From 08fc47c5a12a9b93b424150754d80b0f023538c9 Mon Sep 17 00:00:00 2001
From: Philip Lehmann <philiplehmann@gmail.com>
Date: Sun, 1 Sep 2024 20:01:32 +0200
Subject: [PATCH] only use --no-sandbox for root in puppeteer

---
 libs/binary/puppeteer/src/lib/render-to.ts | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/libs/binary/puppeteer/src/lib/render-to.ts b/libs/binary/puppeteer/src/lib/render-to.ts
index 60aaf55e..61619e2d 100644
--- a/libs/binary/puppeteer/src/lib/render-to.ts
+++ b/libs/binary/puppeteer/src/lib/render-to.ts
@@ -3,7 +3,7 @@ import type { TypeOf } from 'zod';
 import type { bodySchema } from './body-schema';
 import { ScreenshotType } from './screenshot-type';
 import { join } from 'node:path';
-import { cwd } from 'node:process';
+import { cwd, getuid } from 'node:process';
 
 export class BrowserToPdfRenderer {
   private launchedBrowser?: Browser;
@@ -12,11 +12,17 @@ export class BrowserToPdfRenderer {
       if (process.env.PUPPETEER_EXECUTABLE_PATH === undefined) {
         throw new Error('PUPPETEER_EXECUTABLE_PATH is required');
       }
+      const uid = typeof getuid === 'function' ? getuid() : 0;
+      const isNonRoot = uid > 0;
       this.launchedBrowser = await puppeteer.launch({
         executablePath: process.env.PUPPETEER_EXECUTABLE_PATH,
         headless: true,
         userDataDir: join(cwd(), 'chromium-data'),
-        args: ['--no-sandbox', '--disable-gpu', '--enable-font-antialiasing', '--font-render-hinting=none'],
+        args: (isNonRoot ? [] : ['--no-sandbox']).concat([
+          '--disable-gpu',
+          '--enable-font-antialiasing',
+          '--font-render-hinting=none',
+        ]),
       });
       this.launchedBrowser.process()?.stdout?.pipe(process.stdout);
       this.launchedBrowser.process()?.stderr?.pipe(process.stderr);