Bundle checklists
This page is for bundlers who want the checks without the explanations. Each item links to the page that explains it. For a full release, use the Bundle release checklist.
Contents
Before you build
- To do: Base chosen and recorded (Choosing the base).
- To do: Exponential version chosen with a version sort from published tags (Versions, tags and pinning).
- To do: Database and server chosen (Database choices, Web server and engine choices).
- To do: Site package chosen and its files secured (Site packages in a bundle).
- To do: Update path and support terms drafted (Updates and upgrade paths, Support boundaries).
The build
- To do:
composer install --no-dev --no-interactionfrom the committed lock file (Lock files). - To do: The installer plugin allowed in
composer.json(Composer-based bundles). - To do:
php bin/php/ezpgenerateautoloads.php -erun;exp:checkclassesclean (Caches and autoloads). - To do:
exp:velocity ext checkpasses on the shipped PHP (Getting the code). - To do:
php bin/php/checkmanifest.php --allresult recorded (Integrity checks). - To do: Build steps run as the site user (File permissions).
The artifact
- To do: No
settings/override/orsettings/siteaccess/from the build (First boot and install once). - To do: No
kickstart.ini,var/log/,var/cache/,initial-admin-password,config.env.php. - To do: No
EXP_DEMO_MODEunless it is a demo bundle (Demo mode in bundles). - To do: Notices, third-party list and source offer included (License texts and notices).
- To do:
SHA256SUMSof the artifacts.
First boot
- To do: Waits for the database; skips if already installed (First boot and install once).
- To do: Secrets from the platform, the database password in
EXP_INSTALL_DB_PASSWORD(Unattended install). - To do: Installs as the site user with the recipient's URL and e-mail.
- To do: Checks the exit status; keeps
var/log/setup.logon failure. - To do: Hands over the password once; deletes
var/log/initial-admin-password(Default credentials). - To do: Starts the server and cron.
The installed site
- To do: Site and administration answer at the documented addresses.
- To do:
/.git/config,/settings/site.ini,/composer.jsonnot served (Security defaults). - To do: Hardened file modes; nothing under
var/owned by root. - To do: No Demo mode banner.
- To do: Info > About and Info > Copyright correct.
Licenses
- To do:
LICENSE,LICENSE.md,COPYRIGHT.mdunchanged (GPL obligations). - To do:
composer licenses --no-devreviewed (Third-party components). - To do: Own parts' license fields agree (License fields).
- To do: Documentation's GFDL notices kept (Documentation to ship).
After the release
- To do: The tag is never moved; mistakes are fixed by the next release (Versions, tags and pinning).
- To do: Exponential releases watched; security releases bundled promptly (Updates and upgrade paths).
- To do: Upstream bugs reported, fixes contributed (Contributing fixes back).
Related pages
- Bundle release checklist
- Bundle worksheet
- Hosting checklists
- Free documentation: this page is free to copy, translate and improve under the GNU FDL 1.3.
Become an Exponential Partner
Partners share their information, provide funding, contribute back and develop the products with us, and that is how Exponential grows. A partner website and dashboard are planned for mid-2027: please become a partner today to speed up our growth rate and land new features faster.