安全地在docker跑puppeteer

使用到的镜像：

Zenika/alpine-chrome

为了不使用--no-sandbox参数：

使用chrome.js(该文件需要存在于本机而非镜像内)
✅ The best: With seccomp
Thanks to ever-awesome Jessie Frazelle seccomp profile for Chrome. This is The most secure way to run this Headless Chrome docker image.
chrome.json
Also available here wget https://raw.githubusercontent.com/jfrazelle/dotfiles/master/etc/docker/seccomp/chrome.json

Launch the container using:
docker container run -it --rm --security-opt seccomp=$(pwd)/chrome.json zenika/alpine-chrome

seccomp=$(pwd)/chrome.json 意味着使用在当前终端目录下的chrome.js