Skip to content

fix: make the kubo binary reliably available#3180

Open
lidel wants to merge 4 commits into
mainfrom
chore/kubo-from-github-releases
Open

fix: make the kubo binary reliably available#3180
lidel wants to merge 4 commits into
mainfrom
chore/kubo-from-github-releases

Conversation

@lidel

@lidel lidel commented Jun 27, 2026

Copy link
Copy Markdown
Member

Problem

Two problems, both in how ipfs-desktop gets the kubo binary:

  1. It can go missing. The binary is fetched by a postinstall script, so it never lands when npm skips that script (--ignore-scripts, pnpm, hardened CI, and the upcoming npm v12 default). The app then shows "kubo binary not found" and the daemon won't start (Error: kubo binary not found #3031).
  2. One source. It only came from dist.ipfs.tech.

Fix

Adopt the new kubo (ipfs/npm-kubo#83), which tackles both:

  • it downloads the binary on first use, so a skipped script heals itself, and
  • it fetches from GitHub releases, with dist.ipfs.tech still working behind a deprecation warning.

The macOS universal build moves to GitHub too. The kubo version is unchanged; see the npm-kubo PR for details. CI tracks the branch for now and will pin a published version before merge.

TODO before merging this

lidel added 2 commits June 27, 2026 15:41
Parked until kubo is bumped to the npm-kubo release that fetches from
GitHub releases (ipfs/npm-kubo#83). The current kubo still uses the
dist.ipfs.tech layout, so do not merge before that bump.
Temporary: point the kubo dependency at the ipfs/npm-kubo#83 branch over
git+https so CI clones it and exercises the GitHub-releases fetch end to
end. Revert to a published kubo version before merging.
@socket-security

socket-security Bot commented Jun 27, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedkubo@​0.42.0 ⏵ 0.42.0N/AN/AN/AN/AN/A

View full report

@lidel lidel changed the title Chore/kubo from GitHub releases fix: make the kubo binary reliably available Jun 27, 2026
Bump the pinned npm-kubo commit to the one that creates bin/ before
linking, so CI's git install no longer fails. Revert with the rest of
the test wiring before merge.
@lidel lidel marked this pull request as ready for review June 28, 2026 12:31
@lidel lidel requested a review from a team as a code owner June 28, 2026 12:31
ipfs/npm-kubo#83 (on-demand binary fetch from github releases)
landed on master. Pin the kubo dependency to the latest npm-kubo
master commit and drop the macos build TODO that was gating the
switch.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Error: kubo binary not found

1 participant