Dockerfile

FROM node:14-slim

ENV GO_URL https://golang.org/dl/go1.14.2.linux-amd64.tar.gz

# fonts
RUN echo "deb http://httpredir.debian.org/debian buster main contrib non-free" > /etc/apt/sources.list \
    && echo "deb http://httpredir.debian.org/debian buster-updates main contrib non-free" >> /etc/apt/sources.list \
    && echo "deb http://security.debian.org/ buster/updates main contrib non-free" >> /etc/apt/sources.list \
    && echo "ttf-mscorefonts-installer msttcorefonts/accepted-mscorefonts-eula select true" | debconf-set-selections \
    && apt-get update \
    && apt-get install -y \
        fonts-arphic-ukai \
        fonts-arphic-uming \
        fonts-ipafont-mincho \
        fonts-thai-tlwg \
        fonts-kacst \
        fonts-ipafont-gothic \
        fonts-unfonts-core \
        ttf-wqy-zenhei \
        ttf-mscorefonts-installer \
        fonts-freefont-ttf \
    && apt-get clean \
    && apt-get autoremove -y \
    && rm -rf /var/lib/apt/lists/*

## TODO: randomize font installs and add from google https://gist.github.com/keeferrourke/d29bf364bd292c78cf774a5c37a791db

# Install Go for Mitm sockets
RUN set -eux; \
	wget -O go.tgz "${GO_URL}" -q --progress=bar; \
	tar -C /usr/local -xzf go.tgz; \
	rm go.tgz; \
	export PATH="/usr/local/go/bin:$PATH"; \
	go version

ENV GOPATH /go
ENV PATH $GOPATH/bin:/usr/local/go/bin:$PATH

RUN mkdir -p "$GOPATH/src" "$GOPATH/bin" && chmod -R 777 "$GOPATH"

WORKDIR /app/secret-agent

# NOTE: You must run yarn build:docker from root for this to work
COPY ./build-dist /app/secret-agent/

RUN cat /etc/*-release

# Add user so we don't need --no-sandbox.
# same layer as yarn install to keep re-chowned files from using up several hundred MBs more space

# NOTE: this installs the monorepo, but you could also install secret-agent directly + and desired browsers
# we will automatically install dependencies
RUN cd /app/secret-agent && yarn \
    && $(npx install-browser-deps) \
    && groupadd -r sagent && useradd -r -g sagent -G audio,video sagent \
    && mkdir -p /home/sagent/Downloads \
    && mkdir -p /home/sagent/.cache \
    && chown -R sagent:sagent /home/sagent \
    && chown -R sagent:sagent /app/secret-agent \
    && mv ~/.cache/secret-agent /home/sagent/.cache/ \
    && chmod 777 /tmp \
    && chmod -R 777 /home/sagent/.cache/secret-agent

# Add below to run as unprivileged user.
USER sagent

CMD node core/start;
# To run this docker, please see /tools/docker/docker-run.sh