7.4 KiB
rustbot
A small, modular IRC bot in Rust — zero dependencies, with its own IRC protocol layer built to the modern IRC client spec.
Structure
rustbot is a library crate (src/lib.rs) with a thin binary on top:
| Path | Layer | Responsibility |
|---|---|---|
src/irc/ |
protocol + I/O | message (parse IRCv3 wire format), connection (TCP/TLS transport), encoding (base64, server-time) |
src/bot/ |
behavior | mod (state + loop), caps (IRCv3 + SASL), commands (routing + help), module (plugin trait), modules/ (feature modules) |
src/config.rs |
configuration | Layered Config; multi-network [section] parsing |
src/lib.rs |
crate root | Ties the modules into the reusable rustbot library |
src/main.rs |
binary | Thin per-network connect/reconnect supervisor |
tests/ |
tests | Integration tests (config.rs, protocol.rs) against the public API |
The layers are deliberately separable: irc knows nothing about the bot, bot
knows nothing about how the process is launched, and main only supervises.
Adding a feature is a new module — see Modules.
Modules
Features are modules: self-contained units behind the Module trait
(src/bot/module.rs). A module declares the commands it provides and turns each
invocation into Actions — it never touches the socket, so it stays pure and
unit-testable:
pub trait Module {
fn name(&self) -> &'static str;
fn commands(&self) -> &'static [CommandSpec];
fn on_command(&mut self, cmd: &Command) -> Vec<Action>;
}
At startup the bot builds a command → module route table and auto-generates
help from every module's CommandSpecs. Each network gets its own fresh set
of modules, so stateful ones (like the dice roller's PRNG) keep per-network
state with no locking.
To add a module, create src/bot/modules/<name>.rs implementing Module,
then add one line to all() in src/bot/modules/mod.rs:
pub fn all() -> Vec<Box<dyn Module>> {
vec![
Box::new(builtins::Builtins),
Box::new(dice::Dice::new()),
Box::new(myfeature::MyFeature::new()), // <- your module
]
}
Shipped modules: builtins (ping, echo, hello), dice
(roll [NdM]), hash (md5/sha1/sha256/hash <text>, hand-rolled),
weather (add <location> then w [location] via wttr.in; per-user
locations saved to a per-network JSON file, path from RUSTBOT_DATA_DIR), and
web lookups over the shared http/json helpers: crypto <sym> (Bitstamp),
wiki <term>, define <word>, urban <term>, tinyurl <url>,
down <host>. Module tests live in tests/ — construct a module (or call
its pure formatter with a canned API body) and assert on the result, no network
required.
Build & run
cargo build # or: cargo build --release
cargo test # integration tests in tests/ (config + protocol)
cargo run
Configuration
Settings are layered, each overriding the previous:
- Built-in defaults (
Config::default()insrc/config.rs) - A config file —
key = value, seerustbot.conf - Environment variables — handy for one-off overrides
The config file is found via: the first CLI argument, else RUSTBOT_CONFIG,
else ./rustbot.conf if present.
cargo run # uses ./rustbot.conf
cargo run -- /etc/rustbot.conf # explicit path
RUSTBOT_CONFIG=/etc/rustbot.conf cargo run
Config file keys: server, port, tls, nick, user, realname,
channels (comma/space-separated), prefix, password, sasl_user,
sasl_pass, and name (a network's log label). Whole-line #/; comments
only — inline comments would clash with channel #s.
Multiple networks
Group keys under [name] section headers to connect to several networks at
once — one supervisor thread each, with independent reconnect/backoff. Keys
before the first header are shared defaults every network inherits; each
section overrides them. A file with no headers is a single network (the
historical behaviour), and its logs stay unprefixed.
# shared defaults, inherited by every network below
nick = rubot
realname = rubot
[tchatou]
server = irc.tchatou.fr
tls = true
channels = #devs
[libera]
server = irc.libera.chat
tls = true
channels = #rust, #rust-beginners
nick = rubot_ # override just for this network
With more than one network, each network's log lines are tagged with its
section name ([libera] << …) so the interleaved output stays readable.
Environment overrides: IRC_SERVER, IRC_PORT, IRC_TLS, IRC_NICK,
IRC_REALNAME, IRC_CHANNELS, IRC_PREFIX, IRC_PASSWORD,
IRC_SASL_USER, IRC_SASL_PASS.
IRC_NICK=mybot IRC_CHANNELS='#test' cargo run # override the file for one run
If you put a real
passwordinrustbot.conf, add it to.gitignoreso the secret isn't committed.
Built-in commands
With the default ! prefix:
!ping→pong!echo <text>→ echoes text back!hello→ greets the sender!help→ lists commands
Add your own in Bot::handle_command in src/bot.rs.
Deployment (systemd)
Runs as a system service (User=debian), auto-restarts on crash, and starts on
boot. The unit is kept in the repo as rustbot.service.
cargo build --release
sudo cp rustbot.service /etc/systemd/system/rustbot.service
sudo systemctl daemon-reload
sudo systemctl enable --now rustbot # start now + on boot
systemctl status rustbot # health
journalctl -u rustbot -f # live logs (<< in, >> out)
sudo systemctl restart rustbot # after a rebuild
One-off overrides without touching rustbot.conf: put IRC_* lines in
/etc/default/rustbot (env wins over the config file), then restart.
IRCv3
The bot negotiates capabilities (CAP LS 302 → CAP REQ → CAP END) and
enables everything useful the server offers: message-tags, server-time,
batch, echo-message, account-tag, extended-join, multi-prefix,
away-notify, chghost, setname, userhost-in-names, cap-notify,
labeled-response.
Two of these do real work:
server-time+batchlet the bot recognise replayed history. On join, InspIRCd replays recent channel lines (wrapped in achathistorybatch). Without this the bot re-answered old commands on every reconnect; now such messages are ignored (seeBot::is_historical).sasl(PLAIN) authenticates to services during negotiation. Setsasl_user/sasl_passin the config (orIRC_SASL_USER/IRC_SASL_PASS). base64 is hand-rolled, so this stays dependency-free.
TLS
Set tls = true and the port defaults to 6697. The transport wraps the socket
with native-tls, which verifies certificates against the system OpenSSL
trust store — so TLS security fixes arrive via OS updates rather than a
vendored crypto crate. Plaintext still works with tls = false / port = 6667.
Plain TCP and TLS share one code path: Connection holds a single
Box<dyn Read + Write>, since the single-threaded event loop never needs the
old read/write socket split (which TLS can't do anyway).