xZero707/dockerfiles
1
0
Fork 0
mirror of https://github.com/jessfraz/dockerfiles.git synced 2024-11-23 11:31:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Run Chrome as 'chrome' user (#239)

Browse Source 
* Run Chrome as 'chrome' user

* Use seccom instead of --privileged
This commit is contained in:
Jason 2017-02-22 20:10:54 -08:00 committed by Jess Frazelle
parent efdc3429ca
commit bfa8cbfe18
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
chrome/stable/Dockerfile
View File

@ -6,13 +6,15 @@
# --memory 512mb \ # max memory it can use # --memory 512mb \ # max memory it can use
# -v /tmp/.X11-unix:/tmp/.X11-unix \ # mount the X11 socket # -v /tmp/.X11-unix:/tmp/.X11-unix \ # mount the X11 socket
# -e DISPLAY=unix$DISPLAY \ # -e DISPLAY=unix$DISPLAY \
# -v $HOME/Downloads:/root/Downloads \ # -v $HOME/Downloads:/home/chrome/Downloads \
# -v $HOME/.config/google-chrome/:/data \ # if you want to save state # -v $HOME/.config/google-chrome/:/data \ # if you want to save state
# --device /dev/snd \ # so we have sound # --device /dev/snd \ # so we have sound
# -v /dev/shm:/dev/shm \ # -v /dev/shm:/dev/shm \
# --name chrome \ # --name chrome \
# jess/chrome # jess/chrome
# #
# For Ubuntu I had to add download Jessie's chrome.json.
# wget wget https://raw.githubusercontent.com/jfrazelle/dotfiles/master/etc/docker/seccomp/chrome.json -o ~/chrome.json
# Base docker image # Base docker image
FROM debian:sid FROM debian:sid
@ -42,9 +44,12 @@ RUN apt-get update && apt-get install -y \
&& apt-get purge --auto-remove -y curl \ && apt-get purge --auto-remove -y curl \
&& rm -rf /var/lib/apt/lists/* \ && rm -rf /var/lib/apt/lists/* \
&& rm -rf /src/*.deb && rm -rf /src/*.deb
RUN groupadd -r chrome && useradd -r -g chrome -G audio,video chrome \
&& mkdir -p /home/chrome/Downloads && chown -R chrome:chrome /home/chrome
COPY local.conf /etc/fonts/local.conf COPY local.conf /etc/fonts/local.conf
# Run Chrome as non privileged user
USER chrome
# Autorun chrome # Autorun chrome
ENTRYPOINT [ "google-chrome" ] ENTRYPOINT [ "google-chrome" ]
CMD [ "--user-data-dir=/data" ] CMD [ "--user-data-dir=/data" ]