post reply on HN