mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 5.5
d1eee3e26f
The pin moved from 4.5.11 to 5.3.0, and the role fitted neither a new install nor an existing one. Moodle 5 serves from public/ and routes every other path through r.php. nginx now uses public/ as its root, hands unknown paths to the router and passes PATH_INFO for scripts with slash arguments, and config.php declares the router as configured. The paths the role checks and writes (version.php, auth, webservice, the OIDC plugin) moved below public/, the URL of the OIDC plugin stays auth/oidc. The source archive no longer contains vendor/, so the image installs the Composer dependencies it declares. The OIDC plugin is pinned to v5.2.1, the newest release. An existing site kept its old code: the entrypoint filled the code volume once and never again. It now records the release it copied and replaces the tree when the image carries another one, and a new task runs admin/cli/upgrade.php. Plugins that were installed through the web interface are not carried over, the README says how to ship them. A site installed with 5.3 forces login by default, which 4.5 did not, so its start page answers 303 to the login page and the webserver health check refused it. The role declares 200 and 303 as the codes that check accepts: 200 is what an upgraded site keeps answering. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
125 lines
4.3 KiB
Docker
125 lines
4.3 KiB
Docker
# Self-built Moodle image. See docs/requirements/015-moodle-self-built.md.
|
|
#
|
|
# Static Dockerfile — all dynamic values flow in as build ARGs from
|
|
# compose.yml.j2, which derives them from roles/web-app-moodle/vars/main.yml.
|
|
# That vars file is the single source of truth for:
|
|
# - container paths (MOODLE_CODE_DIR, MOODLE_DATA_DIR, MOODLE_SOURCE_DIR,
|
|
# MOODLE_ENTRYPOINT_PATH)
|
|
# - build-asset names (MOODLE_BUILD_DIR, MOODLE_BUILD_FILES.*)
|
|
#
|
|
# The COPY src paths and the ENTRYPOINT JSON-array literal in this
|
|
# file MUST stay in sync with vars/main.yml because Docker does not
|
|
# expand ARG/ENV inside JSON-form ENTRYPOINT and only resolves COPY
|
|
# src against the build context. Treat the literals below as a
|
|
# locked-in contract — when you add or rename a build asset, update
|
|
# vars/main.yml first and propagate here.
|
|
|
|
ARG MOODLE_BASE_IMAGE
|
|
ARG MOODLE_BASE_TAG
|
|
FROM ${MOODLE_BASE_IMAGE}:${MOODLE_BASE_TAG}
|
|
|
|
ARG MOODLE_CODE_DIR
|
|
ARG MOODLE_DATA_DIR
|
|
ARG MOODLE_LOCAL_CACHE_DIR
|
|
ARG MOODLE_SOURCE_DIR
|
|
ARG MOODLE_RUNTIME_USER
|
|
ARG MOODLE_OIDC_ENABLED
|
|
ARG MOODLE_OIDC_PLUGIN_RELPATH
|
|
ARG MOODLE_MCP_ENABLED
|
|
ARG MOODLE_MCP_PLUGIN_RELPATH
|
|
ARG MOODLE_MCP_PLUGIN_ARCHIVE_URL
|
|
ARG MOODLE_OIDC_PLUGIN_ARCHIVE_URL
|
|
ARG MOODLE_RELEASE
|
|
ARG MOODLE_TARBALL_URL
|
|
ARG MOODLE_VERSION_FILE
|
|
ARG MOODLE_AUTH_SUBDIR
|
|
ARG MOODLE_WEBSERVICE_SUBDIR
|
|
|
|
ENV MOODLE_CODE_DIR=${MOODLE_CODE_DIR} \
|
|
MOODLE_DATA_DIR=${MOODLE_DATA_DIR} \
|
|
MOODLE_LOCAL_CACHE_DIR=${MOODLE_LOCAL_CACHE_DIR} \
|
|
MOODLE_SOURCE_DIR=${MOODLE_SOURCE_DIR} \
|
|
MOODLE_RUNTIME_USER=${MOODLE_RUNTIME_USER} \
|
|
MOODLE_OIDC_PLUGIN_RELPATH=${MOODLE_OIDC_PLUGIN_RELPATH} \
|
|
MOODLE_MCP_PLUGIN_RELPATH=${MOODLE_MCP_PLUGIN_RELPATH} \
|
|
MOODLE_MCP_PLUGIN_ARCHIVE_URL=${MOODLE_MCP_PLUGIN_ARCHIVE_URL} \
|
|
MOODLE_OIDC_PLUGIN_ARCHIVE_URL=${MOODLE_OIDC_PLUGIN_ARCHIVE_URL} \
|
|
MOODLE_RELEASE=${MOODLE_RELEASE} \
|
|
MOODLE_TARBALL_URL=${MOODLE_TARBALL_URL} \
|
|
MOODLE_VERSION_FILE=${MOODLE_VERSION_FILE} \
|
|
MOODLE_AUTH_SUBDIR=${MOODLE_AUTH_SUBDIR} \
|
|
MOODLE_WEBSERVICE_SUBDIR=${MOODLE_WEBSERVICE_SUBDIR}
|
|
|
|
# hadolint ignore=DL3008
|
|
RUN rm -rf /var/lib/apt/lists/* \
|
|
&& apt-get -o Acquire::Retries=3 update \
|
|
&& DEBIAN_FRONTEND=noninteractive apt-get -o Acquire::Retries=3 install -y --no-install-recommends \
|
|
ca-certificates \
|
|
curl \
|
|
file \
|
|
gosu \
|
|
jq \
|
|
libfreetype6-dev \
|
|
libicu-dev \
|
|
libjpeg-dev \
|
|
libldap2-dev \
|
|
libonig-dev \
|
|
libpng-dev \
|
|
libpq-dev \
|
|
libwebp-dev \
|
|
libxml2-dev \
|
|
libxslt1-dev \
|
|
libzip-dev \
|
|
msmtp \
|
|
msmtp-mta \
|
|
unzip \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN docker-php-ext-configure gd --with-freetype --with-jpeg --with-webp \
|
|
&& docker-php-ext-configure intl \
|
|
&& docker-php-ext-configure ldap \
|
|
&& docker-php-ext-install -j"$(nproc)" \
|
|
exif \
|
|
gd \
|
|
intl \
|
|
ldap \
|
|
mysqli \
|
|
opcache \
|
|
pgsql \
|
|
pdo_mysql \
|
|
pdo_pgsql \
|
|
soap \
|
|
xsl \
|
|
zip
|
|
|
|
COPY build/php-conf/opcache-recommended.ini /usr/local/etc/php/conf.d/opcache-recommended.ini
|
|
COPY build/php-conf/moodle-runtime.ini /usr/local/etc/php/conf.d/moodle-runtime.ini
|
|
COPY build/php-conf/zz-moodle-pool.conf /usr/local/etc/php-fpm.d/zz-moodle-pool.conf
|
|
|
|
COPY --from=composer:2 /usr/bin/composer /usr/bin/composer
|
|
|
|
COPY build/install/moodle-source.sh /tmp/install-moodle-source.sh
|
|
RUN bash /tmp/install-moodle-source.sh && rm /tmp/install-moodle-source.sh
|
|
|
|
COPY build/install/auth-oidc.sh /tmp/install-auth-oidc.sh
|
|
RUN if [ "${MOODLE_OIDC_ENABLED}" = "1" ] || [ "${MOODLE_OIDC_ENABLED}" = "true" ]; then \
|
|
bash /tmp/install-auth-oidc.sh; \
|
|
fi \
|
|
&& rm /tmp/install-auth-oidc.sh
|
|
|
|
COPY build/install/webservice-mcp.sh /tmp/install-webservice-mcp.sh
|
|
RUN if [ "${MOODLE_MCP_ENABLED}" = "1" ] || [ "${MOODLE_MCP_ENABLED}" = "true" ]; then \
|
|
bash /tmp/install-webservice-mcp.sh; \
|
|
fi \
|
|
&& rm /tmp/install-webservice-mcp.sh
|
|
|
|
COPY build/config.php ${MOODLE_SOURCE_DIR}/config.php
|
|
RUN chown ${MOODLE_RUNTIME_USER}:${MOODLE_RUNTIME_USER} ${MOODLE_SOURCE_DIR}/config.php \
|
|
&& chmod 0640 ${MOODLE_SOURCE_DIR}/config.php
|
|
|
|
COPY build/moodle-entrypoint.sh /usr/local/bin/moodle-entrypoint.sh
|
|
RUN chmod 0755 /usr/local/bin/moodle-entrypoint.sh
|
|
|
|
ENTRYPOINT ["/usr/local/bin/moodle-entrypoint.sh"]
|
|
CMD ["php-fpm"]
|