This commit is contained in:
Andy 2017-06-23 00:52:52 +02:00
parent c61ded70d2
commit 7a1a3720e2
No known key found for this signature in database
GPG Key ID: 6DF73A45EAA37C99
2 changed files with 9 additions and 13 deletions

View File

@ -1,5 +1,5 @@
# Run Chrome in a container # Run Chrome in a container
FROM ubuntu:xenial FROM ubuntu:zesty
MAINTAINER Andrey Arapov <andrey.arapov@nixaid.com> MAINTAINER Andrey Arapov <andrey.arapov@nixaid.com>
# To avoid problems with Dialog and curses wizards # To avoid problems with Dialog and curses wizards

View File

@ -1,7 +1,4 @@
version: '2.1' version: '2'
# Initialize
# docker run --rm -ti -v chrome_data:/data busybox /bin/sh -c "chown 1000:1000 /data"
volumes: volumes:
data: {} data: {}
@ -9,7 +6,8 @@ volumes:
services: services:
chrome: chrome:
image: andrey01/chrome image: local/chrome
build: .
network_mode: bridge network_mode: bridge
devices: devices:
- /dev/dri - /dev/dri
@ -33,13 +31,11 @@ services:
# more on CAP_SYS_ADMIN https://lwn.net/Articles/486306/ # more on CAP_SYS_ADMIN https://lwn.net/Articles/486306/
cap_add: cap_add:
- SYS_ADMIN - SYS_ADMIN
- IPC_LOCK # lock memory to prevent sensitive values from being swapped to disk.
# Turns off anonymous page swapping
mem_swappiness: 0
# shm_size: 4G
# mem_limit: 4G
# security_opt: # security_opt:
# - apparmor:docker-ptrace # - apparmor:docker-ptrace
# - apparmor:unconfined # - apparmor:unconfined
# fixes the: grsec: denied resource overstep by requesting 28 for RLIMIT_NICE against limit 0 for /opt/google/chrome/chrome
ulimits:
nice: 28
shm_size: 4G
mem_limit: 4G
# Turns off anonymous page swapping
mem_swappiness: 0