starred/release-factory
1
0
Fork 0
mirror of https://github.com/okxlin/release-factory.git synced 2026-09-22 00:02:16 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
release-factory/gemini-skill-browser-linuxserver-builder/image
T
History
okxlin e058ba3f73 fix(images): harden runtimes and publish verified artifacts (#85) 
Reject unsafe workstation credentials, fix native ARM64 Java, and remove duplicate extensions, caches and temporary tool layers.

Pin OpenCode's baseline and Gemini's source/runtime inputs; refresh maintained browser and OS packages; fix Nginx and vendored ZIP vulnerabilities. Verify real login, default plugins, browser/CDP persistence and isolated OpenClaw sandbox operations.

Build each platform once and bind release publication to the tested config and manifest digests. Keep service-specific vulnerability gates and refresh DSH APT stages during PR verification.

Validation: all 13 PR verification jobs passed, including native amd64/arm64 workstations and DSH variants, plus both browser variants and OpenClaw on amd64. Publication jobs were skipped for PR verification.
2026-09-13 01:52:07 +08:00
..
etc/s6-overlay/s6-rc.d/svc-gemini-skill-daemon
fix(images): harden runtimes and publish verified artifacts (#85)
2026-09-13 01:52:07 +08:00
usr/bin
fix(images): harden runtimes and publish verified artifacts (#85)
2026-09-13 01:52:07 +08:00
Dockerfile
fix(images): harden runtimes and publish verified artifacts (#85)
2026-09-13 01:52:07 +08:00
Dockerfile.dockerignore
fix(images): harden runtimes and publish verified artifacts (#85)
2026-09-13 01:52:07 +08:00
README.md
fix(images): harden runtimes and publish verified artifacts (#85)
2026-09-13 01:52:07 +08:00

README.md

gemini-skill-browser-linuxserver image

基于 linuxserver/chrome 的运行文件；构建上下文是仓库根目录。

设计

  • 底座：解析 linuxserver/docker-chrome 最新稳定 release 后固定的 docker.io/linuxserver/chrome digest
  • Web 访问端口：3001
  • Web 登录：CUSTOM_USER / PASSWORD
  • 通过覆盖 /usr/bin/wrapped-chrome 注入远程调试参数
  • 通过 s6 新增 svc-gemini-skill-daemon，让 gemini-skill daemon 与桌面基座并行启动

关键环境变量

  • CUSTOM_USER
  • PASSWORD
  • BROWSER_DEBUG_PORT（默认 9222）
  • BROWSER_USER_DATA_DIR（默认 /config/browser-profile）
  • DAEMON_PORT（默认 40225）
  • OUTPUT_DIR（默认 /output）
Reference in New Issue View Git Blame Copy Permalink