marcusholtz/reticulum-party-line-box
Encrypted push-to-talk voice and group party line over Reticulum for Distrobox.
256
marcusholtz/reticulum-party-line-box repository overview
 |  |  |  |  |
marcusholtz/reticulum-party-line-box
Distrobox-ready image for encrypted push-to-talk voice and group party line over Reticulum. No accounts, no phone numbers, no third-party servers.
Built for Distrobox, not Docker Compose. Your mic, speakers, and network are shared with the container automatically. Ideal for immutable or atomic Linux distros (Bazzite, Silverblue, SteamOS, etc.).
For Docker Compose or standalone Docker usage, see
marcusholtz/reticulum-party-line.
Supported Architectures
| Architecture | Tag |
|---|---|
| x86-64 | amd64 |
Quick Start
Create and enter
distrobox create --image marcusholtz/reticulum-party-line-box:latest --name partyline-rns
distrobox enter partyline-rns
Run the party line
Once inside the container:
rns-party-line.sh
Add to the application menu
Optional. Once inside the container, run:
distrobox-export --app /usr/share/applications/rns-party-line.desktop
Use the full path (/usr/share/applications/tor-party-line.desktop).
"Reticulum Party Line (on partyline-rns)" appears in your host application menu with its own icon and opens in a terminal. Remove it with the same command plus --delete.
To also run it from your host shell:
distrobox-export --bin /usr/local/bin/rns-party-line.sh --export-path ~/.local/bin
Alternative registries
# GitHub Container Registry
distrobox create --image ghcr.io/marcusholtz/reticulum-party-line-box:latest --name partyline-rns
# GitLab Container Registry
distrobox create --image registry.gitlab.com/marcusholtz/reticulum-party-line/box:latest --name partyline-rns
One-command setup with distrobox.ini
A distrobox.ini manifest is included in the source repo. It creates the container, exports rns-party-line.sh to ~/.local/bin, and adds no menu entries:
distrobox assemble create --file distrobox.ini
After assembly, run rns-party-line.sh directly from your host shell.
For an application menu (.desktop) entry, uncomment the exported_apps line in distrobox.ini before assembling, or use the distrobox-export command above.
First Run
- RNS initializes and discovers network peers
- Your Reticulum destination hash appears
- Press 1 to set a shared secret (both sides need the same one)
- Share your destination hash + secret, one side runs relay, the other calls
Your RNS identity persists inside the distrobox home directory across restarts.
What's Inside
Everything pre-installed, no first-run dependency installation needed:
- Python 3.12 + RNS + LXMF
- Opus codec, OpenSSL, socat, FFmpeg
- PulseAudio utilities, ALSA utilities
pcm_rms(compiled C audio level meter)rns-party-line.shat/usr/local/bin/
How It Differs from the Docker Image
| Docker image | Distrobox image | |
|---|---|---|
| Image | reticulum-party-line | reticulum-party-line-box |
| Run with | docker compose / docker run | distrobox create + distrobox enter |
| Audio | PulseAudio socket bind-mount | Automatic host audio passthrough |
| Network | Container networking | Host network (shared) |
| User mapping | Container root | Mapped to your host user |
| Entrypoint | docker-entrypoint.sh | None (distrobox manages init) |
Security
| Property | Detail |
|---|---|
| Encryption | AES-256-CBC + PBKDF2 + HMAC-SHA256 |
| Relay | Zero-knowledge reflector: forwards blobs, never has the secret |
| Authentication | Destination hash + pre-shared secret |
| Forward secrecy | None; rotate secrets between conversations |
| Source | Single bash script + Python RNS bridge, no telemetry |
The Party Line Trifecta (Distrobox)
Three networks, same app, same encryption:
|  |  |
| Reticulum Party Line | Tor Party Line | I2P Party Line |
License
MIT
Tag summary
Content type
Image
Digest
sha256:1bf6556b5…
Size
227.8 MB
Last updated
3 days ago
docker pull marcusholtz/reticulum-party-line-box