feat(docker): browser desktop image (Selkies Wayland + headed camofox) and optional TLS proxy

Selkies baseimage (debiantrixie, digest-pinned) with camofox 1.17.0 copied from camofox-browser:1.17.0, run headed under labwc so the desktop shows the same Firefox the agent drives. s6 service waits for wayland-0 and depends on svc-de and svc-dbus so shutdown persists login state. Selkies control/view passwords derive from CAMOFOX_ACCESS_KEY. Compose defaults to the new image; CAMOFOX_IMAGE=camofox-browser:1.17.0 switches back. Optional caddy (profile tls). Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-09-29 02:30:55 +08:00
1 parent 3f0327ad97
commit 880cec4d23
@@ -0,0 +1,64 @@
+# 浏览器桌面镜像(原站视图桌面模式,docs/design/webtop-remote-browser.md、docs/runbook/browser.md §8):
+# linuxserver baseimage-selkies(Webtop 4.0 的底座:pixelflux + labwc Wayland 桌面 + Selkies Web 客户端)
+# + camofox-browser 1.17.0 以有头模式跑在同一个 Wayland 会话里 → 桌面上看到的就是 Agent 驱动的那个 Firefox。
+#
+# camofox 部分不重新下载:直接从旧镜像 camofox-browser:1.17.0(docker/camofox/Dockerfile 构建)复制
+# node、/app 与 Camoufox 浏览器包,两个镜像的 camofox 完全一致,可随时用 CAMOFOX_IMAGE 切回旧镜像。
+# 手工构建:
+#   docker build -t camofox-browser:1.17.0 --build-context upstream=… docker/camofox     # 先有旧镜像
+#   docker build -t umt-browser-desktop:1.17.0 docker/browser-desktop
+ARG CAMOFOX_BASE=camofox-browser:1.17.0
+# baseimage-selkies debiantrixie(Selkies 2.x、labwc 0.8.3,已含 fonts-noto-cjk);按 digest 锁定,升级需重新核验
+ARG SELKIES_BASE=ghcr.io/linuxserver/baseimage-selkies:debiantrixie@sha256:f3ca0b10e923a603941a996ea1c3356b9527cc53163259f4e836f61fd4523e12
+
+FROM ${CAMOFOX_BASE} AS camofox
+
+FROM ${SELKIES_BASE}
+
+ARG APT_MIRROR=
+# 1 = 装容器内输入法 fcitx5(拼音 + mozc,缺省装;是否启动由运行时 UMT_DESKTOP_IME=fcitx5 决定)
+ARG WITH_FCITX5=1
+
+RUN if [ -n "$APT_MIRROR" ]; then sed -i "[email protected]@${APT_MIRROR}@g" /etc/apt/sources.list.d/debian.sources; fi \
+  && apt-get update \
+  && apt-get install -y --no-install-recommends \
+    libdbus-glib-1-2 libxt6t64 libasound2t64 libx11-xcb1 libxcomposite1 libxcursor1 libxdamage1 libxfixes3 \
+    libxi6 libxrandr2 libxrender1 libxss1 libxtst6 libegl1 libgl1-mesa-dri libgbm1 \
+    fonts-noto-cjk fonts-noto-cjk-extra fonts-noto-color-emoji fontconfig \
+  && if [ "$WITH_FCITX5" = "1" ]; then \
+       apt-get install -y --no-install-recommends \
+         fcitx5 fcitx5-chinese-addons fcitx5-mozc fcitx5-frontend-gtk3 fcitx5-config-qt- ; \
+     fi \
+  && apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/*
+
+COPY --from=camofox /usr/local/bin/node /usr/local/bin/node
+COPY --from=camofox /app /opt/camofox
+COPY --from=camofox /root/.cache/camoufox /opt/camoufox
+COPY root/ /
+
+LABEL org.opencontainers.image.title="umt-browser-desktop" \
+      org.opencontainers.image.description="camofox-browser 1.17.0 (headed, Wayland) on linuxserver baseimage-selkies" \
+      org.opencontainers.image.version="1.17.0"
+
+ENV CAMOUFOX_INSTALL_DIR=/opt/camoufox \
+    NODE_ENV=production \
+    CAMOFOX_PORT=9377 \
+    CAMOFOX_INTERACTIVE=desktop \
+    MOZ_ENABLE_WAYLAND=1 \
+    PIXELFLUX_WAYLAND=true \
+    START_DOCKER=false \
+    NO_GAMEPAD=true \
+    NO_WEBCAM=true \
+    CUSTOM_USER=umt \
+    TITLE="原站视图" \
+    NO_DECOR=true \
+    HARDEN_DESKTOP=true \
+    HARDEN_OPENBOX=true \
+    # HARDEN_OPENBOX 缺省会开 RESTART_APP(看门狗每秒重跑 autostart);浏览器由 svc-camofox 管,不需要
+    RESTART_APP=false \
+    SELKIES_ENABLE_BASIC_AUTH=true \
+    # s6 停服务的宽限:camofox 关机要落盘登录状态(缺省 3 秒不够)
+    S6_SERVICES_GRACETIME=25000 \
+    S6_KILL_GRACETIME=5000
+
+EXPOSE 3000 9377