Packaging and publishing
Install and publish
Installing on your own KOFA
On the Komodok page (Admin) drop the .komod file on the upload field. The preview shows the manifest, the Komods and their ports, the hash and the warnings; for an update also how many instances restart with the new version.
Warning
A Komod runs on the server as fully trusted code. Install only trusted packages.
A file copied into the komods folder is also picked up by the server (to install on another machine).
The Komod store
The public store runs at https://kofa.kncsk.hu/komodok. Users install and update Komods from it on the KOFA Komodok → Komod store page.
Publishing
- Sign in on the store site with a GitHub account and fill in the registration (user name, e-mail, why you want to upload). You can upload once a store admin has activated your account. By default you may own up to 5 Komods, their newest versions totalling up to 50 MB; monthly supporters get more. On the Account page you can create an API key (
kofa_pk_…, expiry: 1 month, 6 months, 1 year or never; shown only at creation). - Pack the Komod and publish it:
kofa-pack publish dist/komods --api-key kofa_pk_...
A single package can also be uploaded on the website (Upload).
Rules
- A package id is bound to an owner: the first uploader is the owner, nobody else can upload the same id. The owner can add co-uploaders on the Komod's page.
- A published id + version cannot be replaced. If you did not raise the version, the change does not reach the store (the output shows an
MEGVANline). - The store keeps the latest 5 versions per Komod, older ones are deleted automatically.
- Versions with a
-previewsuffix are visible only to the uploader, not publicly. - A README and its images appear on the Komod's page: Description page.
- The Hungarian / English texts of the latest release can be translated on the site: Community translation.
Trust
The store does not run Komod code, it only reads the package and checks the manifest. Whom to trust is the responsibility of the installing admin; the SHA-256 hash of the package is visible for every version.