FROM node:22-bookworm-slim

ARG HYPERFRAMES_VERSION=latest

# Set automatically by `docker build --platform` (BuildKit); selects the

# chrome-headless-shell source below (chrome-for-testing ships linux64 only,

# see https://googlechromelabs.github.io/chrome-for-testing/).

ARG TARGETARCH=amd64

# Pinned Playwright release used to fetch a known-good, arch-native

# chrome-headless-shell on arm64. chrome-for-testing publishes no linux-arm64

# build, so arm64 used to fall back to Debian's *unpinned, rolling* `chromium`

# package — whose bookworm arm64 build SIGTRAPs at startup (exit 133), breaking

# every containerized render (issue #2039). Playwright ships a pinned

# linux-arm64 headless-shell (Google's build, not Debian's). Bump deliberately.

ARG PLAYWRIGHT_VERSION=1.61.1

RUN apt-get update && apt-get install -y --no-install-recommends \

ca-certificates curl unzip ffmpeg chromium \

libgbm1 libnss3 libatk-bridge2.0-0 libdrm2 libxcomposite1 \

libxdamage1 libxrandr2 libcups2 libasound2 libpangocairo-1.0-0 \

libxshmfence1 libgtk-3-0 \

fonts-liberation fonts-noto-color-emoji fonts-noto-cjk fonts-noto-core \

fonts-noto-extra fonts-noto-ui-core fonts-freefont-ttf fonts-dejavu-core \

fontconfig \

&& rm -rf /var/lib/apt/lists/* && apt-get clean && fc-cache -fv

ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true

ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium

ENV CONTAINER=true

# chrome-headless-shell unlocks BeginFrame-based deterministic capture. Install

# it on both arches from a pinned source so a build can never silently pick up a

# broken browser update:

# amd64 -> chrome-for-testing (linux64) via @puppeteer/browsers

# arm64 -> Playwright's pinned linux-arm64 headless-shell (chrome-for-testing

# has no arm64 build; Debian's rolling `chromium` SIGTRAPs — #2039)

# The wrapper script below wires whichever binary landed into

# PRODUCER_HEADLESS_SHELL_PATH, or fails the build loudly if neither did.

RUN if [ "$TARGETARCH" = "amd64" ]; then \

npx --yes @puppeteer/browsers install chrome-headless-shell@stable \

--path /root/.cache/puppeteer; \

else \

npx --yes playwright-core@${PLAYWRIGHT_VERSION} install chromium-headless-shell; \

fi

RUN npm install -g hyperframes@${HYPERFRAMES_VERSION}

# Wrapper script: resolves the chrome-headless-shell path installed above and

# exports it as PRODUCER_HEADLESS_SHELL_PATH so the engine uses BeginFrame

# rendering. @puppeteer/browsers names the binary `chrome-headless-shell`;

# Playwright names it `headless_shell` — match either, in either cache dir.

# If neither is present the browser install step failed: fail the build loudly

# rather than silently downgrading to the (arm64-broken) Debian chromium.

RUN SHELL_PATH=$(find /root/.cache/puppeteer /root/.cache/ms-playwright \

\( -name "chrome-headless-shell" -o -name "headless_shell" \) -type f 2>/dev/null | head -1); \

if [ -n "$SHELL_PATH" ]; then \

printf '#!/bin/sh\nexport PRODUCER_HEADLESS_SHELL_PATH=%s\nexec hyperframes render "$@"\n' "$SHELL_PATH" > /usr/local/bin/hf-render; \

else \

echo "ERROR: chrome-headless-shell binary not found for ${TARGETARCH} — the browser install step above must have failed." >&2; \

exit 1; \

fi \

&& chmod +x /usr/local/bin/hf-render

WORKDIR /project

ENTRYPOINT ["hf-render"]