Julian Andres Klode, the main maintainer of the APT project, recently made an announcement regarding a significant decision. The decision entails adding Rust code to the APT package manager, along with incorporating the Rust compiler, the Rust standard library, and the PGP toolkit from the Sequoia project written in Rust as required dependencies. The implementation of these changes is scheduled to take place no sooner than May 2026, granting Debian port developers a six-month window to ensure the proper functioning of the Rust toolkit or abandon the port altogether.
The plan involves integrating APT components using Rust to address areas that demand heightened security measures. This includes developing parsers for deb, ar, and tar formats, as well as implementing code to verify digital signatures. In a previous APT 3.0 release, the capability to utilize the sqv utility written in Rust to verify digital signatures was introduced, replacing the need to call gpgv.
The forthcoming transition underscores the importance of the project’s evolution and its reliance on contemporary tools and technologies. The aim is to advance without interruptions caused by trying to adapt modern software onto outdated systems, signaling a strategic move towards embracing current industry standards.