diff --git a/README.md b/README.md index 1d181ce..2c4bab7 100644 --- a/README.md +++ b/README.md @@ -24,6 +24,17 @@ docker run --cap-add=SYS_ADMIN ghcr.io/jihchi/mermaid.ink Go to http://localhost:3000 +If you don't / can't add `--cap-add=SYS_ADMIN` to the command, please refer to [3 ways to securely use Chrome Headless with this image](https://github.com/Zenika/alpine-chrome?tab=readme-ov-file#3-ways-to-securely-use-chrome-headless-with-this-image) to find the most suitable solution for your case. + +### With `seccomp` + +For example, you can use [Jessie Frazelle seccomp profile for Chrome](https://github.com/Zenika/alpine-chrome/blob/master/chrome.json): + +``` +wget https://raw.githubusercontent.com/jfrazelle/dotfiles/master/etc/docker/seccomp/chrome.json +docker run --security-opt seccomp=$(pwd)/chrome.json ghcr.io/jihchi/mermaid.ink +``` + ## Troubleshooting ### I'm getting back `HTTP 431 Request Header Fields Too Large` error