disable sandbox

Dockerfile

@@ -8,17 +8,12 @@ RUN apt-get update \
     && apt-get update \
     && apt-get install -y python3 build-essential google-chrome-stable fonts-ipafont-gothic fonts-wqy-microhei fonts-wqy-zenhei fonts-thai-tlwg fonts-kacst fonts-freefont-ttf libxss1 \
       --no-install-recommends \
-    && rm -rf /tmp/* /var/tmp/* /var/lib/apt/lists/* \
-    && groupadd -r mathweb && useradd -r -g mathweb -G audio,video mathweb \
-    && mkdir -p /home/mathweb/Downloads /home/mathweb/app \
-    && chown -R mathweb:mathweb /home/mathweb
+    && rm -rf /tmp/* /var/tmp/* /var/lib/apt/lists/*
 
-USER mathweb
-
-WORKDIR /home/mathweb/app
-COPY --chown=mathweb:mathweb ./package*.json ./
+WORKDIR /usr/src/app
+COPY ./package*.json ./
 RUN npm ci
-COPY --chown=mathweb:mathweb . ./
+COPY . ./
 RUN npm run build
 
 CMD ["npm", "run", "start:prod"]

src/app.service.ts

@@ -66,7 +66,14 @@ export class AppService {
     const renderedMarkdownContent = mustache.render(this.template, data, null, {
       escape: (v) => v,
     });
-    const { content } = await mdToPdf({ content: renderedMarkdownContent });
+    const { content } = await mdToPdf(
+      { content: renderedMarkdownContent },
+      {
+        // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+        // @ts-ignore
+        launch_options: { args: ['--no-sandbox', '--disable-setuid-sandbox'] },
+      },
+    );
     return content;
   }
 }