fix: Use no sandbox mode for chromium

* Running Grafana under unprivileged user have issues running with sandbox mode

* Ref: chrome-php/chrome#106

Signed-off-by: Mahendra Paipuri <mahendra.paipuri@gmail.com>

.config/Dockerfile

@@ -3,6 +3,9 @@ ARG grafana_image=grafana-enterprise
 
 FROM grafana/${grafana_image}:${grafana_version}
 
+# Install chromium
+RUN apk add chromium
+
 # Make it as simple as possible to access the grafana instance for development purposes
 # Do NOT enable these settings in a public facing / production grafana instance
 ENV GF_AUTH_ANONYMOUS_ORG_ROLE "Admin"
@@ -11,9 +14,7 @@ ENV GF_AUTH_BASIC_ENABLED "false"
 # Set development mode so plugins can be loaded without the need to sign
 ENV GF_DEFAULT_APP_MODE "development"
 
-# Inject livereload script into grafana index.html
 USER root
-RUN sed -i 's/<\/body><\/html>/<script src=\"http:\/\/localhost:35729\/livereload.js\"><\/script><\/body><\/html>/g' /usr/share/grafana/public/views/index.html
 
-# Install chromium
-RUN apk add chromium
+# Inject livereload script into grafana index.html
+RUN sed -i 's/<\/body><\/html>/<script src=\"http:\/\/localhost:35729\/livereload.js\"><\/script><\/body><\/html>/g' /usr/share/grafana/public/views/index.html

Dockerfile

@@ -3,7 +3,7 @@ ARG grafana_image=grafana-enterprise
 
 FROM grafana/${grafana_image}:${grafana_version}
 
-RUN apk add -U texlive
+RUN apk add -U chromium
 
 # Make it as simple as possible to access the grafana instance for development purposes
 # Do NOT enable these settings in a public facing / production grafana instance

pkg/plugin/report.go

@@ -308,8 +308,15 @@ func (r *report) renderPDF() ([]byte, error) {
 		return nil, err
 	}
 
+	// Chrome executor options
+	opts := append(chromedp.DefaultExecAllocatorOptions[:],
+		chromedp.NoSandbox,
+	)
+
 	// create context
-	ctx, cancel := chromedp.NewContext(context.Background())
+	allocCtx, allocCtxCancel := chromedp.NewExecAllocator(context.Background(), opts...)
+	defer allocCtxCancel()
+	ctx, cancel := chromedp.NewContext(allocCtx)
 	defer cancel()
 
 	// capture pdf