Browse Source

added label "podman-run-x11" for `podman container runlabel`

Fabian Peter Hammerle 3 years ago
parent
commit
2563489b02
2 changed files with 6 additions and 0 deletions
  1. 3 0
      CHANGELOG.md
  2. 3 0
      Dockerfile

+ 3 - 0
CHANGELOG.md

@@ -5,6 +5,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
+### Added
+- label "podman-run-x11" for `podman container runlabel`
+
 ### Fixed
 - added `libgl1` to fix some browser crashes
   and to reduce ubiquitous "Aw, Snap!" errors ("Error code: 6")

+ 3 - 0
Dockerfile

@@ -37,6 +37,9 @@ VOLUME /home/browser
 # https://github.com/WPO-Foundation/wptagent/issues/327#issuecomment-614086842
 CMD ["brave-browser", "--no-sandbox"]
 
+# mounts tmpfs at /tmp implicitly
+LABEL podman-run-x11="podman run --name brave_browser --rm --init -e DISPLAY -v /tmp/.X11-unix:/tmp/.X11-unix -v brave_browser_home:/home/browser --shm-size 1GB --read-only --cap-drop ALL --security-opt no-new-privileges \${IMAGE}"
+
 # https://github.com/opencontainers/image-spec/blob/v1.0.1/annotations.md
 ARG REVISION=
 LABEL org.opencontainers.image.title="brave browser" \