Comment by Havoc

Comment by Havoc 3 days ago

44 replies

I’d imagine this will go a bit like the rust rewrite of sudo etc. Despite the memory safety advantages at least towards the start it still ends up more fragile because the incumbent has years of testing and fixing behind it

fulafel 3 days ago

They're not aiming at replacing SQLite-in-C with SQLite-in-Rust, they're doing this so they can implement more additional functionality faster than with C's chainsaw-juggling-act semantics and the inability to access the proprietary SQLite test suite.

See the features and roadmap at https://github.com/tursodatabase/turso

  • adamzwasserman 3 days ago

    IMHO breaking free of SQLite's proprietary test suite is a bigger driver than C vs Rust. Turso's Limbo announcement says exactly that: they couldn't confidently make large architectural changes without access to the tests. The rewrite lets them build Deterministic Simulation Testing from scratch, which they argue can exceed SQLite's reliability by simulating unlikely scenarios and reproducing failures deterministically.

    • pseudohadamard 2 days ago

      Having seen way too many "we're going to rewrite $xyz but make it BETTERER!!", I don't give this one much chance of success. SQLite is a high-quality product with a quarter-century of development history and huge amounts of effort, both by the devs and via public use, of testing. So this let's-reinvent-it-in-Rust effort will have to beat an already very good product that's had a staggering amount of development effort and testing put into it which, if the devs do manage to get through it all, will end up being about the same as the existing thing but written in a language that most of the SQLite targets don't work with. I just can't see this going anywhere outside of hardcore Rust devotees who want to use a Rust SQLite even thought it still hasn't got past the fixer-upper stage.

      • adamzwasserman 2 days ago

        fragmede is correct.

        I needed SQLite as a central system DB but couldn't live with single-writer. So I built a facade that can target SQLite, Postgres, or Turso's Rust rewrite through one API. The useful part: mirroring. The facade writes to two backends simultaneously so I can diff SQLite vs Turso behavior and catch divergences before production. When something differs, I either file upstream or add an equalizing shim. Concurrent writes already working is a reasonable definition of success. It's why I'm using it.

    • CharlesW 3 days ago

      > IMHO breaking free of SQLite's proprietary test suite is a bigger driver than C vs Rust.

      I don't understand this claim, given the breadth and depth of SQLite's public domain TCL Tests. Can someone explain to me how this isn't pure FUD?

      "There are 51445 distinct test cases, but many of the test cases are parameterized and run multiple times (with different parameters) so that on a full test run millions of separate tests are performed." - https://sqlite.org/testing.html

      • lmm 3 days ago

        The test suite that the actual SQLite developers use to develop SQLite is not open-source. 51445 open-source test cases is a big number but doesn't really mean much, particularly given that evidently the SQLite developers themselves don't consider it enough to provide adequate coverage.

      • adamzwasserman 2 days ago

        SQLite's test suite is infamously gigantic. It has two parts: the public TCL tests you're referencing, and a much larger proprietary test suite that's 100x bigger and covers all the edge cases that actually matter in production. The public tests are tiny compared to what SQLite actually runs internally.

      • einsteinx2 3 days ago

        The irony is if they only had the public domain tests, no one would complain even though it would mean the exact same number of open source tests.

        • dullcrisp 2 days ago

          That’s like if I gave you half the dictionary and then said it’s ironic that if there really weren’t any letters after “M” you wouldn’t be complaining.

      • digitalPhonix 3 days ago

        The next bullet point:

        > 2. The TH3 test harness is a set of proprietary tests…

  • thisislife2 3 days ago

    In other words, they are creating their own database and hitching on to the SQLite brand to market it. (That's fine though).

    • dlisboa 3 days ago

      I think it's fair to say they tried using SQLite but apparently had to bail out. Their use case is a distributed DBaaS with local-first semantics, they started out with SQLite and only now seem to be pivoting to "SQLite-compatible".

      Building off of that into a SQLite-compatible DB doesn't seem to me as trying to piggyback on the brand. They have no other option as their product was SQLite to begin with.

    • IshKebab 3 days ago

      No that's completely incorrect. It's compatible with SQLite, not just in the same spirit:

      > SQLite compatibility for SQL dialect, file formats, and the C API

    • shimman 3 days ago

      I don't think that's fine at all, it's quite a shitty thing to do hoenstly and I'm not surprised it's a VC backed company doing it.

      • fragmede 2 days ago

        How would you do it then?

        • shimman 2 days ago

          I'd probably wouldn't ride the coattails of another open source project that provides hundreds of billions in value for free annually for anyone on this Earth in order to make a quick buck. IDK I have morals and it seems if you want VC funding you must lack them.

          It's no different than the hucksters that take public domain books and slut them up in order to make some coin peddling smut.

  • groundzeros2015 3 days ago

    Without the test suite isn’t even more likely to have stability problems?

    • 9rx 3 days ago

      Not likely. The alternative was for them to modify SQLite without the test suite and no obvious indication of what they would need to do to try to fill in the gaps. Modifying SQLite with its full test suite would be the best choice, of course, but one that is apparently[1] not on the table for them. Since they have to reimagine the test suite either way, they believe they can do a better job if the tests are written alongside a new codebase.

      And I expect they are right. Trying to test a codebase after the fact never goes well.

      [1] With the kind of investment backing they have you'd think they'd be able to reach some kind of licensing deal, but who knows.

      • dizhn 2 days ago

        I don't get this. In their own rust implementation they have to write and use their own test and they still don't have access to the proprietary sqlite tests. So their implementation will necessarily be whatever they implement + whatever passes their tests. Same as it would be if they forked sqlite in C. (Plus they would have the open source tests). Am I missing something?

        • 9rx 2 days ago

          You are missing that HN accounts needlessly overthink everything, perhaps?

          Otherwise, I doubt it. They have to write the tests again no matter what. Given that, there is no downside to reimplementing it while they are at it. All while there is a big upside to doing that: Trying to test something after the implementation is already written never ends well.

          That does not guarantee that their approach will succeed. It is hard problem no matter how you slice it. But trying to reverse engineer the tests for the C version now that all knowledge of what went into it in the first place is lost is all but guaranteed to fail. Testing after the fact never ends well. Rewriting the implementation and tests in parallel increases the chances of success.

    • dlisboa 3 days ago

      Maybe. It's hard to know what kind of issues that test suite covers. If memory safety is the main source of instability for the C implementation then the Rust implementation won't be too affected without the test suite. Same if it focus a lot on compatibility with niche embedded platforms and different OSes, which Turso won't care to lose.

      "Stability" is a word that means different things for different use cases.

    • 0x457 3 days ago

      Turso has its own test suite that in the repo.

      • groundzeros2015 3 days ago

        but the other one has decades of engineering effort and is based on real world problems

SpecialistK 3 days ago

Of all the projects which may benefit from a rewrite or re-imagining in a memory-safe language, I'm really puzzled why it's heavily-tested, near-universally-deployed software such as sudo (use oBSD doas instead?), the coreutils, and sqlite.

  • dizhn 2 days ago

    Doas supports a subset of sudo functionality by design. Your comment is exactly what I said when I first heard about the rust linux utils thing. The best they can do is have new bugs.

  • Havoc 3 days ago

    I don't think there is a big picture plan. It requires that someone care both about rust and the thing

    ...which is a pretty arbitrary combination

tracker1 3 days ago

I definitely wouldn't be surprised by bugs and/or compatibility issues over time. Especially in the near term. I'm mixed, but somewhat enthusiastic on Turso's efforts to create client-server options and replication.

In the past I've reached for FirebirdSQL when I needed local + external databases and wanted to limit the technology spread... In the use case, as long as transactions synched up even once a week it was enough for the disparate remote connections/systems. I'm honestly surprised it isn't used more. That said, SQLite is more universal and lighter overall.

  • adamzwasserman 3 days ago

    Building a production app on Turso now. No bugs or compatibility issues so far. The sqlite API isn't fully implemented yet, so I wrote a declarative facade that backfills the missing implementations and parallels writes to both Turso and native sqlite: gives me integrity checking and fallback while the implementation matures

zbentley 3 days ago

Isn’t the rust rewrite deployed as part of some fairly significant Linux distros these days?

That’s hearsay that I haven’t dug into, so I may well be wrong.

  • ktimespi 3 days ago

    Ubuntu is deploying it in a non-LTS release, and they're trying to get the bugs out of the way is what I'm hearing