Alpine Linux: Proposal to move Rust to main

https://gitlab.alpinelinux.org/alpine/tsc/-/issues/21

by thecatster • 5 years ago

187 63 5 years ago

gitlab.alpinelinux.org

Corrado• 5 years ago

"With the introduction of Rust to the base system, it may be desirable to oxidize certain components which have high security value in the system."

This is such a great way to phrase this activity; I really hope it catches on with other projects.

Waterluvian• 5 years ago

Do you mind explaining what it means to you and why you love it?

My guess is this means “help fuel the advancement of…” but I’m having a slow day.

I get that there’s also a pun there I think?

alderz• 5 years ago

Metals get rust by an oxidation process.

djxfade• 5 years ago

If iron oxidizes, it turns in to rust

kaladin-jasnah• 5 years ago

Not OP, but I think "oxidize" here would refer to... rewriting the components in Rust.

cogburnd02• 5 years ago

I'd assume it meant 'rewrite in rust.'

boulos• 5 years ago

Do you specifically mean "oxidize"? If so, that's already the term. If not, did you mean the "high-security value" part?

Edit: https://wiki.mozilla.org/Oxidation is an example of the history of the term, though amusingly it doesn't show up on https://en.wikipedia.org/wiki/Rust_(programming_language)

patcon• 5 years ago

I also think it's neat. My read of it was that they were saying it like "hardening at the surface", e.g., https://www.sciencedirect.com/topics/materials-science/surfa...

Though technically oxidization can either strengthen or weaken a surface, so it's not a perfect phrasing, if so

nsajko• 5 years ago

I don't know what do you like about the phrasing, but it's not really friendly. The word "oxidize" used like that is clearly a Rust community slang, so it signals that the author identifies with the (a?) Rust community, but it also has the effect of alienating those who are not members of the subculture.

Apart from that, I find it strange that people are so brazen with the whole "rewrite stuff in Rust" agenda.

alias_neo• 5 years ago

I'm not a member of the Rust community (yet), but there was no great leap to understand the oxidation "in-reference", it may very well be community slang, but the link between oxidation and rust in the English language is not at all misunderstood.

As for the agenda of re-write everything in Rust, I cannot comment; as a software engineer I love re-writing things in my new favourite language of the day, so my judgement is clouded.

Zababa• 5 years ago

Apart from that, I find it strange that people are so brazen with the whole "rewrite stuff in Rust" agenda.

They used to, but these days they calmed down a lot, and most actively fight against the RIIR (Rewrite It In Rust) meme. I think part of it is because lots of people were exposed to low-level programming through Rust. I know that when I first started working with legacy/old code, I had the urge to rewrite everything. It took me some time to gain respect and trust in the code that was already running. On the other hand, sometimes my insights as a newcomer were valuable. It's a balance you have to strike between the new and the old, as with all things. Young people have the energy and new ideas, old people have the experience and stability. Both are needed. They'll sometimes clash against each other, but with time everyone will gain respect for the other party. I feel like it's what happened with the Rust community. These days it's less "rewrite everything in Rust!" and more "Rust is an option here. Does it makes sense? What are the alternatives?". The language is not even 10 years old at this point. Same thing for the community. They've already matured a lot.

jml7c5• 5 years ago

Incidentally, the inspiration for the name may be more due to rusts (the fungi) than to rust (oxidized iron). See: https://www.reddit.com/r/rust/comments/27jvdt/internet_archa...

olingern• 5 years ago

It is assumed that by following the steps in this proposal that Alpine users will be presented with a functional Rust toolchain which has a maintenance window of 2 years, that is also supportable by the Rust community through its normal support channels.

I’m struggling to see the benefit of moving from community to main. It seems more symbolic and geared towards making certain guarantees for end users, but it’s hard to grok that

EwanToo• 5 years ago

I think without that commitment, it's hard for the overall Alpine distribution and other teams working on it to use Rust as part of their toolchain.

RcouF1uZ4gsC• 5 years ago

I’m struggling to see the benefit of moving from community to main

I think this is about using Rust in the Alpine distribution itself and having core components actually use Rust.

edoceo• 5 years ago

At this point it's just getting ready to have the future option of more core stuff in Rust. Step0:tooling; Step1:packages

bredren• 5 years ago

There was a thing in February where Python cryptography required rust, which broke docker-compose installs via pip. [1]

There was a fair amount of back and forth about version pinning—it affected a lot of builds.

Even the issue on the crypto package about it was fairly tense. Iirc, the dependency was rolled back.

[1] https://github.com/docker/compose/issues/8105#issuecomment-7...

gpm3• 5 years ago

Iirc, the dependency was rolled back.

I am fairly certain it was not, e.g. see this comment (or just notice that there's still rust code in the codebase)

https://github.com/pyca/cryptography/issues/5771#issuecommen...

(Edit: Changed link to a better one)

reaperhulk2• 5 years ago

(I'm one of the cryptography authors)

We did not roll back our dependency, no, although our current release (3.4.x) allows you to disable Rust compilation via an environment variable specifically so we could understand where in the ecosystem challenges would occur. Our next release (now 35.0 based partially on feedback from the community around our unusual versioning) will hard depend on it for all X509 ASN.1 parsing. During the months since we did our first rust release, however, the `musllinux` specification and implementation has been finished so we expect to be able to ship binary wheels for Alpine very shortly. I am actually working on that today, with the only remaining blocker being an update to warehouse to allow wheel upload.

adobrawy• 5 years ago

The Rust was not rolled back from cryptography. The new version of wheel and pip now use the precompiled wheel package for cryptography. Therefore, installing that package does not require the Rust compiler in Docker. However, this does not guarantee that the installation of other Python packages with Rust will also run smoothly.

busterarm2• 5 years ago

What it does still do is make pyca/cryptography incompatible with niche architectures that were previously supported but are unsupported by Rust (due to lack of support by LLVM).

The OpenWrt community learned this the hard way.

user59944612• 5 years ago

You're aware that Python doesn't support Alpine?

The reason is that python is meant to run on Linux systems with glib, but Alphine has musl instead. It's a common source of compatibility issues not limited to python.

Note that pip wheels are only specified and only built for glibc compatibility, so the limitations extends to all python packages.

yung_steezy• 5 years ago

I don't understand why rust integration doesn't happen on a fork, especially for important packages like this. I'm sure people would elect to use py-cryptography-rust and it woule avoid an open-goal from people looking to seize on a rust-related headline in bad faith.

pdimitar5• 5 years ago

This might be a little side-topic but IMO Alpine is famous for having a small byte size footprint.

I love Rust to tears but it produces fairly huge binaries even in release mode and even with some symbols stripping.

So if Alpine also plans to include various Rust tools I'd hope that this will prompt the core team to also work on reducing the sizes of the final Rust binaries.

I don't want to sound entitled! I am very thankful to the entire Rust team. And Rust is hugely important nowadays. It's just that when it comes to distributing stuff in Dockerfiles (and fly.io, and several others) the Rust binaries stick out like a sore thumb. :\ They're fairly big.

dijit2• 5 years ago

Is alpine really going for “small” though?

I’m not saying they’re not small and haven’t done a fantastic job, but my impression is that this is due to being mostly minimal in the default install;

The reason I say this (and I could be wrong) is because the use of musl for the libc means each binary kinda needs to include it’s own libc statically.

This must make the binaries huge!

Also, you can easily make small rust binaries, it’s Golang (of the two) that produces very large binaries.

If you just follow the first two bits of advice from: https://github.com/johnthagen/min-sized-rust you’ll reduce your binary sizes to near C++ levels.

AndyKelley• 5 years ago

the use of musl for the libc means each binary kinda needs to include it’s own libc statically.

This is factually incorrect. Musl supports dynamic linking and if you run `ldd` on any binary in Alpine you can see that it dynamically links against musl libc.

psd1• 5 years ago

In your link, I really enjoyed this link on creating a 45-byte executable: http://www.muppetlabs.com/~breadbox/software/tiny/teensy.htm...

phendrenad2• 5 years ago

Trust in open-source's ability to populate all niches. If Rust is added, and it significantly bloats up the Alpine image, someone will come along and make Alpine-Classic or Montane Linux or something.

raggi3• 5 years ago

This is definitely an area it would be great to see more work in. On Fuchsia we started linking the rust stdlib dynamically, but there are some significant ABI constraints to doing this in a traditional Unix shared library ecosystem that we're able to avoid due to the isolated and storage-deduplicated nature of the package system.

If you do link rusts stdlib dynamically, then you end up with binaries that are equivalent to C++ binary sizes with an external libc++, where rusts stdlib is approximately the same size as libc++, and the release mode stripped binaries are also comparable (within ~1kb of each other, and in the range of 10kb for a standard unix pipeline style application which does some basic stream processing of IO).

pdimitar5• 5 years ago

I am definitely not as well-versed as you -- but for now I'd stick with Rust's statically linking nature. What I am more looking for is to have some very aggressive tree-shaking at the final phases of Rust compilation/linking where the tooling can prove that in your program, say, 73% of the stdlib isn't used at all so it can just remove it from the final binary.

It's my view that as deployment moves more and more to containers and even to the "microkernel + your app only" model then being able to fit binaries in CPU caches will become crucial for the viability of such cloud hosting. (Although to be fair, when we're talking about Rust + the Linux kernel, running something in 25ms vs 5ms can't be a huge deal for 98% of all apps, right?)

brundolf• 5 years ago

Is dynamically linking Rust's standard library officially-supported or did you have to hack around that? I know static-linking is the default but I've never looked into doing otherwise

gizdan• 5 years ago

Maybe I'm misunderstanding but from what I understood, this isn't about adding rust to the base alpine packaging. It's about showing it to be installed from the main repository. Currently it's available in the community repository.

pdimitar5• 5 years ago

Ah, you understand me (and the post) just fine -- hence I mentioned that my comment is a bit out there and not exactly on topic.

I am simply wondering if this would prompt more interest in reducing Rust's final binary sizes, that's all.

pdimitar5• 5 years ago

Not sure why I am eating the down arrows but I'd like to specify: I just tested on a few projects of mine and the binary size reduction is definitely more aggressive and better-looking compared to a year ago. Very happy with the gains! I am leaving my original comment above anyway since there's IMO still some room for improvement.

For comparison, without LTO and stripping I've had a fairly small hobby project easily compile to ~3MB and with them it's now ~800KB which is nearly 400% improvement. Nice.

speed_spread• 5 years ago

Docker acts as late linker for dynamically linked apps, bundling shared libs and executable together. Statically linked Rust apps certainly go against the grain in that model but can often be made significantly smaller with some build and dependency tweaking.

LAC-Tech2• 5 years ago

Alpines biggest issue isn't that it doesn't have rust in main, it's documentation. `apk` is a great package manager but a lot of it is undocumented and you need to read the source.

Mokou• 5 years ago

Are the man pages insufficient?

LAC-Tech2• 5 years ago

Yes

user59944612• 5 years ago

It's unfortunate that the example given is about supporting the Ansible package.

Ansible is a python software and Python doesn't support Alpine.

int_19h• 5 years ago

Python supports Alpine just fine; indeed, the standard Docker Python images include Alpine variants.

If you mean binary wheels, PyPA packaging added support for Alpine wheels a few months ago (https://github.com/pypa/packaging/pull/411), and auditwheel support for the same just shipped today.

Alpine Linux: Proposal to move Rust to main

Related Stories