sulthan
84cfd1b2c1
Closes #44. Chrome now starts on first CDP connection, tracks concurrent helpers, reaps after 300 seconds idle, preserves the named profile, and classifies reap interruptions. Shutdown stops Chrome's process group so cookie batches flush. ADR-0005 records the measured constraints and decisions. Verification: docker build, live CDP wake, graceful stop cleanup, sh -n, and go test ./... (7 packages, 3 no tests). Reviewed-on: #50 Co-authored-by: Sulthan Zaki <sultankiki05@gmail.com> Co-committed-by: Sulthan Zaki <sultankiki05@gmail.com>
46 lines
2.1 KiB
Docker
46 lines
2.1 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# Real Google Chrome for the latest-chapter poller and the kagane cover proxy.
|
|
#
|
|
# Not chromedp/headless-shell, which this replaces. headless-shell is a stripped
|
|
# Chrome build and Cloudflare's managed challenge on kagane.to never clears for
|
|
# it: measured 2026-08-08, 60s of a held-open tab still served the interstitial,
|
|
# while stock Chrome from the same IP cleared in ~4s. The tells are structural
|
|
# rather than a header — navigator.webdriver true, an empty plugin list, and
|
|
# Chromium- rather than Chrome-branded client hints. Overriding webdriver alone
|
|
# was tried and did not move it, so the browser build itself is the fix.
|
|
#
|
|
# zenika/alpine-chrome was also tried: its Chrome is 124 (2024), old enough that
|
|
# Cloudflare refuses it outright and old enough to break chromedp's CDP structs.
|
|
FROM debian:trixie-slim
|
|
|
|
# Chrome is deliberately unpinned, against the usual rule. A pinned build goes
|
|
# stale, and a stale browser is exactly what Cloudflare turns away — the 124 in
|
|
# alpine-chrome is the worked example. Rebuild is the upgrade path.
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends ca-certificates wget gnupg util-linux \
|
|
&& wget -qO- https://dl.google.com/linux/linux_signing_key.pub \
|
|
| gpg --dearmor -o /usr/share/keyrings/google-chrome.gpg \
|
|
&& echo "deb [arch=amd64 signed-by=/usr/share/keyrings/google-chrome.gpg] https://dl.google.com/linux/chrome/deb/ stable main" \
|
|
> /etc/apt/sources.list.d/google-chrome.list \
|
|
&& apt-get update \
|
|
&& apt-get install -y --no-install-recommends google-chrome-stable socat \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Keep the profile path present so Docker initializes the named volume with
|
|
# the unprivileged user's ownership.
|
|
|
|
RUN useradd --create-home --shell /usr/sbin/nologin chrome \
|
|
&& mkdir -p /home/chrome/profile /home/chrome/state \
|
|
&& chown -R chrome:chrome /home/chrome
|
|
|
|
# Unprivileged: Chrome refuses to run as root, and the CDP endpoint is a shell
|
|
# on whatever user owns it.
|
|
USER chrome
|
|
WORKDIR /home/chrome
|
|
|
|
COPY entrypoint.sh /entrypoint.sh
|
|
|
|
EXPOSE 9222
|
|
ENTRYPOINT ["/entrypoint.sh"]
|