Update Dockerfile

Dockerfile

@@ -1,22 +1,41 @@
 FROM python:3.11-slim
 
+ENV PYTHONUNBUFFERED=1 \
+    PIP_NO_CACHE_DIR=1 \
+    HOME=/tmp \
+    XDG_CACHE_HOME=/tmp/.cache \
+    SELENIUM_MANAGER_CACHE_DIR=/tmp/selenium \
+    TMPDIR=/tmp \
+    CHROME_BINARY=/usr/bin/chromium \
+    CHROMEDRIVER=/usr/bin/chromedriver \
+    CHROME_EXTRA_ARGS="--no-sandbox --disable-dev-shm-usage --disable-gpu --window-size=1920,1080 --headless=new"
+
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
-        chromium chromium-driver fonts-liberation libgbm1 libnss3 libgconf-2-4 && \
+        chromium chromium-driver \
+        fonts-liberation \
+        libgbm1 libnss3 libxss1 libasound2 libxshmfence1 \
+        ca-certificates && \
     rm -rf /var/lib/apt/lists/*
 
-ENV CHROME_BINARY=/usr/bin/chromium
-ENV CHROME_EXTRA_ARGS="--no-sandbox --disable-dev-shm-usage --disable-gpu --window-size=1920,1080 --headless=new"
-ENV HOME=/tmp
-ENV XDG_CACHE_HOME=/tmp/.cache
-ENV SELENIUM_MANAGER_CACHE_DIR=/tmp/selenium
-ENV TMPDIR=/tmp
+RUN mkdir -p /app/downloaded_files /tmp/.cache /tmp/selenium && \
+    chmod -R 777 /app/downloaded_files /tmp/.cache /tmp/selenium
 
-RUN mkdir -p /app/downloaded_files && chmod -R 777 /app/downloaded_files
-RUN mkdir -p /tmp/.cache /tmp/selenium && chmod -R 777 /tmp/.cache /tmp/selenium
 COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
 
-COPY . /app
+RUN python - <<'PY'\n\
+import sys, pathlib\n\
+p = pathlib.Path(sys.executable).parent.parent / 'lib' / f'python{sys.version_info.major}.{sys.version_info.minor}' / 'site-packages' / 'seleniumbase' / 'drivers'\n\
+print('Fixing perms under:', p)\n\
+p.mkdir(parents=True, exist_ok=True)\n\
+import os\n\
+os.system(f'chmod -R a+rwX {p}')\n\
+PY
+
+RUN chmod a+rx /usr/bin/chromium /usr/bin/chromedriver
+
 WORKDIR /app
-CMD ["gunicorn", "-w", "1", "--threads","1","-k","uvicorn.workers.UvicornWorker","--bind","0.0.0.0:8080","app.main:app"]
+COPY . /app
+
+CMD ["gunicorn","-w","1","--threads","1","-k","uvicorn.workers.UvicornWorker","--bind","0.0.0.0:8080","app.main:app"]