entrypoint.sh

#!/bin/bash
set -e

USER_UID=${USER_UID:-1000}
USER_GID=${USER_GID:-1000}

BROWSER_BOX_USER=${BROWSER_BOX_USER:-browser}
BROWSER_BOX_REPO=${BROWSER_BOX_REPO:-hurricane}
OVERRIDE_BROWSERS=${OVERRIDE_BROWSERS:-false}

install_browser_box() {
  echo "Installing browser-box..."
  install -m 0755 /var/cache/browser-box/browser-box /target/
  echo "Installing google-chrome..."
  ln -sf browser-box /target/google-chrome
  echo "Installing google-chrome-stable..."
  ln -sf browser-box /target/google-chrome-stable
  echo "Installing tor-browser..."
  ln -sf browser-box /target/tor-browser
  echo "Installing chromium..."
  ln -sf browser-box /target/chromium
  echo "Installing firefox..."
  ln -sf browser-box /target/firefox
  echo "Installing url luancher..."
  ln -sf browser-box /target/browser-exec
  if [ "${BROWSER_BOX_USER}" != "browser" ] && [ -n "${BROWSER_BOX_USER}" ]; then
    echo "Updating user to ${BROWSER_BOX_USER}..."
    sed -i -e s%"BROWSER_BOX_USER:-browser"%"BROWSER_BOX_USER:-${BROWSER_BOX_USER}"%1 /target/browser-box
  fi
  if [[ -n "${CHROME_USERDATA}" ]]; then
    echo "Updating Chrome user volume..."
    sed -i -e s%"CHROME_USERDATA=.*$"%"CHROME_USERDATA\=${CHROME_USERDATA}"%1 /target/browser-box
  fi
  if [[ -n "${FIREFOX_USERDATA}" ]]; then
    echo "Updating FireFox user volume..."
    sed -i -e s%"FIREFOX_USERDATA=.*$"%"FIREFOX_USERDATA\=${FIREFOX_USERDATA}"%1 /target/browser-box
  fi
  if [[ -n "${CHROMIUM_USERDATA}" ]]; then
    echo "Updating Chromium user volume..."
    sed -i -e s%"CHROMIUM_USERDATA=.*$"%"CHROMIUM_USERDATA\=${CHROMIUM_USERDATA}"%1 /target/browser-box
  fi
  sed -i -e s%"\(BROWSER_BOX_REPO=\).*$"%"\1${BROWSER_BOX_REPO}"%1 /target/browser-box
  [ ${OVERRIDE_BROWSERS} ] && sed -i -e s%"\(OVERRIDE_BROWSERS=\).*$"%"\1true"%1 /target/browser-box

}

uninstall_browser_box() {
  echo "Uninstalling browser-box..."
  rm -rf /target/browser-box
  echo "Uninstalling google-chrome..."
  rm -rf /target/google-chrome
  echo "Uninstalling google-chrome-stable..."
  rm -rf /target/google-chrome-stable
  echo "Uninstalling tor-browser..."
  rm -rf /target/tor-browser
  echo "Uninstalling chromium..."
  rm -rf /target/chromium
  echo "Uninstalling firefox..."
  rm -rf /target/firefox
  echo "Uninstalling url launcher..."
  rm -rf /target/browser-exec
}

create_user() {
  # ensure home directory is owned by browser
  # and that profile files exist
  if [[ -d /home/${BROWSER_BOX_USER} ]]; then
    chown ${USER_UID}:${USER_GID} /home/${BROWSER_BOX_USER}
    # copy user files from /etc/skel
    cp /etc/skel/.bashrc /home/${BROWSER_BOX_USER}
    cp /etc/skel/.bash_logout /home/${BROWSER_BOX_USER}
    cp /etc/skel/.profile /home/${BROWSER_BOX_USER}
    chown ${USER_UID}:${USER_GID} \
      /home/${BROWSER_BOX_USER}/.bashrc \
      /home/${BROWSER_BOX_USER}/.profile \
      /home/${BROWSER_BOX_USER}/.bash_logout
  fi
  # create group with USER_GID
  if ! getent group ${BROWSER_BOX_USER} >/dev/null; then
    groupadd -f -g ${USER_GID} ${BROWSER_BOX_USER} 2> /dev/null
  fi

  # create user with USER_UID
  if ! getent passwd ${BROWSER_BOX_USER} >/dev/null; then
    adduser --disabled-login --uid ${USER_UID} --gid ${USER_GID} \
      --gecos 'Browser Box' ${BROWSER_BOX_USER}
  fi
}

grant_access_to_video_devices() {
  for device in /dev/video*
  do
    if [[ -c $device ]]; then
      VIDEO_GID=$(stat -c %g $device)
      break
    fi
  done

  # create video group if requried
  if [[ -n $VIDEO_GID ]]; then
    getent group $VIDEO_GID || groupadd -f -g $VIDEO_GID dockervideo
    adduser ${BROWSER_BOX_USER} dockervideo
  fi
}

launch_browser() {
  cd /home/${BROWSER_BOX_USER}
  [ "$@" == "chromium" ] && extra_opts+=" --user-data-dir=/home/${BROWSER_BOX_USER}/.chromium"
  [ "$@" == "google-chrome" ] && extra_opts+=" --force-device-scale-factor=1"
  [ "$@" == "google-chrome-stable" ] && extra_opts+=" --force-device-scale-factor=1"
  # Pulse edit for version 7.0 and up
  sed -i -e s%"\(load-module module-native-protocol-unix\).*$"%"\1 srbchannel=no"% /etc/pulse/default.pa
  echo "autospawn = no" >> /etc/pulse/client.conf
  echo "daemon-binary = /bin/true" >> /etc/pulse/client.conf
  echo "cookie-file = /home/${BROWSER_BOX_USER}/.pulse-cookie" >> /etc/pulse/client.conf
  exec sudo -u ${BROWSER_BOX_USER} -H PULSE_SERVER=unix:/run/pulse/native $@ ${extra_opts}
}

case "$1" in
  install)
    install_browser_box
    ;;
  uninstall)
    uninstall_browser_box
    ;;
  google-chrome|google-chrome-stable|tor-browser|chromium|firefox)
    create_user
    grant_access_to_video_devices
    launch_browser $@
    ;;
  *)
    exec $@
    ;;
esac