Video: sudo-rs and beyond (Ubuntu Summit 25.10)

Marc
Systems software engineer
After sudo-rs was included in the 25.10 release of Ubuntu, Marc was invited to the Ubuntu Summit to talk about the design choices that shaped sudo-rs. You can now watch the recording of the talk.

This article was originally posted on the Trifecta Tech Foundation blog, the non-profit backed by Tweede golf and the long-term home for open infrastructure projects like sudo-rs.

About sudo-rs

sudo-rs is a safety-oriented and memory-safe implementation of sudo and su written in Rust. It was initiated by Prossimo, built by a joint team from Ferrous Systems and Tweede golf, and has since moved to Trifecta Tech Foundation to ensure long-term maintenance.

It is meant to be a drop-in replacement for all common use cases of sudo, i.e. supporting all commonly used command line options from the original sudo implementation.

This also means that some parts of the original sudo are explicitly not in scope. To learn about the considerations that were made, watch the recording of Marc's talk:

About Marc

Marc Schoolderman is a Software Developer at Tweede golf, and the lead engineer of sudo-rs. He enjoys low-level programming, and working with a team of skilled engineers in an open source environment. Previously, he spent time in academia, researching ways to make formal verification practical. In his spare time, Marc likes solving non-existing problems using bash+awk+sed, learning about history, and dabbling in analogue photography.

About Trifecta Tech Foundation

Trifecta Tech Foundation is a non-profit and a Public Benefit Organisation (501(c)(3) equivalant) that creates open-source building blocks for critical infrastructure software. Their initiatives Data compression, Time synchronization and Privilege boundary, impact the digital security of millions of people. Find out how to support their work here.

Stay up-to-date

Stay up-to-date with our work and blog posts?

Related articles

On Thursday 11 September 2025, I attended the LF Energy Summit in Aachen, Germany, where I gave the talk ‘Rust Meets the Grid: Building openleadr-rs for Real-World Demand Response’, together with Ton Smets from ElaadNL.
The Dutch Electoral Council (known as the Kiesraad in Dutch) are developing Abacus: new open-source software for computing election results. We looked into how we can verify the correctness of the algorithm used for seat apportionment. In this blog post, we will discuss various ways of verifying software in Rust, from unit testing to model-based verification and fuzzing. In particular, property-based fuzzing turned out to be very useful for finding bugs in the seat apportionment algorithm.

Over the past couple of months we've been hard at work on libbzip2-rs, a 100% Rust drop-in compatible implementation the bzip2 compression and decompression functionality.

For this project, we used c2rust for the initial translation from the C code to a Rust implementation. The generated Rust code has now been cleaned up and made safe where possible. This post describes our experiences using c2rust for this project.