| ADD alpine-minirootfs-3.23.3-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| RUN /bin/sh -c apk --no-cache add ca-certificates chromium nss freetype harfbuzz ttf-freefont yara && adduser -D -u 1000 sandbox && mkdir -p /tmp/screenshots /var/lib/yara-rules && chown sandbox:sandbox /tmp/screenshots /var/lib/yara-rules # buildkit |
| ENV CHROME_BIN=/usr/bin/chromium-browser |
| ENV CHROME_FLAGS=--headless --no-sandbox --disable-gpu --disable-dev-shm-usage --disable-software-rasterizer |
| COPY /sandbox /sandbox # buildkit |
| USER sandbox |
| EXPOSE [8090/tcp] |
| HEALTHCHECK &{["CMD-SHELL" "wget -qO- http://localhost:8090/health || exit 1"] "30s" "5s" "0s" "0s" '\x03'} |
| ENTRYPOINT ["/sandbox"] |
