Ubuntu 26.10 completes transition to Rust-based coreutils

Ubuntu 26.10 完成向基于 Rust 的 coreutils 的过渡

Ubuntu 26.10 completes the distro’s move to Rust-based core utilities, with the commands previously held back due to security issues now migrated to memory-safe versions. Ubuntu 26.10 完成了该发行版向基于 Rust 的核心工具（core utilities）的迁移，此前因安全问题而暂缓迁移的命令现已全部迁移至内存安全版本。

cp, mv and rm were held back on their GNU versions in Ubuntu 26.04 LTS due to a crop of TOCTOU (time-of-check to time-of-use) issues that needed to be fixed in the uutils versions. With those issues resolved upstream, Ubuntu 26.10 finishes the job. The ‘Stonking Stingray’ ships a full set of Rust core utilities, which encompasses common command-line tools like ls, cat, chmod and du. 在 Ubuntu 26.04 LTS 中，由于 uutils 版本中存在一系列需要修复的 TOCTOU（检查时间到使用时间）问题，cp、mv 和 rm 命令仍保留了 GNU 版本。随着这些问题在上游得到解决，Ubuntu 26.10 完成了这项工作。代号为“Stonking Stingray”的版本搭载了全套 Rust 核心工具，涵盖了 ls、cat、chmod 和 du 等常用命令行工具。

Canonical’s engineers began ‘oxidising’ the distro – replacing foundational software with Rust alternatives – in 2025. It sees security benefits in doing so, since Rust catches memory bugs at compile time, whereas C compilers don’t. Ubuntu 25.10 was the first release to ship with Rust-based utilities and made Rust-based sudo the default. Canonical 的工程师于 2025 年开始对该发行版进行“Rust 化”（oxidising），即用 Rust 替代品替换基础软件。Canonical 认为这样做具有安全优势，因为 Rust 可以在编译时捕获内存错误，而 C 编译器则无法做到这一点。Ubuntu 25.10 是首个搭载基于 Rust 的工具并默认使用 Rust 版 sudo 的版本。

Migrating hasn’t been without hiccups, but Canonical has been studious. It commissioned a security audit of uutils ahead of 26.04, which found the issues that kept the three commands back on their GNU versions. It’s also a gold sponsor of the Trifecta Tech Foundation, giving €40,000 a year to fund its work on Rust software. The non-profit foundation is undertaking a Rust-based rewrite of the Network Time Protocol (NTP), and Ubuntu plans to use it as the default time sync client by 27.10. 迁移过程并非一帆风顺，但 Canonical 一直非常谨慎。在 26.04 发布前，他们委托对 uutils 进行了安全审计，正是这次审计发现了导致上述三个命令保留 GNU 版本的问题。Canonical 还是 Trifecta Tech Foundation 的黄金赞助商，每年捐赠 4 万欧元用于资助其 Rust 软件开发工作。该非营利基金会目前正在用 Rust 重写网络时间协议（NTP），Ubuntu 计划在 27.10 版本中将其作为默认的时间同步客户端。

Here, the completion of the coreutils migration offers no functional difference to end users. The Rust-based uutils aims for drop-in compatibility with GNU versions, and treats any deviances as a bug. That’s by designed; the point is one of improved security. 对于终端用户而言，coreutils 迁移的完成在功能上没有任何区别。基于 Rust 的 uutils 旨在与 GNU 版本实现直接兼容，并将任何偏差视为 Bug。这是设计使然，其核心目的在于提升安全性。

Ubuntu 26.10 ‘Stonking Stingray’ beta arrives later this month, before the stable release on 15 October, 2026. Ubuntu 26.10 “Stonking Stingray” 测试版将于本月晚些时候发布，正式版定于 2026 年 10 月 15 日发布。