Español · Українська

F5M / I2P Reseed

I2P reseed server distributing signed SU3 bootstrap bundles, with first-boot keys, gated endpoints and a liveness probe.

Features

• Abuse-resistant by default
• Fresh seed bundles without restarts
• Reverse-proxy ready
• Self-bootstrapping signing keys

It also inherits the features of B19 / Ubuntu — see Features for the full list.

Quick Start

Save this as compose.yaml:

---
services:
  i2p-reseed:
    image: docker.io/damianbuho/f5m-i2p-reseed:latest
    ports:
      - "8080:8080"
    environment:
      F5M_I2P_RESEED_SIGNER: change-me@mail.i2p
    volumes:
      - i2p:/app/.i2p
      - i2p-reseed:/app/data
    cap_drop: [ALL]
    security_opt: [no-new-privileges:true]
    restart: unless-stopped
  i2p:
    image: docker.io/damianbuho/f5m-i2p:latest
    volumes:
      - i2p:/app/.i2p
    cap_drop: [ALL]
    security_opt: [no-new-privileges:true]
    restart: unless-stopped
volumes:
  i2p:
  i2p-reseed:

Then start it with docker compose up --detach.

What this provides

• Service i2p-reseed — listens on 8080 (http) — I2P reseed server
• Container image ghcr.io/damian-buho/f5m/i2p-reseed:latest
• Container image damianbuho/f5m-i2p-reseed:latest

Installation

Pull the published container image:

Pull from GHCR — linux/amd64

docker pull ghcr.io/damian-buho/f5m/i2p-reseed:latest

Pull from DockerHub — linux/amd64

docker pull damianbuho/f5m-i2p-reseed:latest

Stable releases also publish X.Y.Z, X.Y and X tags — pull the precision you want to pin.

If the registries above are unreachable, pull from the origin instead:

Pull from Kiota — linux/amd64

docker pull kiota.ch/f5m/i2p-reseed:latest

Usage

Run the service in the background, publishing its ports:

From GHCR

docker run --detach --publish 8080:8080/tcp ghcr.io/damian-buho/f5m/i2p-reseed:latest

From DockerHub

docker run --detach --publish 8080:8080/tcp damianbuho/f5m-i2p-reseed:latest

Then check that it answers:

curl http://localhost:8080/i2pseeds.su3

Building

Clone the repository with its submodules:

git clone --recurse-submodules https://github.com/damian-buho/f5m-i2p-reseed i2p-reseed && cd i2p-reseed

Build the container image locally:

make container-build

• Makefile reference

Run make with no arguments for the default target; run make help to list every target.

For the local dev loop, make dev-container brings up the dev-container.

Pipeline entry points:

• make analyzed — Run the heavy analysis sweep (mutation testing, benchmarks)
• make audited — Re-scan the pinned dependencies and published artifacts for new vulnerabilities
• make check-outdated — Report every pinned dependency that lags upstream
• make release-is-ready — Run the pseudo-CI pipeline locally — build, test and scan, without publishing

Roadmap

See the Roadmap for what is planned next.

Policies

• How to contribute
• Security policy
• Getting support
• Code of Conduct
• AI and LLM Policy

Links

• Projectfile Specification

Related projects: F5M/Tor | F5M/I2P | F5M/Tor Snowflake | F5M/OONI Probe | F5M/Knot | F5M/Radicle | F5M/Solid | F5M/SSH

License

This project is licensed under MIT — see the LICENSE file for details.