• v0.1.5 19f0d55ec9

    agorise released this 2026-08-14 05:24:05 +00:00 | 5 commits to main since this release

    Signed by agorise
    GPG key ID: 53524E1F1017EB9C

    hidden-rpc v0.1.5

    A hardening and cleanup release from a full code + security audit. No behavior changes for a
    healthy node; everything below makes the tool safer, tidier, and more honest. Your chain data and
    addresses are never touched.

    hidden-rpc turns an ordinary computer — an old laptop is plenty — into a
    censorship-resistant Blurt RPC node, reachable privately over Tor (.onion v3) and
    I2P (.b32.i2p). No public IP, no port-forwarding, no DNS, no registrar, no hosting company.

    What's new in v0.1.5

    • Disk cleanup is now surgical. It only reclaims what this tool itself creates — dangling
      Docker image layers, Docker build cache, apt's download cache, and old i2pd crash dumps. It no
      longer runs a broad Docker prune (which could remove unrelated stopped containers) and no longer
      vacuums system logs that aren't ours.
    • Publishing no longer prompts for a password. The release tool now authenticates git with
      your token and can never hang on a username/password prompt. The token is also kept out of the
      process list (passed via a private config file, not the command line).
    • Docs match reality. The manual reference was rewritten to reflect the current setup
      (official PurpleI2P i2pd, address read from the key file, loopback enforced on the command line,
      reboot recovery). Stale plugin lists and the old web-console step were removed. The roadmap and
      status now reflect what's actually shipped.
    • Reboot recovery verified. Docker, Tor, and i2pd run as enabled services and the node
      container restarts itself — after a reboot the node comes back and catches up on its own.

    Carried over: official PurpleI2P i2pd with auto-restart (v0.1.2); smart disk check with automatic
    cleanup and a --cleanup command (v0.1.3); correct detection of an already-synced chain so it
    never re-downloads (v0.1.4).

    Setup / repair / everyday

    bash installer/hidden-rpc-setup.sh                  # set up or repair (idempotent)
    bash installer/hidden-rpc-setup.sh --status         # running? how far behind? addresses
    bash installer/hidden-rpc-setup.sh --watch          # calm, live sync progress
    bash installer/hidden-rpc-setup.sh --show-addresses # reprint .onion / .b32.i2p
    bash installer/hidden-rpc-setup.sh --cleanup        # reclaim disk space (safe)
    

    Requirements

    • 64-bit Linux (Debian / Ubuntu / Mint family), amd64.
    • ~100 GB free for first-time setup (much less afterward). Docker, Tor, and i2pd install
      automatically if missing.

    Important: what this does and does not do

    Tor and I2P hide where you read, not whether what you read is true. Reaching a node does
    not make its data trustworthy — cross-checking answers across independent nodes is the reader's
    job. This release is RPC-only (no witness / block production).

    Downloads