fix(docker): run tini as a subreaper

Without -s, tini warns and cannot adopt orphaned browser processes when it is
not PID 1, as in a pod with shareProcessNamespace. As PID 1 the flag changes
nothing.
This commit is contained in:
ThePhaseless committed 2026-11-05 17:00:30 +01:00
1 parent 93ffe3ec0f
commit b041dd2998
1 file changed
+3 -1
+3 -1
View File
@@ -59,4 +59,6 @@ ENV VERSION=${VERSION}
USER 1000 USER 1000
EXPOSE $PORT EXPOSE $PORT
HEALTHCHECK --interval=15m --timeout=30s --start-period=5s --retries=3 CMD curl "http://127.0.0.1:${PORT}/health" HEALTHCHECK --interval=15m --timeout=30s --start-period=5s --retries=3 CMD curl "http://127.0.0.1:${PORT}/health"
ENTRYPOINT ["tini", "--", "/app/.venv/bin/python", "main.py"] # -s: register as a subreaper when tini is not PID 1 (e.g. a pod with a shared
# process namespace), so orphaned browser processes are still reaped.
ENTRYPOINT ["tini", "-s", "--", "/app/.venv/bin/python", "main.py"]