Update Dockerfile

Dockerfile

@@ -11,9 +11,10 @@ RUN apt-get update \
     && equivs-build adwaita-icon-theme \
     && mv adwaita-icon-theme_*.deb /adwaita-icon-theme.deb
 
+# ── 下载 Chrome for Testing 136.0.7103.113 ──
 FROM python:3.13-slim-bookworm AS chrome-downloader
 
-ARG CHROME_VERSION=142.0.7444.175
+ARG CHROME_VERSION=136.0.7103.113
 RUN apt-get update && apt-get install -y --no-install-recommends curl unzip \
     && curl -Lo /tmp/chrome.zip \
        "https://storage.googleapis.com/chrome-for-testing-public/${CHROME_VERSION}/linux64/chrome-linux64.zip" \
@@ -21,10 +22,10 @@ RUN apt-get update && apt-get install -y --no-install-recommends curl unzip \
        "https://storage.googleapis.com/chrome-for-testing-public/${CHROME_VERSION}/linux64/chromedriver-linux64.zip" \
     && unzip /tmp/chrome.zip -d /opt/ \
     && unzip /tmp/chromedriver.zip -d /opt/ \
-    # ← FIX: 让所有用户都可读可执行
     && chmod -R a+rx /opt/chrome-linux64 \
     && chmod a+rx /opt/chromedriver-linux64/chromedriver
 
+# ── 最终镜像 ──
 FROM python:3.13-slim-bookworm
 
 COPY --from=builder /*.deb /
@@ -35,25 +36,25 @@ RUN dpkg -i /libgl1-mesa-dri.deb \
     && dpkg -i /adwaita-icon-theme.deb \
     && apt-get update \
     && apt-get install -y --no-install-recommends \
-       # ← FIX: 补全 Chrome 142 所需的完整运行时依赖
-       libnss3 libnspr4 \
-       libatk1.0-0 libatk-bridge2.0-0 \
-       libcups2 libdrm2 \
+       libnss3 libnspr4 libatk1.0-0 libatk-bridge2.0-0 libcups2 libdrm2 \
        libxkbcommon0 libxcomposite1 libxdamage1 libxfixes3 libxrandr2 \
-       libgbm1 libasound2 \
-       libpango-1.0-0 libcairo2 \
-       libatspi2.0-0 libwayland-client0 \
-       libglib2.0-0 libdbus-1-3 \
-       libx11-6 libxcb1 libxext6 \
-       libfontconfig1 libfreetype6 libexpat1 \
+       libgbm1 libasound2 libpango-1.0-0 libcairo2 libatspi2.0-0 \
+       libwayland-client0 libglib2.0-0 libdbus-1-3 \
+       libx11-6 libxcb1 libxext6 libfontconfig1 libfreetype6 libexpat1 \
        fonts-liberation \
        xvfb dumb-init git procps curl xauth \
     && rm -rf /var/lib/apt/lists/* \
-    # ← FIX: 验证 Chrome 能正常调用（root 下无需 --no-sandbox）
-    && /opt/chrome/chrome --version --no-sandbox \
-    # ← FIX: 再次确保权限（apt 操作后不变，但显式保险）
     && chmod a+rx /opt/chrome/chrome /usr/bin/chromedriver
 
+# ══ 核心修复：wrapper 脚本，让所有 chrome 调用自动带 --no-sandbox ══
+# FlareSolverr 检测时调用 `chrome --version`，不带 --no-sandbox 会在
+# HF 非特权容器里直接崩溃，导致误报"未安装"。wrapper 透明注入该参数。
+RUN printf '#!/bin/bash\nexec /opt/chrome/chrome --no-sandbox --disable-dev-shm-usage --disable-gpu "$@"\n' \
+      > /usr/local/bin/google-chrome \
+    && chmod a+rx /usr/local/bin/google-chrome \
+    # 验证 wrapper 可正常输出版本号（build 阶段即拦截问题）
+    && google-chrome --version
+
 RUN useradd -m -u 1000 user
 
 WORKDIR /app
@@ -66,12 +67,13 @@ RUN pip install -r requirements.txt --no-cache-dir \
 
 USER user
 
-RUN mkdir -p "/app/.config/chromium/Crash Reports/pending"
+RUN mkdir -p "/home/user/.config/chromium/Crash Reports/pending"
 
 ENV LOG_LEVEL=info \
     HEADLESS=true \
     PORT=7860 \
-    BROWSER_EXECUTABLE_PATH=/opt/chrome/chrome
+    # 指向 wrapper 脚本而非直接指向二进制
+    BROWSER_EXECUTABLE_PATH=/usr/local/bin/google-chrome
 
 EXPOSE 7860