Update Dockerfile

Dockerfile

@@ -1,6 +1,5 @@
 FROM python:3.13-slim-bookworm AS builder
 
-# Build dummy packages to skip heavy UI dependencies
 RUN apt-get update \
     && apt-get install -y --no-install-recommends equivs \
     && equivs-control libgl1-mesa-dri \
@@ -12,7 +11,6 @@ RUN apt-get update \
     && equivs-build adwaita-icon-theme \
     && mv adwaita-icon-theme_*.deb /adwaita-icon-theme.deb
 
-# ── 下载 Chrome for Testing 142.0.7444.175 ──
 FROM python:3.13-slim-bookworm AS chrome-downloader
 
 ARG CHROME_VERSION=142.0.7444.175
@@ -23,30 +21,39 @@ RUN apt-get update && apt-get install -y --no-install-recommends curl unzip \
        "https://storage.googleapis.com/chrome-for-testing-public/${CHROME_VERSION}/linux64/chromedriver-linux64.zip" \
     && unzip /tmp/chrome.zip -d /opt/ \
     && unzip /tmp/chromedriver.zip -d /opt/ \
-    && chmod +x /opt/chrome-linux64/chrome /opt/chromedriver-linux64/chromedriver
+    # ← FIX: 让所有用户都可读可执行
+    && chmod -R a+rx /opt/chrome-linux64 \
+    && chmod a+rx /opt/chromedriver-linux64/chromedriver
 
-# ── 最终镜像 ──
 FROM python:3.13-slim-bookworm
 
 COPY --from=builder /*.deb /
 COPY --from=chrome-downloader /opt/chrome-linux64 /opt/chrome
 COPY --from=chrome-downloader /opt/chromedriver-linux64/chromedriver /usr/bin/chromedriver
 
-# 安装 Chrome 运行时依赖（不再安装 chromium 本体）
 RUN dpkg -i /libgl1-mesa-dri.deb \
     && dpkg -i /adwaita-icon-theme.deb \
     && apt-get update \
     && apt-get install -y --no-install-recommends \
-       # Chrome 142 运行时依赖
-       libnss3 libnspr4 libatk1.0-0 libatk-bridge2.0-0 libcups2 \
-       libdrm2 libxkbcommon0 libxcomposite1 libxdamage1 libxfixes3 \
-       libxrandr2 libgbm1 libasound2 libpango-1.0-0 libcairo2 \
+       # ← FIX: 补全 Chrome 142 所需的完整运行时依赖
+       libnss3 libnspr4 \
+       libatk1.0-0 libatk-bridge2.0-0 \
+       libcups2 libdrm2 \
+       libxkbcommon0 libxcomposite1 libxdamage1 libxfixes3 libxrandr2 \
+       libgbm1 libasound2 \
+       libpango-1.0-0 libcairo2 \
        libatspi2.0-0 libwayland-client0 \
-       # xvfb 虚拟显示 + 工具
+       libglib2.0-0 libdbus-1-3 \
+       libx11-6 libxcb1 libxext6 \
+       libfontconfig1 libfreetype6 libexpat1 \
+       fonts-liberation \
        xvfb dumb-init git procps curl xauth \
-    && rm -rf /var/lib/apt/lists/*
+    && rm -rf /var/lib/apt/lists/* \
+    # ← FIX: 验证 Chrome 能正常调用（root 下无需 --no-sandbox）
+    && /opt/chrome/chrome --version --no-sandbox \
+    # ← FIX: 再次确保权限（apt 操作后不变，但显式保险）
+    && chmod a+rx /opt/chrome/chrome /usr/bin/chromedriver
 
-# 创建 HF 必需的 UID=1000 用户
 RUN useradd -m -u 1000 user
 
 WORKDIR /app
@@ -61,11 +68,9 @@ USER user
 
 RUN mkdir -p "/app/.config/chromium/Crash Reports/pending"
 
-# ── 环境变量 ──
 ENV LOG_LEVEL=info \
     HEADLESS=true \
     PORT=7860 \
-    # 指向 Chrome for Testing 二进制（关键！）
     BROWSER_EXECUTABLE_PATH=/opt/chrome/chrome
 
 EXPOSE 7860