Looks neat, but again, 99% of those utils I’ve never ever thought “this shit too slow” or “UX sucks”. Replacing for the sake of replacing I’m not too keen on.
They also have the benefit of being in a memory safe language and being cross-platform. Rust does actually have some advantages when it comes to making secure & stable tooling.
This aims to be a drop-in replacement for GNU coreutils and might actually serve to increase security, stability, & speed across the system as a ton of stuff rely on coreutils.
Now it’s still not complete, so you can’t just replace everything but I’ve actually noticed an improvement in my system with hybrid.
I know, but coreutils also literally never broke on me as they are. To me, the whole point of coreutils is that they’re just… there. I’ll leave the decision to change bundled tooling to distro maintainers.
I’ll also be perfectly honest: from a developer standpoint, end-users caring about the language a tool was developed with is, in the end, a pretty weird concept to me. Memory safety and cross platform compilation is DX stuff. Nothing tells you as a user that the thing you’re using isn’t sprinkling unsafe everywhere, in the end… The application itself doing what it advertises is what I’d expect most users to care about. Especially for stuff as old and relatively stable as most coreutils.
If you go to the uutils repo you can see that it’s making proper use of fuzzing, test, etc. and only makes use of unsafe in necessary areas.
Uutils is also more consistent with modern standards thanks to clap & uniform design, has out of the box selinux support, etc.
if you use a reference in unsafe code, it will still be checked.
Also many distros are already packaging uutils do to it “growing into remarkably robust shape”, it’s just not ready to completely replace coreutils quite yet and so it’s not up for consideration by distros to ditch coreutils until it’s at least at parity.
(That’s why I make use of hybrid and not outright replacing everything).
The point is not the language, it’s how the project is making use of the language and uutils is doing a lot right.
My point was intended to be more generic than just uutils though. Agreed that this specific project looks interesting.
And yes, I know the unsafe keyword is not inherently unsafe to use, but it’s also, in practice, one of the few potential footguns of the language, and is easy to abuse and get wrong. It’ll raise a few eyebrows in PRs and you’ll be expected to have both good reasons and a good test coverage at the very minimum lol. It’s a good red flag, if you do end up with runtime memory issues, that it’s probably happening in that block, but past this, you’re still basically foregoing some safety for convenience. And people fail. Often.
I don’t really thing the security ‘guarantees’ of rust matter that much.
I think it’s a better language to work in than C or C++, though. That’s not a reason to change utilities now, but a larger Rust ecosystem is always better in my humble opinion.
Yes that’s the major selling point in the Rust language in my opinion. Memory safety. Most of the security issues you hear about are because of mismanaged memory, specifically buffer overflows. My understanding is that Rust reduces risk of those by catching them at compile time.
Honest question…why?
Some have better ux, some support more platforms out of the box. I don’t find it a good idea trying to replace everything though.
I only tend to replace if all of those are met:
So far, only things I’ve actually replaced are aliasing
lstoexa/eza, and switched toripgrepfor most of my uses ofgrep.coreutils-hybrid (UUTILS for Arch Linux)
UUTILS Site & Index
Looks neat, but again, 99% of those utils I’ve never ever thought “this shit too slow” or “UX sucks”. Replacing for the sake of replacing I’m not too keen on.
They also have the benefit of being in a memory safe language and being cross-platform. Rust does actually have some advantages when it comes to making secure & stable tooling.
This aims to be a drop-in replacement for GNU coreutils and might actually serve to increase security, stability, & speed across the system as a ton of stuff rely on coreutils.
Now it’s still not complete, so you can’t just replace everything but I’ve actually noticed an improvement in my system with hybrid.
I know, but coreutils also literally never broke on me as they are. To me, the whole point of coreutils is that they’re just… there. I’ll leave the decision to change bundled tooling to distro maintainers.
I’ll also be perfectly honest: from a developer standpoint, end-users caring about the language a tool was developed with is, in the end, a pretty weird concept to me. Memory safety and cross platform compilation is DX stuff. Nothing tells you as a user that the thing you’re using isn’t sprinkling
unsafeeverywhere, in the end… The application itself doing what it advertises is what I’d expect most users to care about. Especially for stuff as old and relatively stable as most coreutils.Ah, except Electron. Fuck most Electron apps.
If you go to the uutils repo you can see that it’s making proper use of fuzzing, test, etc. and only makes use of unsafe in necessary areas. Uutils is also more consistent with modern standards thanks to
clap& uniform design, has out of the box selinux support, etc.The
unsafekeyword isn’t inherently “unsafe”, nore does it disable any checks contrary to what some believe.Also many distros are already packaging uutils do to it “growing into remarkably robust shape”, it’s just not ready to completely replace coreutils quite yet and so it’s not up for consideration by distros to ditch coreutils until it’s at least at parity. (That’s why I make use of hybrid and not outright replacing everything).
The point is not the language, it’s how the project is making use of the language and uutils is doing a lot right.
My point was intended to be more generic than just
uutilsthough. Agreed that this specific project looks interesting.And yes, I know the
unsafekeyword is not inherently unsafe to use, but it’s also, in practice, one of the few potential footguns of the language, and is easy to abuse and get wrong. It’ll raise a few eyebrows in PRs and you’ll be expected to have both good reasons and a good test coverage at the very minimum lol. It’s a good red flag, if you do end up with runtime memory issues, that it’s probably happening in that block, but past this, you’re still basically foregoing some safety for convenience. And people fail. Often.Utilities built in Rust have a higher potential for better security, all else being equal.
Uhhhhh, they do?
I don’t really thing the security ‘guarantees’ of rust matter that much.
I think it’s a better language to work in than C or C++, though. That’s not a reason to change utilities now, but a larger Rust ecosystem is always better in my humble opinion.
Yes that’s the major selling point in the Rust language in my opinion. Memory safety. Most of the security issues you hear about are because of mismanaged memory, specifically buffer overflows. My understanding is that Rust reduces risk of those by catching them at compile time.
Because Rust is better, hurr-durr.
Forgor the /s