zcbot/deploy/sandbox
caoqianming 6c3122eb4b feat(sandbox): chromium 秒崩第二根因 bisect 探针(bump 0.58.4)
pids-limit 1024 部署后复测(task 9dcae061,green 实例全新容器):mmdc 仍
首调秒崩 "Failed to launch the browser process: Code: null" —— 排除 pids
打满,第二根因在 hardening flag × chromium 150(trixie)交互。

新 deploy/sandbox/probe_chromium_bisect.sh:线上 docker run 全款 hardening
逐 flag 开关(no-new-privileges / read-only / cap-drop / mem·cpu /
seccomp=unconfined),每 case 跑 mmdc + 裸 chromium 两条,--user zcbot +
HOME=/tmp 忠实复现 exec 路径,尾部带判读表。RUN.md 故障兜底条目同步。

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-11 09:35:10 +08:00
..
Dockerfile fix(sandbox): npm 步骤加重试,抗境内 mirror 断流(bump 0.52.3) 2026-07-08 10:25:37 +08:00
init.sh init.sh: apply_resolv_conf 失败 robust,不让容器整体退出 2026-05-27 12:15:36 +08:00
probe_chromium_bisect.sh feat(sandbox): chromium 秒崩第二根因 bisect 探针(bump 0.58.4) 2026-07-11 09:35:10 +08:00
probe_chromium_pdf.sh feat(rendering): 平台渲染层 rendering/ 统一三 skill docx + chromium md→pdf + bump 0.21.0 2026-06-23 13:07:19 +08:00
probe_mermaid.sh fix(sandbox): docker run 加 --shm-size 修 mmdc 渲 mermaid 挂超时 + bump 0.12.5 2026-06-14 10:40:45 +08:00