Package Details: iocaine 3.5.0-2

Git Clone URL: https://aur.archlinux.org/iocaine.git (read-only, click to copy)
Package Base: iocaine
Description: The deadliest poison known to AI
Upstream URL: https://iocaine.madhouse-project.org/
Licenses: MIT
Conflicts: iocaine-git
Submitter: 30p87
Maintainer: 30p87
Last Packager: 30p87
Votes: 2
Popularity: 0.023187
First Submitted: 2025-07-18 19:10 (UTC)
Last Updated: 2026-06-21 11:44 (UTC)

Latest Comments

30p87 commented on 2026-06-13 19:41 (UTC) (edited on 2026-06-13 19:42 (UTC) by 30p87)

@tazz4843 Solely to restrict access of the unix socket to a specific group.
Afaik, with DynamicUser, you'd need to make the unix socket read/writeable for all users. But by running the daemon as a specific user, I can restrict it to only be accessible by the daemon's user and group, to which I can add eg. the http user.

I realize it's most likely not really important here tho. I'm open to reverting it (especially because patching files that are changed frequently is annoying, especially in the -git version).
I guess I originally designed it this way to be in line with other implementations for programs with unix sockets/FIFO communication.

tazz4843 commented on 2026-06-13 19:11 (UTC)

Out of curiosity, why does the systemd service file get patched to remove DynamicUser? I've had it working fine for several months on my system without a dedicated user.

30p87 commented on 2026-04-27 10:18 (UTC)

@clarfonthey

Hmm, according to the CHANGELOG.md,

Implemented an nftables-based, optional firewall right into iocaine. Communicates with the kernel directly through netlink, no external binaries necessary. The feature is available on Linux only, and should be considered experimental.

Looks to me like it statically compiles and contains everything it needs in the binary. So everything should be there as long as it compiles.

However, in the libnftables1-sys crate, it fails to compile as it can't find clang. After installing/adding clang, it compiles fine. So I'd guess that everything to do with nftables should also work fine now. You're welcome to test and report back :3

clarfonthey commented on 2026-04-25 15:32 (UTC)

This appears to now need nftables as a dependency but it's not listed.

30p87 commented on 2025-12-02 22:46 (UTC)

The entire config system has been reworked :/

I don't get the new system right now (at 23:45:00), so I'll implement a proper solution to managing/installing the new config system/default configs tomorrow, when installing/configuring it myself. Just be warned when updating, you'll need to do quite some work.