Update Dockerfile

Dockerfile

@@ -1,7 +1,7 @@
 FROM debian:bookworm
 LABEL description="Chrome With noVNC" \
       maintainer="admin@fever.ink" \
-      version="2.2"
+      version="2.3"
 
 # Cài Chrome
 RUN \
@@ -17,14 +17,16 @@ RUN \
     apt install --no-install-recommends -y tightvncserver xfonts-base git websockify python3 net-tools procps && \
     git clone https://github.com/novnc/noVNC.git /opt/novnc
 
-# Tạo thư mục và file với quyền phù hợp
+# Tạo user nobody và thư mục với quyền phù hợp
 RUN \
-    mkdir -p /config/google-chrome /tmp/.vnc /tmp/.X11-unix && \
-    touch /config/google-chrome/First\ Run /tmp/.vnc/passwd /tmp/.vnc/xstartup && \
-    chmod -R 777 /config /tmp/.vnc /tmp/.X11-unix /opt/novnc && \
-    echo "Binhminh" | vncpasswd -f > /tmp/.vnc/passwd && \
-    echo "#!/bin/sh\nunset SESSION_MANAGER\nunset DBUS_SESSION_BUS_ADDRESS\nwhile [ 1 ]; do /opt/google/chrome/google-chrome --test-type --window-size=$((WIDTH+1)),$((HEIGHT+1)) --no-sandbox --window-position=0,0 --user-data-dir=/config/google-chrome; done" > /tmp/.vnc/xstartup && \
-    chmod 700 /tmp/.vnc/xstartup
+    mkdir -p /config/google-chrome /home/nobody/.vnc && \
+    touch /config/google-chrome/First\ Run /home/nobody/.vnc/passwd /home/nobody/.vnc/xstartup && \
+    echo "Binhminh" | vncpasswd -f > /home/nobody/.vnc/passwd && \
+    echo "#!/bin/sh\nunset SESSION_MANAGER\nunset DBUS_SESSION_BUS_ADDRESS\nwhile [ 1 ]; do /opt/google/chrome/google-chrome --test-type --window-size=$((WIDTH+1)),$((HEIGHT+1)) --no-sandbox --window-position=0,0 --user-data-dir=/config/google-chrome; done" > /home/nobody/.vnc/xstartup && \
+    chmod -R 777 /config /opt/novnc && \
+    chmod 600 /home/nobody/.vnc/passwd && \
+    chmod 700 /home/nobody/.vnc/xstartup && \
+    chown -R nobody:nogroup /home/nobody /config
 
 # Copy và cấu hình chrome-novnc.sh
 COPY chrome-novnc.sh /usr/bin/chrome-novnc.sh
@@ -37,10 +39,10 @@ ENV \
     WIDTH=1280 \
     HEIGHT=720 \
     LANGUAGE=zh_CN.UTF-8 \
-    VNC_PASSWD=Binhminh12 \
-    HOME=/config \
-    XDG_CONFIG_HOME=/config \
-    VNC_DIR=/tmp/.vnc
+    VNC_PASSWD=Binhminh \
+    HOME=/home/nobody \
+    XDG_CONFIG_HOME=/home/nobody \
+    VNC_DIR=/home/nobody/.vnc
 
 EXPOSE 7860
 
@@ -52,4 +54,5 @@ RUN \
     apt autoremove --purge -y && \
     rm -rf /var/lib/apt/lists/*
 
+USER nobody
 CMD ["bash", "-c", "/usr/bin/chrome-novnc.sh"]