Packaging tutorial (Meteor)


This tutorial will show you how to make a package from a Meteor app.

Creating the package will take about five minutes of focused time, interspersed with the downloading of various components, which can take up to half an hour.

Look through the "Next steps" to learn more about how Sandstorm works and how to integrate Sandstorm with the Meteor accounts system.

This tutorial assumes:

  • You know the basics of Meteor and know how to open a terminal.

  • You have a computer running Mac OS or Linux or Windows.

Windows users, please note: This tutorial should work for you, but you might need to use slightly different commands to do things like create directories.

Overview of Sandstorm packages

The tutorial uses a Meteor app as an example. Sandstorm supports any programming language that runs on Linux, not just Meteor, such as Python, Rails, Node, PHP, C++, Go, Rust, and more. Read about vagrant-spk's platform stacks to see how to optimize your package for your app's programming language.

Once you've worked through this tutorial, look in the Next steps section at the bottom of this document to learn more about how to improve the speed of packaging on your computer, learn about user authentication and permissions in Sandstorm, and more.

A Sandstorm application package ("SPK file" for short) includes all the code needed to run your app, including all binaries, libraries, modules, etc. Sandstorm relies on Meteor's meteor build system to create the package.

Making a Sandstorm package enables people to:

  • Create an instance of the app ("grain") with one click.

  • Create a private grain of the app, secured by Sandstorm.

  • Invite others to the grain through a Google Docs-like sharing interface.

  • Trust that the data they enter into the app stays private to the app, due to Sandstorm's sandboxing.

Sandstorm packages rely on the Sandstorm platform to handle user login and access control. You can read more in the App Developer Handbook. You can use an Atmosphere package called kenton:accounts-sandstorm to integrate with that.

Prepare the app

In this tutorial, we make a package for a web-based clock that is made with Meteor. To create it, run the following commands:

mkdir -p ~/projects/sandstorm-packaging-tutorial
cd ~/projects/sandstorm-packaging-tutorial
git clone
cd clock

You now have a fully functional Meteor app stored in ~/projects/sandstorm-packaging-tutorial/clock.

Note: This is a regular Meteor app, so you can play with it by running meteor and you can import it into git if you like.

Set up for Sandstorm development

In this step, you will install the main Sandstorm app development tool, a command-line tool called vagrant-spk.

That tool automates the process of creating a Linux virtual machine, installing Sandstorm in the virtual machine, running your app in Sandstorm, capturing its dependencies, and creating a package file you can distribute so anyone with Sandstorm can see what you saw.

Get your computer ready. Follow the vagrant-spk installation guide before proceeding.

Once installed, you can use the vagrant-spk command to create a Linux virtual machine. Make sure it's installed by running:

vagrant-spk --help

You should see a message like:

usage: /usr/local/bin/vagrant-spk [-h] [--work-directory WORK_DIRECTORY]
                                  [command_specific_args [command_specific_args ...]]

You need to install vagrant-spk just once, and you can use it to create any number of Sandstorm packages.

Start a virtual machine ready to run Sandstorm and Meteor

Sandstorm packages contain the full set of executable code required to run an app on a Linux machine. vagrant-spk can prepare an isolated environment with your app and its Meteor dependencies in order to bundle them together into a Sandstorm package. The virtual machine it creates runs Linux, which allows you to create packages that run on Linux-based Sandstorm servers no matter what your main operating system is.

To define a new machine to run your app inside, run this command:

cd ~/projects/sandstorm-packaging-tutorial/clock
vagrant-spk setupvm meteor

You should see a message like the following:

Initializing .sandstorm directory in /Users/myself/projects/sandstorm-packaging-tutorial/clock/.sandstorm

vagrant-spk stores packaging information in a .sandstorm/ directory within your app. The directory contains executable scripts that define how the app is packaged as well as metadata like the authors' names, the app's name, and icons for the app. We encourage you to store this directory with the source code of your app; that way, your colleagues can submit changes to the Sandstorm packaging.

Now switch the virtual machine on. This will take a while, perhaps 2-20 minutes the first time it boots, depending on your Internet connection.

cd ~/projects/sandstorm-packaging-tutorial/clock
vagrant-spk vm up

You will see a lot of messages printed out. Some of them are not necessary; we're working on tidying up the scripts to minimize the noise.

Eventually, you will get your shell back. At this point, you can continue to the next step.

Connect your app to your local Sandstorm server

Apps run differently in Sandstorm, compared to meteor deploy, so it's essential to preview what your app would look like when running in Sandstorm. vagrant-spk helps you do this by providing a Sandstorm server within a Linux virtual machine.

Before we can see the app in Sandstorm, it needs to have a package definition file specifying the app's title and other metadata. Create it with this command:

cd ~/projects/sandstorm-packaging-tutorial/clock
vagrant-spk init

This will create a .sandstorm/sandstorm-pkdef.capnp file, containing some defaults.

Now make the app available to the Sandstorm server by running:

cd ~/projects/sandstorm-packaging-tutorial/clock
vagrant-spk dev

This step can take some time to download the Meteor dependencies of the app. Once it is done, you will see a message like:

App is now available from Sandstorm server. Ctrl+C to disconnect.

When we visit the Sandstorm server, we'll see the app available. Open up this URL in your web browser:

A note about This is the same as localhost, but in Sandstorm's security model, each session to the app uses a temporary subdomain of the main Sandstorm URL. This is an implemenation detail that your app mostly does not need to know about, but it does mean that the domain name running Sandstorm needs wildcard DNS. We created as an alias for localhost and gave it wildcard DNS. You can rest assured that your interactions with stay entirely on your computer.

Take a moment now to sign in. Choose with a Dev account and choose Alice (admin). You will have to enter an email address; you can use

You should see an app in the apps list called Example App.

Launch your app with one click

Sandstorm is a platform where users without technical knowledge can launch instances of web apps, called "grains." To launch an instance of the clock, click on the icon above Example App.

You'll now see a clock! It has the name Untitled Instance.

Sandstorm makes it easy to run multiple instances of an app; each one is called a grain. Anyone with your app available on their Sandstorm instance can create a new grain by clicking its icon.

You can test this out by going back to the New menu and creating one or two more grains of the app right now. The Open menu enables you to switch between different grains.

Sandstorm apps often need fewer lines of code than regular web apps. They need to contain the web interface for creating exactly one document, or editing just one image, or publishing one single blog. Document management is delegated to Sandstorm.

Each grain runs totally isolated from other grains. For Meteor apps, each grain has its own MongoDB server and database. Embedding the database server into the package helps enforce isolation between app instances: a crash or security issue in one grain doesn't affect another grain. This also simplifies app packaging; it's OK to use use the same database name for every grain.

A word about Meteor, Sandstorm, and hot code push: Each call to vagrant-spk dev runs meteor build, which disables hot code push in Meteor. To update the code you see in Sandstorm, you will need to stop and start the vagrant-spk dev process. This is due to a technical limitation in Sandstorm that we are working on addressing.

Configure your app's name & other metadata

Example App is not a very descriptive name for this app, and New instance is not a very descriptive name for a grain of this app. We can do better.

This information is stored in .sandstorm/sandstorm-pkgdef.capnp. capnp is the file extension for Cap'n Proto. For the purpose of this tutorial, Cap'n Proto is a configuration file format that is easy for Sandstorm to parse.

To change the title, open .sandstorm/sandstorm-pkgdef.capnp in a text editor. Find the line with this text:

    appTitle = (defaultText = "Example App"),

Change it to the following.

    appTitle = (defaultText = "Analog Clock"),

We can change the text that Sandstorm users see when they want to create a new instance of the app. To do this, find the line containing:

      ( nounPhrase = (defaultText = "instance"),

and change it to read:

      ( nounPhrase = (defaultText = "clock"),

To refresh the information that shows up in, find the terminal where you are running vagrant-spk dev. It should have this line at the end.

App is now available from Sandstorm server. Ctrl+C to disconnect.

Hold the Ctrl key and tap c on your keyboard to get your terminal back. Then re-start the process by running these commands.

cd ~/projects/sandstorm-packaging-tutorial/clock
vagrant-spk dev

This may take a minute while Meteor verifies it has downloaded all your dependencies.

Now visit the the New menu. You should see that the app has a new name -- Analog Clock -- and it allows you to make a New clock.

Create an SPK package file

The artifact that Sandstorm app authors deliver to users is a Sandstorm package (SPK) file, containing the app and all its dependencies. The typical way to distribute this is via the Sandstorm app market.

We'll build an SPK now. To do that, we must first stop the dev server. To do that, open the terminal window containing the vagrant-spk dev process and type Ctrl-C on your keyboard. You will see some messages like:

Unmounted cleanly.
Updating file list.

Sandstorm stays running, and the app is now disconnected. If you're still logged into your Sandstorm instance, you will notice the app vanishing from the list of apps and your grains will become broken. After we upload a Sandstorm package of the app, the grains will heal themselves.

To create the SPK file, run:

cd ~/projects/sandstorm-packaging-tutorial/clock
vagrant-spk pack ~/projects/package.spk

This will take a few moments, and once it is done, there will be a file in ~/projects/package.spk that contains the full app.

You can see how large it is by running the following command:

du -h ~/projects/package.spk

You will see output like this.

21M     ~/projects/package.spk

This file size includes everything the app needs to run: its database server, its libraries, and the Meteor app itself.

We can upload this app to our development Sandstorm server by visiting the New tab and clicking Upload app - choose SPK file, and then choosing this file in your web browser's upload dialog.

To learn how to go further and share this SPK file, or what you should know for other web frameworks, check out the What's next section below.

Clean up

With vagrant-spk, before you can develop a second app, you must stop the virtual machine created as part of developing the first one. This is because the vagrant-spk virtual machine always uses port 6090.

In our case, we're done using the virtual machine running this app, so it's safe to stop it. Run this command:

cd ~/projects/sandstorm-packaging-tutorial/clock
vagrant-spk vm halt

This shuts down the whole virtual machine used for developing your app's Sandstorm package, including the Sandstorm install specific to that app's packaging work. Now port 6090 is available for other app packaging projects.

If you ever want to work on this app's packaging again, you can bring it online by running:

cd ~/projects/sandstorm-packaging-tutorial/clock
vagrant-spk vm up

If you ever are confused about which Vagrant virtual machines are running, run this command:

vagrant global-status

(Note: It's vagrant here, not vagrant-spk.)

Next steps

Now that you've seen the basics of how a Sandstorm app works, you might be interested in any of the following:

  • What makes a great Sandstorm app? See the App Developer Handbook.
  • How do I learn more about the technical underpinnings of vagrant-spk? How do I make vagrant-spk faster? Read about understanding & customizing vagrant-spk.
  • How do I package-up a Python, PHP, or other non-Meteor app? Read about platform stacks.
  • Will this work on Windows? Yes, probably. This tutorial uses ~ and mkdir -p above, and you can't typically use those on Windows.
  • Will this work on a cloud Linux instance? Probably not, since vagrant-spk creates a virtual machine and running a VM inside a VM often fails.