this post was submitted on 09 Sep 2024
186 points (94.7% liked)

Programming

17350 readers
241 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities [email protected]



founded 1 year ago
MODERATORS
 

Google recently rewrote the firmware for protected virtual machines in its Android Virtualization Framework using the Rust programming language and wants you to do the same, assuming you deal with firmware.

In a write-up on Thursday, Android engineers Ivan Lozano and Dominik Maier dig into the technical details of replacing legacy C and C++ code with Rust.

"You'll see how easy it is to boost security with drop-in Rust replacements, and we'll even demonstrate how the Rust toolchain can handle specialized bare-metal targets," said Lozano and Maier.

Easy is not a term commonly heard with regard to a programming language known for its steep learning curve.

Nor is it easy to get C and C++ developers to see the world with Rust-tinted lenses. Just last week, one of the maintainers of the Rust for Linux project - created to work Rust code into the C-based Linux kernel - stepped down, citing resistance from Linux kernel developers.

"Here's the thing, you're not going to force all of us to learn Rust," said a Linux kernel contributor during a lively discussion earlier this year at a conference.

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 69 points 2 months ago (4 children)

One of the deep-pocketed founding members of the Rust Foundation says it's easy. I'm surprised.

[–] [email protected] 21 points 1 month ago (1 children)

Wut? They're a member, because they find Rust useful. This is just them saying another time that they find Rust useful.
While they (and everyone using Rust) will benefit off of more people using Rust, it's not like they have a vested interest to the point of spreading misinformation.

[–] [email protected] 11 points 1 month ago (1 children)

They’re a member, because they find Rust useful. This is just them saying another time that they find Rust useful.

Fans of a programming language stating they like the programming language is hardly thought-provoking stuff. There are also apps written in brainfuck and that means nothing as well.

[–] [email protected] 5 points 1 month ago

I'm pretty sure that's not how dyslexia works, but either way, I didn't write that. And while the title of the article suggests otherwise, the news here isn't that Google says something is easy. The news is that they published a guide to make that thing easy.

[–] [email protected] 15 points 1 month ago (2 children)

Clearly Rust is a conspiracy.

[–] [email protected] 5 points 1 month ago (6 children)

Clearly Rust is a conspiracy.

Anyone in software development who was not born yesterday is already well aware of the whole FOMO cycle:

  1. hey there's a shiny new tool,
  2. it's so fantastic only morons don't use it,
  3. oh god what a huge mistake I did,
  4. hey, there's a shiny new tool,
[–] [email protected] 10 points 1 month ago (3 children)

I assume that you do know that tools improve objectively in the cycle and are making a joke on purpose.

load more comments (3 replies)
load more comments (5 replies)
[–] [email protected] 5 points 1 month ago

The ruinous powers are plotting once more

load more comments (2 replies)
[–] [email protected] 69 points 2 months ago (21 children)

Here's the thing, you're not going to force all of us to learn Rust

That seems like a poor attitude imo.

[–] [email protected] 35 points 2 months ago (4 children)

A valid point tho. Generally it is difficult to ask everybody to learn a new language.

[–] [email protected] 49 points 2 months ago (3 children)

I mean, I work as a software engineering and if I'm not doing continuing ed, be it about architecture, storage, or new languages, I'm going to be of less value in the marketplace. I've learnt languages I didn't particularly want to in the past for work (though I generally came to tolerate or even like some of them. Not lua, though; lua can go to hell).

If Rust truly is the better, safer option, then these people are holding everything back.

[–] [email protected] 36 points 2 months ago* (last edited 2 months ago) (7 children)

"learn Rust" in this case is learn it to a level where all of the little behaviour around cross language integrations are understood and security flaws won't be introduced. Expert level.

It's not "I did a pet project over the weekend".

[–] [email protected] 25 points 2 months ago (4 children)

You are correct and I am aware of that. However, it also seems that they both refuse to learn it and refuse to work with people at that expert level based on the recent drama, which seems very much like holding things back to me.

load more comments (4 replies)
load more comments (6 replies)
[–] [email protected] 23 points 2 months ago (1 children)

C/C++ is the bedrock of our modern civilization in some ways more fundamental than actual bedrock, the first step in getting any OS running is making it run C and after that you are basically done, it’s not surprising that developers resist, if nothing else it’s a common language, and standards are hard to change on the best of days. This isn’t just learning a language, it’s a complete paradigm shift.

[–] [email protected] 15 points 1 month ago (1 children)

The bedrock of modern civilizations is expensive to develop, buggy and unergonomic though.

If you make C run, you probably (I'm not sure, would have to verify) can make rust run. And if there isn't yet, there will probably soon be a C compiler written in rust, so you can choose to bootstrap from wherever you prefer.

C's ABI will probably last longer than C, since there is not a stable rust ABI though.

[–] [email protected] 7 points 1 month ago* (last edited 1 month ago) (3 children)

You cannot, today, build a Rust compiler directly from C, but you're right that people are working on it. See this recent post: https://notgull.net/announcing-dozer/

Edit: you can certainly bootstrap Rust from C via C++, as the article covers. I misinterpreted the comment above.

load more comments (3 replies)
[–] [email protected] 5 points 1 month ago

It's not a question of what's the better option. In reality we have a lot of software that already exists and works, and you can't replace it all in bulk at the same time. So the question is whether the implementation of Rust makes logistical sense, given the difficulties of maintaining currently existing software while replacing some parts of it.

[–] [email protected] 37 points 2 months ago

Fortunately, they aren’t being asked to do that. All the rust team was requesting was metadata about the call signatures so that they could have a grasp on expected behavior.

[–] [email protected] 24 points 1 month ago

It would be a valid point if he weren't literally speaking over the people trying to tell him that they're not demanding he learn Rust: https://youtu.be/WiPp9YEBV0Q?si=b3OB4Y9LU-ffJA4c&t=1548

load more comments (1 replies)
[–] [email protected] 26 points 1 month ago (1 children)

Oh jeeze, you have no idea. You can watch it yourself: https://youtu.be/WiPp9YEBV0Q?si=b3OB4Y9LU-ffJA4c&t=1548

That timestamp is about where the audience member (a maintainer of ext4 and related utilities) starts speaking. The "here's the thing" quote is around 28:40.

[–] [email protected] 21 points 1 month ago

Wow what an absolute dick

[–] [email protected] 6 points 1 month ago (1 children)

I mean aren't they forcing everyone else to learn C/C++ otherwise? If we follow that logic, at least

[–] [email protected] 4 points 1 month ago (2 children)

I guess you can argue it's already written in C. So that was always a requirement.

[–] [email protected] 3 points 1 month ago (6 children)

That way we'll just find maintainers went near extinct over time, just like COBOL developers that are as rare as they are expensive. Only Linux kernel isn't a bank, and maybe will not have as much money to pay to rare developers capable of maintaining C codebase

load more comments (6 replies)
load more comments (1 replies)
load more comments (18 replies)
[–] [email protected] 46 points 1 month ago* (last edited 1 month ago) (2 children)

2024: Google says replacing C/C++ with Rust is easy

2025: Google buys Rust

2026: Google shuts down Rust

[–] [email protected] 8 points 1 month ago* (last edited 1 month ago) (1 children)

😆🙄🤔Wait, Isn't rust a community made project?

[–] [email protected] 18 points 1 month ago (1 children)
load more comments (1 replies)
[–] [email protected] 3 points 1 month ago

2028: Rust 2

[–] [email protected] 10 points 1 month ago

They need to tell that to Theodore Ts’o.

[–] [email protected] 7 points 1 month ago (2 children)

Rust is one of those things that every time I look into it, I don't really follow what makes it so good. What's a good starter project to learn the language and get a sense of what makes it worthwhile over the established stuff?

[–] [email protected] 3 points 1 month ago (2 children)
  1. If your alternative is C++ then it removes the enormous burden of manually tracking lifetimes and doing manual memory management. C++ does have RAII which helps with that enormously but even then there are a gazillion footguns that Rust just doesn't have - especially with the newer stuff like rvalue references, std::move, coroutines etc. It also saves you from C++'s dreaded undefined behaviour which is everywhere.

  2. It has a very strong (and nicely designed) type system which gives an "if it compiles it works" kind of feel, similar to FP languages like Haskell (so they say anyway; I've not used it enough to know). The borrow checker strongly pushes you to write code in a style that somehow leads to less buggy code. More compiler errors, but much less debugging and fixing bugs.

  3. The libraries and APIs are generally very well designed and nice to use. If you've ever used Dart or Go think how nice the standard library is compared to JavaScript or PHP. It took C++ like 2 decades to get string::starts_with but Rust started with it (and much more!).

  4. Fast by default.

  5. Modern tooling. No project setup hassle.

  6. It's a value based language, not reference based. References are explicit unlike JavaScript, Java, C#, etc. This is much nicer and makes things like e.g. copying values a lot easier. JavaScript's answer for ages was "serialise to JSON and back" which is crazy.

Downsides:

  1. Slow compilation sometimes. I'd say it's on par with C++ these days.

  2. Async Rust is kind of a mess. They shipped an MVP and it's still kind of hard to use and has unexpected footguns, which is a shame because sync Rust avoids footguns so well. Avoid async Rust if you can. Unfortunately sometimes you can't.

  3. Interop with C++ is somewhat painful because Rust doesn't have move constructors.

Great language overall. Probably the best at the moment.

[–] [email protected] 5 points 1 month ago (2 children)

I disagree with 5.

I am an electronics engineer, so admittedly only ever worked with C and Python scripting (and not a programmer by any means) but I literally stopped learning rust for embedded because every single tooling setup step was wrong or failed for both chips I was testing out (NRF chip and an esp32-C3). Maybe only embedded rust was still a mess tooling-wise, but I have no use case for learning userspace rust first. It would just be a waste of my limited free time 😅

load more comments (2 replies)
[–] [email protected] 3 points 1 month ago (1 children)

I would add to the downside that it's not the best programming language for game development, etc. There was some blog post about how troublesome is it to develop games using Rust due to some of the features that are good in other areas, like the whole concept of "immutable by default".

I can also recommend D, if you want to deal with different issues, like the D Language Foundation fearing of change due to not wanting to deal with division from a new and incompatible version yet again, the GC being both a blessing and curse, if you want to go without a (tracing) GC you'll need to go with a custom runtime that potentially missing many of its features, the attribute hell, etc.

load more comments (1 replies)
load more comments (1 replies)
[–] [email protected] 4 points 2 months ago (1 children)

If the target for the firmware has stdlib already implemented, my experience has been that it is indeed easy with minimal experience in the language.

[–] [email protected] 32 points 2 months ago (2 children)

Mixing "firmware" with "easy with minimal experience" in the same sentence makes me cringe...

[–] [email protected] 13 points 1 month ago (2 children)

That's fair. To be clear, I meant minimal experience with the Rust programming language. I've mainly tinkered with ESP32 types of MCUs in Arduino and CircuitPython when it comes to firmware, but have much more software experience. In some ways, I found the little bit of Rust that I tried easier because of the tooling - defaulting to a CLI tool to flash rather than an IDE is much more comfortable for me.

load more comments (2 replies)
load more comments (1 replies)
load more comments
view more: next ›