An update on rust-coreutils
discourse.ubuntu.com
This is a follow-up to Jon’s original post on Carefully (but purposefully) oxidising Ubuntu and Julian’s migration spec for 25.10. We promised transparency throughout this process, and this post is written in that spirit. What happened after the announcement Following the decision to adopt rust-coreutils, we got to work. Any package shipped by default in Ubuntu must be promoted to Ubuntu Main, which requires passing a thorough security review. We quickly assembled an internal team spanning Ubun...
    • CarrotsHaveEars@lemmy.ml
      111·
      29 days ago

      Yes! I mean, don’t divert the hate of permissive license to Rust. Those are unrelated but now more people hate Rust because of this.

      • doodoo_wizard@lemmy.ml
        72·
        28 days ago

        They’re not unrelated. Lauded projects to rewrite some gpled c thing in rust are almost universally mit licensed.

        Attempts to get those licenses changed are almost universally met with a line in the sand.

  • talkingpumpkin@lemmy.world
    24·
    29 days ago

    TLDR:

    Current status for 26.04 LTS

    We shipped rust-coreutils as the default in Ubuntu 25.10 to maximise real-world testing ahead of the LTS. Based on the audit findings and remediation progress, here is where we stand for Ubuntu 26.04 LTS.

    We have included the latest upstream release 0.8.0 in Ubuntu 26.04, which incorporates the bulk of the security fixes.

    cp, mv, and rm continue to be provided by GNU coreutils in 26.04. These utilities have remaining open TOCTOU (time-of-check to time-of-use) issues (8 as of Apr 22, 2026) that need to be resolved before we are confident shipping them.

    Our plan is to address the remaining issues as soon as possible and target Ubuntu 26.10 with 100% rust-coreutils.