From 9665f483e400d6907093fcd42e53e4f3c9e02644 Mon Sep 17 00:00:00 2001
From: panxiao81 <pan-xiao@live.cn>
Date: Fri, 12 May 2023 18:59:37 +0800
Subject: [PATCH 1/2] add dependencies for chrome

---
 Dockerfile | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index 2964668..11e107d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,6 +8,22 @@ COPY package.json /usr/src/app/
 
 RUN npm i --registry=https://registry.npm.taobao.org
 
+RUN apt update && \
+    DEBIAN_FRONTEND=noninteractive apt install -y \
+        libnss3 \
+        libatk1.0-0 \
+        libatk-bridge2.0-0 \
+        libcups2 \
+        libdrm2 \
+        libxkbcommon0 \
+        libxcomposite1 \
+        libxdamage1 \
+        libxfixes3 \
+        libxrandr2 \
+        libgbm1 \
+        libasound2 \
+    && rm -rf /var/lib/apt/lists/*
+
 COPY . /usr/src/app
 
 EXPOSE 3000

From e9cd4f4e644e82114cfff425d47b274843ea55c3 Mon Sep 17 00:00:00 2001
From: panxiao81 <pan-xiao@live.cn>
Date: Fri, 12 May 2023 19:30:15 +0800
Subject: [PATCH 2/2] fix running as root

---
 Dockerfile          | 18 +++++++++---------
 docker-compose.yaml |  2 ++
 2 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 11e107d..76482fe 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,13 +1,5 @@
 FROM node:18.16.0
 
-RUN mkdir -p /usr/src/app
-
-WORKDIR /usr/src/app
-
-COPY package.json /usr/src/app/
-
-RUN npm i --registry=https://registry.npm.taobao.org
-
 RUN apt update && \
     DEBIAN_FRONTEND=noninteractive apt install -y \
         libnss3 \
@@ -24,7 +16,15 @@ RUN apt update && \
         libasound2 \
     && rm -rf /var/lib/apt/lists/*
 
-COPY . /usr/src/app
+USER 1000
+
+WORKDIR /usr/src/app
+
+COPY --chown=1000 package.json /usr/src/app/
+
+RUN npm i --registry=https://registry.npm.taobao.org
+
+COPY --chown=1000 . /usr/src/app
 
 EXPOSE 3000
 
diff --git a/docker-compose.yaml b/docker-compose.yaml
index 09403c4..ca82fe8 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -10,6 +10,8 @@ services:
     ports:
       - "3000:3000"
     restart: always
+    cap_add:
+      - "SYS_ADMIN"
     environment:
       #      - TZ=Asia/Shanghai
       - http_proxy=${http_proxy}