chore: update Dockerfile permissions and enhance README for Docker usage

Author: hashkode

.github/workflows/ci.yml

@@ -50,7 +50,6 @@ jobs:
     permissions:
       contents: read
       packages: write
-      # attestations: write
       id-token: write
 
     steps:

Dockerfile

@@ -52,8 +52,10 @@ RUN apt-get update && \
     rm -rf /var/cache/apt/*
 
 # Copy only necessary files from builder
-COPY --from=builder --chown=python:python /python /python
-COPY --from=builder --chown=app:app /app /app
+COPY --from=builder /python /python
+COPY --from=builder /app /app
+# Set proper permissions
+RUN chmod -R 755 /python /app
 
 ENV PATH="/app/.venv/bin:$PATH" \
     DISPLAY=:0 \

README.md

@@ -154,18 +154,29 @@ To develop and test the package locally:
 
 ## Docker
 
+Using Docker provides a consistent and isolated environment for running the server.
+
 ```bash
-# Run with default VNC password
+# Build the Docker image
 docker build -t browser-use-mcp-server .
+
+# Run the container with the default VNC password ("browser-use")
+# --rm ensures the container is automatically removed when it stops
+# -p 8000:8000 maps the server port
+# -p 5900:5900 maps the VNC port
 docker run --rm -p8000:8000 -p5900:5900 browser-use-mcp-server
 
-# Use custom VNC password
-echo "your-password" > vnc_password.txt
+# Run with a custom VNC password read from a file
+# Create a file (e.g., vnc_password.txt) containing only your desired password
+echo "your-secure-password" > vnc_password.txt
+# Mount the password file as a secret inside the container
 docker run --rm -p8000:8000 -p5900:5900 \
-  -v $(pwd)/vnc_password.txt:/run/secrets/vnc_password \
+  -v $(pwd)/vnc_password.txt:/run/secrets/vnc_password:ro \
   browser-use-mcp-server
 ```
 
+*Note: The `:ro` flag in the volume mount (`-v`) makes the password file read-only inside the container for added security.*
+
 ### VNC Viewer
 
 ```bash
@@ -175,7 +186,7 @@ cd noVNC
 ./utils/novnc_proxy --vnc localhost:5900
 ```
 
-Default password: `browser-use`
+Default password: `browser-use` (unless overridden using the custom password method)
 
 <div align="center">
   <img width="428" alt="VNC Screenshot" src="https://github.com/user-attachments/assets/45bc5bee-418d-4182-94f5-db84b4fc0b3a" />