From b041dd2998110fc61789ae65e2506bd5b79edba5 Mon Sep 17 00:00:00 2001 From: ThePhaseless Date: Thu, 5 Nov 2026 17:00:30 +0100 Subject: [PATCH] fix(docker): run tini as a subreaper Without -s, tini warns and cannot adopt orphaned browser processes when it is not PID 1, as in a pod with shareProcessNamespace. As PID 1 the flag changes nothing. --- Dockerfile | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 64e511b..6712f82 100644 --- a/Dockerfile +++ b/Dockerfile @@ -59,4 +59,6 @@ ENV VERSION=${VERSION} USER 1000 EXPOSE $PORT HEALTHCHECK --interval=15m --timeout=30s --start-period=5s --retries=3 CMD curl "http://127.0.0.1:${PORT}/health" -ENTRYPOINT ["tini", "--", "/app/.venv/bin/python", "main.py"] +# -s: register as a subreaper when tini is not PID 1 (e.g. a pod with a shared +# process namespace), so orphaned browser processes are still reaped. +ENTRYPOINT ["tini", "-s", "--", "/app/.venv/bin/python", "main.py"]