Hacker ApprovedDepartments

BusyBox

Hacker Approved

Ranked 3 of 4 command-line toolkits by recommenders

People recommend BusyBox as one tiny binary bundling many Unix tools, ideal for embedded systems and initrds. Critics cite security issues.

17 people recommended BusyBox in Hacker News comments, 9 had mixed feelings and 4 criticized it, November 2025 to October 2026.

Summary written by Claude from 27 comments.

30 people gave an opinion

recommend it
17
mixed feelings
9
warn against or regret it
4

The record

Each figure is one person. RecommendsMixed feelingsCriticizes

Recommended in 9 of 12 months

In 15 different threads.

  1. November 2025: not recommended
  2. December 2025: recommended
  3. January 2026: not recommended
  4. February 2026: recommended
  5. March 2026: recommended
  6. April 2026: recommended
  7. May 2026: recommended
  8. June 2026: recommended
  9. July 2026: recommended
  10. August 2026: recommended
  11. September 2026: not recommended
  12. October 2026: recommended

Why it carries the badge

  • 17 people recommend itNeeds 10 or more, met.
  • 4.3 recommenders for every criticNeeds 2 to 1 or better, met.
  • Recommended in 9 of 12 monthsNeeds 4 or more, met.
  • Recommended in 15 threadsNeeds 5 or more, met.
  • The biggest thread supplies 24% of its recommendersNeeds half or less, met.

The same rules apply to every product, and the badge can’t be bought. Mixed feelings count toward neither side. How the badge works

What people say about it

Reasons grouped from a sample of 27 of the 34 opinions about it, picked in proportion to how many people recommend it, have mixed feelings and criticize it. Each mark is one comment in the sample. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Very small size and footprint

    “the low system requirements for something like busybox + lua stack are extremely minimal”

    Comment from 12 Oct 2026 in “A Modern Web App in C”

    “Left me plenty of user space for doing command line work on my 4MB 386”

    Comment from 22 Jun 2026 in “An Embedded Linux on a Single Floppy”

    “when it comes to space efficiency BusyBox is probably hard to beat”

    Comment from 15 Jul 2026 in “Show HN: 18KB ls alternative in no_std rust and Libc”
  • Suited to embedded and initrd use

    “Most people interested in barebones Linux should instead start with a kernel and busybox”

    Comment from 14 Feb 2026 in “Linux from Scratch Ends SysVinit Support”

    “He used to be a maintainer of busybox, a GNU clone for embedded devices.”

    Comment from 3 Dec 2025 in “Ghostty is now non-profit”

    “You may also want to build and run busybox for your tiny userspace.”

    Comment from 15 Jun 2026 in “Boot Naked Linux”
  • Best coreutils option on Windows

    “Busybox for Windows is the best implementation of coreutils for it, far and away.”

    Comment from 2 Jun 2026 in “Coreutils for Windows”

    “Busybox helps you avoid this nicely on Windows.”

    Comment from 2 Jun 2026 in “Coreutils for Windows”
  • Many tools in one binary

    “I can apt/dnf/apk install busybox and use that for my user rather than coreutils”

    Comment from 29 Apr 2026 in “Bugs Rust Won't Catch”

    “selected by argv[0] when called, like what busybox does”

    Comment from 24 Aug 2026 in “Executable Is a SQLite Database”

What people warn about

Each mark is one comment

  • Security issues and privilege concerns

    “busybox as an example, which is a required package yet privileged in apparmor”

    Comment from 13 Apr 2026 in “Stealthy RCE on Hardened Linux: Noexec and Userland Execution PoC”

    “They have a plethora of security issues documented in their bug tracker.”

    Comment from 15 Jun 2026 in “Homebrew 6.0.0”

    “yet busybox itself is unconstrained with elevated privlages”

    Comment from 9 May 2026 in “You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE)”

Other command-line toolkits people recommend

The three most recommended other command-line toolkits, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

BusyBox compared with 3 alternatives
ProductRecommendMixedCriticizeApprovalMonthsHad forBadge
GNU coreutils4421970%12—Approved
uutils coreutils261210819%8——
BusyBoxThis page179481%9—Approved
Microsoft Coreutils for Windows811240%1——
See all 4 command-line toolkits, ranked

What people said

27 of the 34 opinions about it, picked in proportion to the three counts, newest first. Each links to the original comment.

“the low system requirements for something like busybox + lua stack are extremely minimal”

RecommendsComment from 12 Oct 2026 in “A Modern Web App in C”

“Fortunately busybox does not use it”

MixedComment from 10 Oct 2026 in “The Problem of System Communication”

“selected by argv[0] when called, like what busybox does”

MixedComment from 24 Aug 2026 in “Executable Is a SQLite Database”

“With static libs or even better, e. g. statically compiled busybox, I don't have that issue”

RecommendsComment from 19 Aug 2026 in “Solo – a .so loader for static Linux binaries”

“makes it trivial to do the dhi/rootless thing but do ad-hoc debugging and then remove the debugging tools entirely”

RecommendsComment from 28 Jul 2026 in “Securing Services with Rootless Containers”

“when it comes to space efficiency BusyBox is probably hard to beat”

RecommendsComment from 15 Jul 2026 in “Show HN: 18KB ls alternative in no_std rust and Libc”

“Left me plenty of user space for doing command line work on my 4MB 386”

RecommendsComment from 22 Jun 2026 in “An Embedded Linux on a Single Floppy”

“You may also want to build and run busybox for your tiny userspace.”

RecommendsComment from 15 Jun 2026 in “Boot Naked Linux”

“They have a plethora of security issues documented in their bug tracker.”

CriticizesComment from 15 Jun 2026 in “Homebrew 6.0.0”

“It's something entirely different and not even remotely an adequate replacement”

CriticizesComment from 3 Jun 2026 in “Coreutils for Windows”

“removing it on sight to replace with something better”

MixedComment from 2 Jun 2026 in “Coreutils for Windows”

“Busybox helps you avoid this nicely on Windows.”

RecommendsComment from 2 Jun 2026 in “Coreutils for Windows”

“Busybox for Windows is the best implementation of coreutils for it, far and away.”

RecommendsComment from 2 Jun 2026 in “Coreutils for Windows”

“too heavy weight when you just want to use a small tool”

CriticizesComment from 2 Jun 2026 in “Coreutils for Windows”

“if you want something more stable”

RecommendsComment from 2 Jun 2026 in “Coreutils for Windows”

“It works great for Rust binaries, which can get quite large.”

RecommendsComment from 13 May 2026 in “What Is BusyBox?”

“yet busybox itself is unconstrained with elevated privlages”

CriticizesComment from 9 May 2026 in “You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE)”

“I can apt/dnf/apk install busybox and use that for my user rather than coreutils”

MixedComment from 29 Apr 2026 in “Bugs Rust Won't Catch”

“It's hard to be more minimal than a busybox binary.”

RecommendsComment from 23 Apr 2026 in “I Am Building a Cloud”

“It has a subset of bash implemented on Ash/Dash. Arrays are not supported, but it is quite fast.”

RecommendsComment from 22 Apr 2026 in “Windows 9x Subsystem for Linux”

“busybox as an example, which is a required package yet privileged in apparmor”

CriticizesComment from 13 Apr 2026 in “Stealthy RCE on Hardened Linux: Noexec and Userland Execution PoC”

“Busybox it's what you need.”

RecommendsComment from 3 Apr 2026 in “C89cc.sh – standalone C89/ELF64 compiler in pure portable shell”

“have busybox in your initrd so you don't have to suffer”

RecommendsComment from 24 Mar 2026 in “curl > /dev/sda: How I made a Linux distro that runs wget | dd”

“or just busybox or alpine linux that will have more flexibility”

RecommendsComment from 26 Feb 2026 in “just-bash: Bash for Agents”

“Most people interested in barebones Linux should instead start with a kernel and busybox”

RecommendsComment from 14 Feb 2026 in “Linux from Scratch Ends SysVinit Support”

“He used to be a maintainer of busybox, a GNU clone for embedded devices.”

MixedComment from 3 Dec 2025 in “Ghostty is now non-profit”

“once Fil-C supports ARM64”

MixedComment from 28 Nov 2025 in “Moss: a Rust Linux-compatible kernel in 26,000 lines of code”

Counts come from 1,791,911 Hacker News comments labeled by Claude, November 2025 to October 2026, with data through October 31, 2026. Counts updated 2 Nov 2026. How we count. Report a mistake.