On Wed Jul 22, 2026 at 1:46 PM EDT, David Uhden Collado wrote:
> Andrew Kloet wrote:
>> On Wed Jul 22, 2026 at 10:57 AM EDT, Stuart Henderson wrote:
>>> the revised pledge still feels like shoehorning it into a program
>>> which has not been designed to actually work with it. big clue
>>> is having file access and network access in the same process.
>>> (sure, there's worse in ports, and it's not a total blocker, but
>>> it does make me wonder how well tested it's been, because clearly
>>> there hasn't been too much careful thought about how to use this
>>> prior to it being committed uptream..)
>> 
>> I've replaced upstream's pledge/unveil with what I had been drafting but
>> never finished a few months ago. Looking for feedback before I submit it
>> to upstream.  Unfortunately i2pd doesn't have a test suite as far as I
>> can tell so I find it difficult to make sure all bases have been covered
>> across pledge/unveil. I ran it for a few minutes and saw no EPERM.
>> 
>> Doesn't resolve the issue of simul net/file access but I think this
>> design actually has some thought put into it :p
>> 
>> Andrew
>
> Should we wait for the next release, or should we update the port now? I 
> think the changes are reason enough to update now, especially since we 
> don't know if the main branch will accept your changes.

Considering it causes several critical regressions, I would completely
patch it out. I'm very disappointed with the i2pd team.

$ i2pd --version
i2pd version 2.61.0 (0.9.70)
Boost version 1.89.0
LibreSSL 4.3.0
LibreSSL 4.3.0

$ i2pd
i2pd: Could not create pid file /home/andrew/.i2pd/i2pd.pid: No such file or directory

$ i2pd --pidfile i2pd.pid
19:28:25@252/none - i2pd v2.61.0 (0.9.70) starting...
19:28:25@452/error - RouterInfo: Can't save to /home/andrew/.i2pd/router.info
19:28:25@144/error - RouterInfo: Can't save to /home/andrew/.i2pd/router.info
19:28:25@112/error - RouterInfo: Can't save to /home/andrew/.i2pd/router.info
19:28:25@635/error - RouterInfo: Can't save to /home/andrew/.i2pd/router.info
19:28:25@144/error - RouterInfo: Can't save to /home/andrew/.i2pd/router.info
19:28:25@413/error - RouterInfo: Can't save to /home/andrew/.i2pd/router.info
19:28:25@635/error - RouterInfo: Can't save to /home/andrew/.i2pd/router.info
19:28:25@252/critical - FS: Can't init storage /home/andrew/.i2pd/netDb: filesystem error: in create_directories: Invalid argument ["/"]
19:28:25@252/critical - FS: Can't init storage /home/andrew/.i2pd/peerProfiles: filesystem error: in create_directories: Invalid argument ["/"]
19:28:25@252/warn - Family: Can't load family certificates from /home/andrew/.i2pd/certificates/family
libc++abi: terminating due to uncaught exception of type std::__1::__fs::filesystem::filesystem_error: filesystem error: in recursive_directory_iterator: No such file or directory ["/home/andrew/.i2pd/netDb"]
Abort trap (core dumped)

-- 
Andrew