bot-backend
393ecea458
CI build-browser (and the deploy) went red on #907's browser image: PermissionError: [Errno 13] Permission denied: '/usr/local/lib/python3.12/site-packages/camoufox/GeoLite2-City.mmdb' camoufox fetch with geoip=True downloads TWO things: the Firefox build (→ $HOME/.cache, correctly routed to /home/app via ENV HOME, the #899 fix) AND the GeoLite2 mmdb, which it writes INTO the camoufox package dir in site-packages. Since the browser image pip-installs camoufox as root, that dir is root-owned, so running fetch as the app user can't write the mmdb → build fails. Fix: run fetch as root (writes both the mmdb and — via ENV HOME — Firefox into /home/app/.cache), then chown the Firefox cache to app. The mmdb stays root-owned in site-packages but world-readable, which is all the runtime app user needs. Verified by a real local image build (camoufox fetch now completes, image exports). The deploy was gated off by the failed build-browser job (not partially applied), so prod was never broken. Refs #905, #883, #899
44 lines
1.7 KiB
Docker
44 lines
1.7 KiB
Docker
# tradein-browser — camoufox Playwright WS server (изолированный контейнер Firefox).
|
||
# Backend подключается к этому контейнеру через playwright.firefox.connect.
|
||
|
||
FROM python:3.12-slim
|
||
|
||
ENV PYTHONUNBUFFERED=1 \
|
||
PYTHONDONTWRITEBYTECODE=1
|
||
|
||
# Firefox runtime libs + ca-certificates для TLS
|
||
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
|
||
--mount=type=cache,target=/var/lib/apt,sharing=locked \
|
||
apt-get update && apt-get install -y --no-install-recommends \
|
||
libgtk-3-0 \
|
||
libasound2 \
|
||
libdbus-glib-1-2 \
|
||
libx11-xcb1 \
|
||
libxtst6 \
|
||
ca-certificates \
|
||
&& useradd --create-home --uid 1000 app
|
||
|
||
WORKDIR /app
|
||
|
||
# camoufox[geoip] тянет playwright как зависимость
|
||
RUN pip install --no-cache-dir "camoufox[geoip]"
|
||
|
||
COPY server.py ./server.py
|
||
|
||
# camoufox fetch качает (а) Firefox-сборку и (б) GeoLite2 mmdb (geoip=True).
|
||
# Firefox идёт в $HOME/.cache → ENV HOME=/home/app кладёт его в кэш app-юзера,
|
||
# куда рантайм его ищет (фикс #899). НО mmdb пишется в site-packages пакета
|
||
# camoufox (root-owned после pip install) — под app это PermissionError на
|
||
# GeoLite2-City.mmdb. Поэтому fetch выполняем под ROOT (пишет и mmdb, и —
|
||
# благодаря ENV HOME — Firefox в /home/app/.cache), затем chown'им Firefox-кэш
|
||
# на app. mmdb остаётся root-owned в site-packages (world-readable → app читает
|
||
# на рантайме). Verified реальной сборкой образа 2026-05-31.
|
||
ENV HOME=/home/app
|
||
|
||
RUN python -m camoufox fetch && chown -R app:app /home/app/.cache
|
||
|
||
USER app
|
||
|
||
EXPOSE 3000
|
||
|
||
CMD ["python", "server.py"]
|