501

Wedson Almeida Filho is a Microsoft engineer who has been prolific in his contributions to the Rust for the Linux kernel code over the past several years. Wedson has worked on many Rust Linux kernel features and even did a experimental EXT2 file-system driver port to Rust. But he's had enough and is now stepping away from the Rust for Linux efforts.

From Wedon's post on the kernel mailing list:

I am retiring from the project. After almost 4 years, I find myself lacking the energy and enthusiasm I once had to respond to some of the nontechnical nonsense, so it's best to leave it up to those who still have it in them.

...

I truly believe the future of kernels is with memory-safe languages. I am no visionary but if Linux doesn't internalize this, I'm afraid some other kernel will do to it what it did to Unix.

Lastly, I'll leave a small, 3min 30s, sample for context here: https://youtu.be/WiPp9YEBV0Q?t=1529 -- and to reiterate, no one is trying force anyone else to learn Rust nor prevent refactorings of C code."

top 50 comments
sorted by: hot top controversial new old
[-] danielquinn@lemmy.ca 113 points 3 weeks ago

Oof, that video... I don't have enough patience to put up with that sort of thing either. I wonder how plausible a complete Rust fork of the kernel would be.

[-] rollmagma@lemmy.world 94 points 3 weeks ago

It's always been this way. Except that it was kernel developers arguing with kernel developers over C code. Now it's relative newcomers arguing with kernel developers over Rust code that the kernel devs don't necessarily care about. Of course it's going to be a mess.

A fork is of course possible, but operating systems are huge and very complex, you really don't want to alienate these folks that have been doing exclusively this for 30 years. It would be hard to keep the OS commercially viable with a smaller group and having to do both the day to day maintenance, plus the rewrite. It's already difficult as it is currently.

Rust will be a huge success in time, long after the current names have lost their impetus. This is not a "grind for 4 years and it's done" project.

[-] ramble81@lemm.ee 16 points 3 weeks ago* (last edited 3 weeks ago)

folks that have been doing this exclusively for 30 years

And yet the number of people I hear “just switch to Linux!” When the other person has been using Windows for 30 years blows my mind.

Inertia is a hell of a drug.

[-] superkret@feddit.org 67 points 3 weeks ago

I wouldn't tell a Windows developer with 30 years experience to just switch to developing for Linux.
Users are different. Most people who have used Windows for 30 years never touch anything outside of the desktop, taskbar and Explorer.

load more comments (2 replies)
[-] Vincent@feddit.nl 65 points 3 weeks ago

That person in the audience was really grinding my gears. Just let the folks you're talking to answer you; no need to keep going on your diatribe when it's based on a false assumption and waste the whole room's time.

[-] moriquende@lemmy.world 15 points 3 weeks ago

let's not lose focus of what's important here, and that is a room full of people hearing my voice and paying attention to me for as long as I manage to hold it

[-] floofloof@lemmy.ca 32 points 3 weeks ago

I wonder how plausible a complete Rust fork of the kernel would be.

It sounds highly impractical, and it would probably introduce more issues than Rust solves, even if there were enough people with enough free time to do it. Any change must be evolutionary if it's going to be achievable.

[-] cerement@slrpnk.net 25 points 3 weeks ago

NOT a fork of Linux, but Redox is aiming for a Unix-like OS based on Rust – but even with “source compatibility” with Linux/BSD and drivers being in userspace, my guess would be hardware drivers are still going to be a big speed bump

load more comments (2 replies)
[-] ikidd@lemmy.world 15 points 3 weeks ago

Just fork and port Ext4 to Rust and let the little shit sit in his leaking kiddy pool out back.

load more comments (5 replies)
[-] Findmysec@infosec.pub 81 points 3 weeks ago

Who the fuck is this little shit? Can't they even be a little considerate towards rust? Just because they have 15 years worth of inertia for C doesn't mean they can close their eyes and say "nope, I'm not interested". I do not see how the kernel can survive without making rust a first class citizen

[-] IAmNotACat@lemmy.world 81 points 3 weeks ago

It’s Ted Ts’o, the maintainer of the ext4 filesystem amongst other things.

little shit

Though you’re still accurate despite his seniority.

[-] pivot_root@lemmy.world 73 points 3 weeks ago* (last edited 3 weeks ago)

There's really only one valid response to Ted Ts'o:

If you think you can do better with C, prove it.

CVE-2024-42304 — crash from undocumented function parameter invariants
CVE-2024-40955 — out of bounds read
CVE-2024-0775 — use-after-free
CVE-2023-2513 — use-after-free
CVE-2023-1252 — use-after-free
CVE-2022-1184 — use-after-free
CVE-2020-14314 — out of bounds read
CVE-2019-19447 — use-after-free
CVE-2018-10879 — use-after-free
CVE-2018-10878 — out of bounds write
CVE-2018-10881 — out of bounds read
CVE-2015-8324 — null pointer dereference
CVE-2014-8086 — race condition
CVE-2011-2493 — call function pointer in uninitialized struct
CVE-2009-0748 — null pointer dereference

[-] luciferofastora@lemmy.zip 30 points 3 weeks ago

You seem really invested in pointing out those shortcomings. I respect that.

[-] pivot_root@lemmy.world 55 points 3 weeks ago

Arrogant hypocrites are a pet peeve of mine. If someone is going to act like progressive technology changes are beneath them and unnecessary, they should be able to put their money where their mouth is.

load more comments (6 replies)
[-] antihumanitarian@lemmy.world 60 points 3 weeks ago

The comments from that article are some of the most vitriolic I've ever seen on a technical issue. Goes to prove the maintainer's point though.

Some are good for a laugh though, like assertions that Rust in the kernel is a Microsoft sabotage op or LLVM is for grifters and thieves.

[-] JackbyDev@programming.dev 53 points 3 weeks ago

This is a little off topic and admittedly an oversimplification, but people saying Rust's memory safety isn't a big deal remind me of people saying static typing isn't a big deal.

load more comments (1 replies)
[-] merthyr1831@lemmy.ml 45 points 3 weeks ago

The video attached is a perfect example of the kind of "I'm not prepared to learn anything new so everyone else is wrong" attitude that is eating away at Linux like a cancer.

If memory safety isn't adopted into the kernel, and C fanaticism discarded, Linux will face the same fate as the kernels it once replaced. Does the Linux foundation want to drag its heels and stuff millions into AI ventures whilst sysadmins quietly shift to new kernels that offer memory safety, or does it want to be part of that future?

[-] WarmApplePieShrek@lemmy.dbzer0.com 21 points 3 weeks ago

If Linux gets rewritten in Rust it will be a new kernel, not Linux. You can make new kernels, even in Rust but they aren't Linux. You can advertise them at Linux conferences but you can't force every Linux dev to work on your new Rust kernel.

[-] PotatoesFall@discuss.tchncs.de 40 points 3 weeks ago

There is no "your" new rust kernel. There is a gigantic ship of Theseus that is the Linux kernel, and many parts of it are being rewritten, refactored, removed an added all the time by god knows how many different people. Some of those things will be done in rust.

Can we stop reacting to this the way conservatives react to gay people? Just let some rust exist. Nobody is forcing everyone to be gay, and nobody is forcing everybody to immediately abandon C and rewrite everything in rust.

[-] witx@lemmy.sdf.org 34 points 3 weeks ago

Isn't Linux still Linux even though probably a lot of the original code is gone? Why would slowly rewriting it whole, or just parts, in Rust make it stop being Linux?

[-] repungnant_canary@lemmy.world 12 points 3 weeks ago

Ship of Theseus

[-] LeFantome@programming.dev 14 points 3 weeks ago

Nobody is proposing rewriting the whole kernel in Rust.

load more comments (4 replies)
[-] Templa@beehaw.org 45 points 3 weeks ago* (last edited 3 weeks ago)

Someone linked the thread from Phoronix forum and the comments are so awful. Imagine having to deal with people like this.

One of them reads:

We need Microsoft people like we need fleas. Why can't they work for projects we don't like, like GNOME?

It is funny because Ts'o works at Google, lol.

[-] Vilian@lemmy.ca 18 points 3 weeks ago

Phoronix comments were always dumb, like, infuriating bad, I don't even read them anymore, the moderation on that site don't give a fuck about toxicity in there

load more comments (3 replies)
[-] morrowind@lemmy.ml 16 points 3 weeks ago

Phoronix comments are a special place on the internet. Don't go there for a good discussion.

load more comments (1 replies)
[-] olafurp@lemmy.world 32 points 3 weeks ago

There's always going to be pushback on new ideas. He's basically asking people questions like "Hey how does your thing work? I want to write it in rust." and gets the answer "I'm not going to learn rust.".

I think rust is generally a good thing and with a good amount of tests to enforce behavior it's possible to a functionally equivalent copy of the current code with no memory issues in future maintenance of it. Rewriting things in rust will also force people to clarify the behavior and all possible theoretical paths a software can take.

I'm not gonna lie though, if I would have worked on software for 20 years and people would introduce component that's written in another language my first reaction would be "this feels like a bad idea and doesn't seem necessary".

I really hope that the kernel starts taking rust seriously, it's a great tool and I think it's way easier to write correct code in rust than C. C is simple but lacks the guardrails of modern languages which rust has.

The process of moving to rust is happening but it's going to take a really long time. It's a timescale current maintainers don't really need to worry about since they'll be retired anyway.

load more comments (6 replies)
[-] svcg 27 points 3 weeks ago

I am no visionary but if Linux doesn’t internalize this, I’m afraid some other kernel will do to it what it did to Unix.

Maybe that's not a bad thing? If you ask me the GNU people are missing a trick. Perhaps if they rewrote Hurd in Rust they could finally shed that "/Linux".

load more comments (6 replies)
[-] x00za@lemmy.dbzer0.com 23 points 3 weeks ago

Even though I respect and applaud the move towards Rust, I absolutely hate the syntax and a lot of the logic.

Maybe the person in the video secretly feels the same way.

[-] fluxx@lemmy.world 18 points 3 weeks ago

Well, I've been a C/C++ dev for half of my career, I didn't find Rust syntax ugly. Some things are better than others, but not a major departure from C/C++. ObjC is where ugly is at. And I even think swift is more ugly. In fact, I can't find too many that are as close to C/C++ as Rust. As for logic.... Well, I want to say you'll get used to it, but for some things, it's not true. Rust is a struggle. Whether it's worth it, is your choice. I personally would take it over C++ any day.

load more comments (2 replies)
[-] OrekiWoof@lemmy.ml 14 points 3 weeks ago

I just don't understand this. You get used to the syntax and borrow checker in a day or two. It's a non-issue.

load more comments (5 replies)
[-] Giooschi@lemmy.world 13 points 3 weeks ago

That doesn't really excuse its behavior in the video though.

load more comments (5 replies)
[-] yournamehere@lemm.ee 20 points 3 weeks ago

RUST ppl feel like ARCH ppl. yes it might be better than some other setup yadda yadda, but they are so enervating.i'd rather switch back to windows11 than read another post/blog on how som crustians replaced this or that c library. just shut up already.

load more comments (6 replies)
[-] Charadon@lemmy.sdf.org 20 points 3 weeks ago

omfg, that guy in the video...

[-] ik5pvx@lemmy.world 19 points 3 weeks ago

At the cost of sounding naive and stupid, wouldn't it be possible to improve compilers to not spew out unsafe executables? Maybe as a compile time option so people have time to correct the source.

[-] chrash0@lemmy.world 67 points 3 weeks ago

the semantics of C make that virtually impossible. the compiler would have to make some semantics of the language invalid, invalidating patterns that are more than likely highly utilized in existing code, thus we have Rust, which built its semantics around those safety concepts from the beginning. there’s just no way for the compiler to know the lifetime of some variables without some semantic indication

[-] it_depends_man@lemmy.world 50 points 3 weeks ago

At the cost of sounding naive and stupid

It may be a naive question, but it's a very important naive question. Naive doesn't mean bad.

The answer is that that is not possible, because the compiler is supposed to translate the very specific language of C into mostly very specific machine instructions. The programmers who wrote the code, did so because they usually expect a very specific behavior. So, that would be broken.

But also, the "unsafety" is in the behavior of the system and built into the language and the compiler.

It's a bit of a flawed comparison, but you can't build a house on a foundation of wooden poles, because of the advantages that wood offers, and then complain that they are flammable. You can build it in steel, but you have to replace all of the poles. Just the poles on the left side won't do.

And you can't automatically detect the unsafe parts and just patch those either. If we could, we could just fix them directly or we could automatically transpile them. Darpa is trying that at the moment.

[-] ik5pvx@lemmy.world 13 points 3 weeks ago

Thank you and all the others that took time to educate me on what is for me a "I know some of those words" subject

load more comments (1 replies)
[-] snaggen@programming.dev 16 points 3 weeks ago* (last edited 3 weeks ago)

The problem is that C is a prehistoric language and don't have any of the complex types for example. So, in a modern language you create a String. That string will have a length, and some well defined properties (like encoding and such). With C you have a char * , which is just a pointer to the memory that contains bytes, and hopefully is null terminated. The null termination is defined, but not enforced. Any encoding is whatever the developer had in mind. So the compiler just don't have the information to make any decisions. In rust you know exactly how long something lives, if something try to use it after that, the compiler can tell you. With C, all lifetimes lives in the developers head, and the compiler have no way of knowing. So, all these typing and properties of modern languages, are basically the implementation of your suggestion.

[-] zaphod@sopuli.xyz 14 points 3 weeks ago

Modern C compilers have a lot of features you can use to check for example for memory errors. Rusts borrow-checker is much stricter as it's designed to be part of the language, but for low-level code like the Linux kernel you'll end up having to use Rust's unsafe feature on a lot of code to do things from talking to actual hardware to just implementing certain data structures and then Rust is about as good as C.

load more comments (2 replies)
[-] gencha@lemm.ee 13 points 3 weeks ago

I feel like the time to hide information behind YouTube links is over. Feels like a link to a paywall article at this point.

[-] faltryka@lemmy.world 13 points 3 weeks ago
[-] NauticalNoodle@lemmy.ml 13 points 3 weeks ago

I admit I'm biased towards C-languages out of sheer personal preference and limited exposure to Rust but I am wondering, are there any major technical barriers to Rust replacing these languages in it's current form anymore?

I know there has been a lot of movement towards supporting Rust in the last 6 years since I've become aware of it, but I also get flashbacks from the the early 00's when I would hear about how Java was destined to replace C++, and the early 2010's when Python was destined to replace everything only to realize that the hype fundamentally misunderstood the use case limitations of the various languages.

load more comments (3 replies)
load more comments
view more: next ›
this post was submitted on 29 Aug 2024
501 points (100.0% liked)

Linux

47363 readers
933 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS