Bug 2448654 - Review Request: i2p - Anonymous network for privacy-preserving communication
Summary: Review Request: i2p - Anonymous network for privacy-preserving communication
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: Package Review
Version: 43
Hardware: All
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Nobody's working on this, feel free to take it
QA Contact: Fedora Extras Quality Assurance
URL: https://i2p.net/
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-03-18 16:39 UTC by admin
Modified: 2026-05-02 07:53 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:


Attachments (Terms of Use)
The .spec file difference from Copr build 10238038 to 10238110 (1.85 KB, patch)
2026-03-18 17:40 UTC, Fedora Review Service
no flags Details | Diff
The .spec file difference from Copr build 10405260 to 10416723 (426 bytes, patch)
2026-05-02 01:52 UTC, Fedora Review Service
no flags Details | Diff

Description admin 2026-03-18 16:39:21 UTC
spec: https://raw.githubusercontent.com/i2p/i2p-jpackage-rpm/refs/heads/main/SPEC/i2p.spec
srpm: https://files.i2p.net/fedora/i2p-2.11.0-3.fc41.src.rpm

description:
I2P is an anonymous network that provides strong privacy protections for
communication. It offers a simple layer that identity-sensitive applications
can use to securely communicate. All data is wrapped with several layers of
encryption, and the network is both distributed and dynamic, with no trusted
parties.

The I2P router provides HTTP proxy, SOCKS proxy, router console (web UI),
I2PSnark (BitTorrent client), SusiMail (email client), and other services.

fas: i2porg

Comment 1 admin 2026-03-18 16:43:18 UTC
Notes for reviewer:

- rpmlint 3 errors are intentional 750 permissions on /var/lib/i2p and
  /var/log/i2p (security: only i2p service user should access router state).
  Justified in rpmlintrc (included in SOURCES/).
- no-%check-section: I2P upstream has no test suite suitable for RPM builds.
- Bundled JARs in source tarball (izpack, launch4j, gradle-wrapper, Jetty,
  Tomcat) are build tooling only — not shipped in final RPM. Everything is
  rebuilt from source via `ant preppkg-linux-only`.
- class-path-in-manifest warnings are upstream convention (JAR manifests).
- Duplicate flag PNGs between eepsite help and docs are upstream layout.

Comment 2 Fedora Review Service 2026-03-18 16:55:03 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/10238038
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2448654-i2p/fedora-rawhide-x86_64/10238038-i2p/fedora-review/review.txt

Found issues:

- No javadoc subpackage present. Note: Javadocs are optional for Fedora versions >= 21
  Read more: https://fedoraproject.org/wiki/Packaging:Java#Javadoc_installation
- No javadoc subpackage present
  Read more: https://fedoraproject.org/wiki/Packaging:Java#Javadoc_installation
- Jar files in source (see attachment) 
  Read more: https://docs.fedoraproject.org/en-US/packaging-guidelines/Java/#_pre_built_dependencies

Please know that there can be false-positives.

---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 3 admin 2026-03-18 17:24:13 UTC
Updated package to -3
[fedora-review-service-build]

Comment 4 Fedora Review Service 2026-03-18 17:40:12 UTC
Created attachment 2134048 [details]
The .spec file difference from Copr build 10238038 to 10238110

Comment 5 Fedora Review Service 2026-03-18 17:40:15 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/10238110
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2448654-i2p/fedora-rawhide-x86_64/10238110-i2p/fedora-review/review.txt

Found issues:

- No javadoc subpackage present. Note: Javadocs are optional for Fedora versions >= 21
  Read more: https://fedoraproject.org/wiki/Packaging:Java#Javadoc_installation
- No javadoc subpackage present
  Read more: https://fedoraproject.org/wiki/Packaging:Java#Javadoc_installation
- Jar files in source (see attachment) 
  Read more: https://docs.fedoraproject.org/en-US/packaging-guidelines/Java/#_pre_built_dependencies

Please know that there can be false-positives.

---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 6 Fabio Porcedda 2026-04-27 16:26:41 UTC
Hi, 

(In reply to admin from comment #0)
> spec:
> https://raw.githubusercontent.com/i2p/i2p-jpackage-rpm/refs/heads/main/SPEC/
> i2p.spec
This spec file is not the same as the one inside the src.rpm file, please sync them.

> srpm: https://files.i2p.net/fedora/i2p-2.11.0-3.fc41.src.rpm

Comment 7 admin 2026-04-28 19:35:41 UTC
Updated spec and srpm due to new version

SRPM: https://files.i2p.net/fedora/i2p-2.12.0-1.fc41.src.rpm
Spec: https://files.i2p.net/fedora/i2p.spec

Comment 8 Fabio Porcedda 2026-04-28 20:15:35 UTC
Hi,
please address the following issues in order to make a full review:
 
(In reply to admin from comment #7)
> Updated spec and srpm due to new version
> 
> SRPM: https://files.i2p.net/fedora/i2p-2.12.0-1.fc41.src.rpm
> Spec: https://files.i2p.net/fedora/i2p.spec

1)
Spec file still refers to the 2.11.0 version.
It's not aligned with the src.rpm.
Please sync them.

2)
The src.rpm should be for rawhide so it should be named i2p-2.12.0-1.fc45.src.rpm

3)
Spec file should be listed as the first one so they should be:

Spec URL: ...
SRPM URL: ...

Comment 9 Fedora Review Service 2026-04-29 07:15:58 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/10405260
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2448654-i2p/fedora-rawhide-x86_64/10405260-i2p/fedora-review/review.txt

Found issues:

- No javadoc subpackage present. Note: Javadocs are optional for Fedora versions >= 21
  Read more: https://fedoraproject.org/wiki/Packaging:Java#Javadoc_installation
- No javadoc subpackage present
  Read more: https://fedoraproject.org/wiki/Packaging:Java#Javadoc_installation
- Jar files in source (see attachment) 
  Read more: https://docs.fedoraproject.org/en-US/packaging-guidelines/Java/#_pre_built_dependencies

Please know that there can be false-positives.

---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 10 admin 2026-05-01 17:26:11 UTC
Spec URL: https://files.i2p.net/fedora/i2p.spec
SRPM URL: https://files.i2p.net/fedora/i2p-2.12.0-1.fc43.src.rpm

Thank you for the guidance.

Comment 11 Fedora Review Service 2026-05-02 01:52:56 UTC
Created attachment 2139039 [details]
The .spec file difference from Copr build 10405260 to 10416723

Comment 12 Fedora Review Service 2026-05-02 01:52:58 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/10416723
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2448654-i2p/fedora-rawhide-x86_64/10416723-i2p/fedora-review/review.txt

Found issues:

- No javadoc subpackage present. Note: Javadocs are optional for Fedora versions >= 21
  Read more: https://fedoraproject.org/wiki/Packaging:Java#Javadoc_installation
- No javadoc subpackage present
  Read more: https://fedoraproject.org/wiki/Packaging:Java#Javadoc_installation
- Jar files in source (see attachment) 
  Read more: https://docs.fedoraproject.org/en-US/packaging-guidelines/Java/#_pre_built_dependencies

Please know that there can be false-positives.

---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 13 Fabio Porcedda 2026-05-02 07:53:15 UTC
(In reply to admin from comment #1)
> Notes for reviewer:
> 
> - rpmlint 3 errors are intentional 750 permissions on /var/lib/i2p and
>   /var/log/i2p (security: only i2p service user should access router state).
>   Justified in rpmlintrc (included in SOURCES/).
> - no-%check-section: I2P upstream has no test suite suitable for RPM builds.
> - Bundled JARs in source tarball (izpack, launch4j, gradle-wrapper, Jetty,
>   Tomcat) are build tooling only — not shipped in final RPM. Everything is
>   rebuilt from source via `ant preppkg-linux-only`.

AFAIK it's not possible to use jar files even just for building.
Please remove them in the %prep and use in their place BuildRequires.

https://docs.fedoraproject.org/en-US/packaging-guidelines/#bundling
https://docs.fedoraproject.org/en-US/packaging-guidelines/Java/#_pre_built_dependencies

jetty is already packaged but it's an older version the 9.4.40 version, it's good enough?


Note You need to log in before you can comment on or make changes to this bug.