[Debian] Hard Rust requirements from May onward

https://lwn.net/ml/all/20251031213541.GA73786@debian.org/

Hi all,

I plan to introduce hard Rust dependencies and Rust code into APT, no earlier than May 2026. This extends at first to the Rust compiler and standard library, and the Sequoia ecosystem.

In particular, our code to parse .deb, .ar, .tar, and the HTTP signature verification code would strongly benefit from memory safe languages and a stronger approach to unit testing.

If you maintain a port without a working Rust toolchain, please ensure it has one within the next 6 months, or sunset the port.

It's important for the project as whole to be able to move forward and rely on modern tools and technologies and not be held back by trying to shoehorn modern software on retro computing devices.

Thank you for your understanding.

94 points · 7 comments · view on lemmy.world

7 Comments

frongt@lemmy.zip · 33 pts · 311d (1 reply)

From the thread:

Rust is already a hard requirement on all Debian release architectures and ports except for alpha, hppa, m68k, and sh4 (which do not provide sqv).

So it looks like this is going to be a much less impactful change than that original one.

grue@lemmy.world · 3 pts · 310d

Do any of those architectures even still have new CPUs being designed for them in the last decade or so?

boredsquirrel@slrpnk.net · 6 pts · 310d

Very nice!

There are also rust rewrites for git, tor etc.

Skullgrid@lemmy.world · 3 pts · 311d (3 replies)

What does this mean if I am developing C++ programs or using C++ programs? Or is it just APT architecture?

grue@lemmy.world · 12 pts · 310d (2 replies)

It sounds to me like the toolchain to build apt itself, not stuff packaged by it.

Skullgrid@lemmy.world · 6 pts · 310d

great, way above my pay grade, don't have to care, but appreciate the transparency.

chrysn@chaos.social · 1 pts · 310d

Yes; I think this primarily impacts platforms that are not using full Debian but use the dpkg/apt system only, especially on architectures that are not Debian release architectures.