Conversation
PHP-FPM + nginx + MariaDB stack modelled on the wordpress app and the 2026 porting guide: Go/Cobra installer hooks, unix-socket internal comms, config.php generated into $SNAP_DATA, moodledata on platform storage, LDAP auth against the platform directory, a cron daemon running admin/cli/cron.php, and CLI-based install/upgrade via admin/cli/install_database.php and admin/cli/upgrade.php. CI covers amd64 + arm64 on bookworm + buster and publishes via the store-publisher image.
…so mariadb-install-db works
…i: add armhf arch
…stration) Vendor microsoft/moodle-auth_oidc 4.5.7, register an OIDC client with the platform (RegisterOIDCClient), and configure the plugin (idptype=OIDC, Authelia authorization/token endpoints, client secret) with auth=oidc,manual. Disable Moodle user tours so their aria-hidden overlay does not block the Playwright navigation. Robust post-login assertion.
…e dumps and trace/video/test-results
…idden breaking getByRole)
… in .secondary-navigation)
…; log admin tab hrefs for diagnosis
…in-page anchors, not pages); preferences via scoped user-menu href
…>siteadmin mapping Set auth=oidc so the login page shows only the Syncloud IdP button; request the groups scope; bundle a local_syncloud plugin that on login promotes users in the 'syncloud' platform group to Moodle site admin (others stay regular). e2e now logs in through the real OIDC/Authelia flow as the device user; site-administration screenshot is captured only when the user is admin.
…n body); e2e asserts logged-in via user menu
…able Moodle developer error display to surface the OIDC error
…kedhosts) so the token request is not SSRF-blocked
…output was only breaking the post-login redirect)
…oken claims) before app install
…l shell expanding $ARCH to empty)
…); trigger tour on first dashboard visit
…n (true OIDC-only); e2e follows the auto-redirect to Authelia
…config change (match core admins.php)
…is not a site admin), no skip
…age, which has no armv7; enables the arm pipeline
…rols them, and views the course via 'Log in as'
…e student suggestion by name
…+ log options for diagnosis
…hf for the download url
…install on 32-bit
… not auto-refresh) instead of the temp snap download hack
…, drop -arch from image ref and remove the platform refresh step
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Packages Moodle 4.5.12 as a Syncloud app.
Stack: nginx (unix socket) → PHP-FPM → MariaDB, Go/Cobra installer hooks, config.php generated into $SNAP_DATA, moodledata on platform storage, LDAP auth against the platform directory, cron daemon for admin/cli/cron.php. CLI install/upgrade via admin/cli.
CI: amd64 + arm64, bookworm + buster, publish via store-publisher.