dockerfile and docker build arg for vnc password

Author: maceip

.github/workflows/ci.yml

@@ -111,5 +111,7 @@ jobs:
         push: true
         tags: ${{ steps.meta.outputs.tags }}
         labels: ${{ steps.meta.outputs.labels }}
+        build-args: |
+          VNC_PASSWORD=${{ secrets.VNC_PASSWORD }}
         cache-from: type=gha
         cache-to: type=gha,mode=max

Dockerfile

@@ -0,0 +1,70 @@
+FROM ghcr.io/astral-sh/uv:bookworm-slim AS builder
+
+ARG VNC_PASSWORD=browser-use
+
+ENV UV_COMPILE_BYTECODE=1 \
+    UV_LINK_MODE=copy \
+    UV_PYTHON_INSTALL_DIR=/python \
+    UV_PYTHON_PREFERENCE=only-managed
+
+# Install build dependencies and clean up in the same layer
+RUN apt-get update -y && \
+    apt-get install --no-install-recommends -y clang && \
+    rm -rf /var/lib/apt/lists/*
+
+# Install Python before the project for caching
+RUN uv python install 3.13
+
+WORKDIR /app
+RUN --mount=type=cache,target=/root/.cache/uv \
+    --mount=type=bind,source=uv.lock,target=uv.lock \
+    --mount=type=bind,source=pyproject.toml,target=pyproject.toml \
+    uv sync --frozen --no-install-project --no-dev
+ADD . /app
+RUN --mount=type=cache,target=/root/.cache/uv \
+    uv sync --frozen --no-dev
+
+FROM debian:bookworm-slim AS runtime
+
+# Install required packages including Chromium and clean up in the same layer
+RUN apt-get update && \
+    apt-get install --no-install-recommends -y \
+    xfce4 \
+    dbus-x11 \
+    tigervnc-standalone-server \
+    tigervnc-tools \
+    nodejs \
+    npm \
+    chromium \
+    chromium-driver \
+    fonts-freefont-ttf \
+    fonts-ipafont-gothic \
+    fonts-wqy-zenhei \
+    fonts-thai-tlwg \
+    fonts-kacst \
+    fonts-symbola \
+    fonts-noto-color-emoji && \
+    npm i -g proxy-login-automator && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* && \
+    rm -rf /var/cache/apt/*
+
+# Copy only necessary files from builder
+COPY --from=builder --chown=python:python /python /python
+COPY --from=builder --chown=app:app /app /app
+
+ENV PATH="/app/.venv/bin:$PATH" \
+    DISPLAY=:0 \
+    CHROME_BIN=/usr/bin/chromium \
+    CHROMIUM_FLAGS="--no-sandbox --headless --disable-gpu --disable-software-rasterizer --disable-dev-shm-usage"
+
+# Combine VNC setup commands to reduce layers
+RUN mkdir -p ~/.vnc && \
+    echo ${VNC_PASSWORD} | vncpasswd -f > /root/.vnc/passwd && \
+    chmod 600 /root/.vnc/passwd && \
+    printf '#!/bin/sh\nunset SESSION_MANAGER\nunset DBUS_SESSION_BUS_ADDRESS\nstartxfce4' > /root/.vnc/xstartup && \
+    chmod +x /root/.vnc/xstartup && \
+    printf '#!/bin/bash\nvncserver -depth 24 -geometry 1920x1080 -localhost no -PasswordFile /root/.vnc/passwd :0\nproxy-login-automator\npython /app/main.py' > /app/boot.sh && \
+    chmod +x /app/boot.sh
+
+ENTRYPOINT ["/bin/bash", "/app/boot.sh"]