Bundle worksheet
This page is for bundlers who want every decision about a bundle in one place. Copy the blocks into your repository
(for example docs/bundle.md), fill them in and review them at each release with the
Bundle release checklist.
Contents
Identity
Bundle name: <name> (Naming and branding a bundle)
Kind: container / image / panel / package / kit / site package / extensions / appliance / demo
Recipients: <who>
Bundle version: <version>
Maker and contact: <your company>, <address>
Partner level / profile: <level, profile, or none>Kinds of bundles, Naming and branding a bundle.
Base and parts
Base: Exponential 6 / Legacy <line> / Nexus <line>
Exponential version: <tag or commit>
Lock file checksum: <sha256 of composer.lock>
Extensions added: <list with versions>
Extensions removed: <list with reasons>
Site package(s): <name version checksum>
Package server: public / mirror <URL> / shipped filesChoosing the base, Versions, tags and pinning, Site packages in a bundle.
Licenses
Bundle license (own parts): <SPDX>
Notice file: <path>
Third-party list: <path>, generated with composer licenses on <date>
Source offer: <URL or written offer>
Counsel reviewed: <date>GPL obligations, Third-party components.
Installation
Installer: exp:install / kickstarter / setup wizard
Options or template: <path>
Install at: first boot / by the recipient
Already-installed test: grep -q '^\[DatabaseSettings\]' settings/override/site.ini.append.php
Password hand-over: <how>
Offline capable: yes / noThe three installers, First boot and install once.
Runtime
PHP: <versions>, extensions checked with exp:velocity ext check
Database: <engine, version>
Web server / engine: Velocity qbix / FrankenPHP / Apache / nginx + PHP-FPM
Site user / group: <user> / <group>
Cron: <how>
Backups: <what, where>Database choices, Web server and engine choices, File permissions.
Security
File modes: 0770 / 0660
HTTPS: <how>
Admin access: <URL path / host / port>, restrictions
Demo mode: off (or: demo bundle, set for <processes>)
Secrets shipped: none (checked on <date>)Security defaults of a bundle, Demo mode in bundles.
Life after release
Update route: <image / package / Git and Composer / ezupdate>
Database updates by: <who>
Security release time: <promise>
Support statement: <path>
End of support: <date or policy>
Upstream contributions: <issues and pull requests sent>Updates and upgrade paths, Support boundaries, Contributing fixes back.
Related pages
- Bundle release checklist
- Bundlers: start here
- Partner application checklist
- Free documentation: this page is free to copy, translate and improve under the GNU FDL 1.3.
Become an Exponential Partner
Partners share their information, provide funding, contribute back and develop the products with us, and that is how Exponential grows. A partner website and dashboard are planned for mid-2027: please become a partner today to speed up our growth rate and land new features faster.