867bdba7bb
The static nginx stub at chrome.viktorbarzin.me wasn't useful for debugging anti-bot interactions. Swap it for a live noVNC HTML5 view of the headed Chromium session: x11vnc taps Xvfb's :99 over localhost TCP (added `-listen tcp -ac` to Xvfb), websockify wraps it as a WS endpoint, and noVNC's vendored web client serves it on :6080. The ingress chain is unchanged — chrome.viktorbarzin.me stays Authentik-gated, dns_type=proxied, port 3000 (the Playwright WS) stays internal-only behind the NetworkPolicy + token. Custom image `registry.viktorbarzin.me/chrome-service-novnc:v4` (ubuntu:24.04 + x11vnc + websockify + novnc apt packages) needs imagePullSecrets, so also added registry-credentials reference to the deployment spec. x11vnc flags: `-noshm -noxdamage -nopw -shared -forever`. SHM is disabled because each container has its own /dev/shm so the X server can't grant access; XDAMAGE isn't compiled into the noble Xvfb. The sidecar entrypoint waits up to 30s for both Xvfb (:6099) and x11vnc (:5900) to bind before exec'ing websockify. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
39 lines
1.2 KiB
Bash
39 lines
1.2 KiB
Bash
#!/usr/bin/env bash
|
|
# Connect to the chrome-service container's Xvfb (shared pod network, TCP)
|
|
# and serve the noVNC HTML5 client + websockify bridge on :6080.
|
|
set -e
|
|
|
|
for i in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do
|
|
if echo > /dev/tcp/127.0.0.1/6099 2>/dev/null; then
|
|
echo "Xvfb TCP up after attempt $i"
|
|
break
|
|
fi
|
|
echo "waiting for Xvfb TCP 6099 attempt=$i"
|
|
sleep 2
|
|
done
|
|
|
|
# websockify runs as PID 1; x11vnc is a child so its logs land on container stdout
|
|
# `-noshm` skips MIT-SHM probes that fail across container boundaries (each
|
|
# container has its own /dev/shm); `-noxdamage` skips XDAMAGE which Xvfb
|
|
# doesn't expose; `-quiet` keeps the polling chatter out of pod logs.
|
|
echo "starting x11vnc -> :5900"
|
|
x11vnc -display localhost:99 -nopw -listen 0.0.0.0 -rfbport 5900 \
|
|
-forever -shared -noshm -noxdamage -quiet 2>&1 &
|
|
X11VNC_PID=$!
|
|
|
|
for i in 1 2 3 4 5 6 7 8 9 10; do
|
|
if echo > /dev/tcp/127.0.0.1/5900 2>/dev/null; then
|
|
echo "x11vnc bound 5900 after attempt $i"
|
|
break
|
|
fi
|
|
echo "waiting for x11vnc :5900 attempt=$i"
|
|
sleep 2
|
|
done
|
|
|
|
if ! echo > /dev/tcp/127.0.0.1/5900 2>/dev/null; then
|
|
echo "ERROR: x11vnc did not bind 5900"
|
|
exit 1
|
|
fi
|
|
|
|
echo "starting websockify -> :6080"
|
|
exec websockify --web=/usr/share/novnc 6080 localhost:5900
|