miniircd is a small and limited IRC server written in Python. Despite its size, it is a functional alternative to a full-blown ircd for general use. Installation is simple; no configuration is required.
- Knows about the basic IRC protocol and commands.
- Easy installation.
- Basic SSL support.
- No configuration.
- No ident lookup (so that people behind firewalls that filter the ident port without sending NACK can connect without long timeouts).
- Reasonably secure when used with --chroot and --setuid.
- Register/identify accounts
- Operators can kick, ban, quiet and filter messages
- Includes a primitive bouncer
- Can't connect to other IRC servers.
- Only knows a basic subset of IRC commands.
- Operators are global, not channel based. It's expected that you'll only be running a few channels.
- Not all user and channel modes are implemented.
- No reverse DNS lookup.
Python 3.6 or newer. Get it at https://www.python.org.
No special installation needed: Just clone the repository and execute miniircd:
git clone https://gitlab.com/bashrc2/miniircd.git
cd miniircd
./miniircd --help
If you do want to install miniircd, there are several options:
-
Clone the repository and copy the executable file to a directory in PATH:
git clone https://gitlab.com/bashrc2/miniircd.git cd miniircd cp miniircd /usr/local/bin # or some other directory in your PATH
You can then execute the program like this:
miniircd --help
-
Install miniircd as a package from the miniircd PyPI project.
You can then execute the program with
miniircd --help
or as a module like this:
python3 -m miniircd --help
In order to use the --chroot
or --setuid
options, you must be using an OS
that supports these functions (most Unix-like systems), and you must start the
server as root. These options limit the daemon process to a small subset of the
filesystem, running with the privileges of the specified user (ideally
unprivileged) instead of the user who launched miniircd.
To create a new chroot jail for miniircd, edit the Makefile and change JAILDIR
and JAILUSER to suit your needs, then run make jail
as root. If you have a
motd file or an SSL PEM file, you'll need to put them in the jail as well:
cp miniircd.pem motd.txt /var/jail/miniircd
Remember to specify the paths for --state-dir
, --channel-log-dir
, --motd
and --ssl-pem-file
from within the jail, e.g.:
miniircd --state-dir=/ --channel-log-dir=/ --motd=/motd.txt \
--setuid=nobody --ssl-pem-file=/miniircd.pem --chroot=/var/jail/miniircd
Make sure your jail is writable by whatever user/group you are running the server as. Also, keep your jail clean. Ideally it should only contain the files mentioned above and the state/log files from miniircd. You should not place the miniircd script itself, or any executables, in the jail. In the end it should look something like this:
# ls -alR /var/jail/miniircd
.:
total 36
drwxr-xr-x 3 nobody root 4096 Jun 10 16:20 .
drwxr-xr-x 4 root root 4096 Jun 10 18:40 ..
-rw------- 1 nobody nobody 26 Jun 10 16:20 #channel
-rw-r--r-- 1 nobody nobody 1414 Jun 10 16:51 #channel.log
drwxr-xr-x 2 root root 4096 Jun 10 16:19 dev
-rw-r----- 1 rezrov nobody 5187 Jun 9 22:25 ircd.pem
-rw-r--r-- 1 rezrov nobody 17 Jun 9 22:26 motd.txt
./dev:
total 8
drwxr-xr-x 2 root root 4096 Jun 10 16:19 .
drwxr-xr-x 3 nobody root 4096 Jun 10 16:20 ..
crw-rw-rw- 1 root root 1, 3 Jun 10 16:16 null
crw-rw-rw- 1 root root 1, 9 Jun 10 16:19 urandom
To register an account:
/register [password]
To identify yourself connect with your previous nick, then:
/identify [password]
The first account to be registered gets operator status. Note that this applies for all channels.
If there is an imposter occupying your usual nickname then you can identify yourself with your full credentials, and the imposter will be removed.
/identify [nickname] [password]
A passwords file in the state directory contains password hashes. The word "oper" is appended to any accounts with operator status.
To subsequently change password:
/setpassword [newpassword]
If you are using irssi as a client to connect to this server then it won't recognize the account registration commands. You will need to install dispatch.pl into ~/.irssi, then within the chatnets section of ~/.irssi/config add:
nick = "yournickname";
autosendcmd = "/quote identify yournickname yourpassword;wait 2000";
If you want to create, delete or change the password on an account from the commandline:
python3 miniircd.py --state-dir=/var/jail/miniircd --add-account nickname:password
python3 miniircd.py --state-dir=/var/jail/miniircd --set-password nickname:newpassword
python3 miniircd.py --state-dir=/var/jail/miniircd --del-account nickname
To kick other users you must have operator status. Identify yourself with a password, as above, then to kick:
/kick [nickname]
A kicked user can rejoin a channel though, so if you need to ban:
/mode +b #channel [nickname]
And you can also remove a ban. Note that the unbanned user will need to re-register their account.
/mode -b #channel [nickname]
If the above is too harsh, you can merely mute/quiet:
/mode +q #channel [nickname]
Messages can be filtered. Filters can also contain wildcard characters.
/filter add "never gonna give you up"
/filter remove "the * sat on the *"
To assign other operators who can help with moderation:
/mode +o #channel [nickname]
Other operators may use -o to relinquish operator status, but may not be deopped by other moderators.
To only allow registered users:
/mode +M #channel
To set the allowed number of new registrations:
/newreg [number]
So if you encounter a spam flood then you can allow only registered users on channels and set the new registrations temporarily to zero.
If the spammer created a spam channel full of spam then you can remove it with:
/drop #spamchannel
GNU General Public License version 2 or later.
- Joel Rosdahl [email protected]
- Alex Wright
- Bob Mottram
- Braxton Plaxco
- Hanno Foest
- Jan Fuchs
- John Andersen
- Julien Castiaux
- Julien Monnier
- Leandro Lucarella
- Leonardo Taccari
- Martin Maney
- Matt Baxter
- Matt Behrens
- Michael Rene Wilcox
- Ron Fritz