Render环境部署Docker化应用安装xvfb遇权限错误求助

我在Render上部署使用puppeteer-real-browser库的Docker化Node.js应用时遭遇构建失败。本地Ubuntu环境（Chromium版本130.0.6723.58）安装xvfb后运行正常，但部署到Render时出现权限相关错误。

当前Dockerfile #

FROM ghcr.io/puppeteer/puppeteer:19.7.2
ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true \
    PUPPETEER_EXECUTABLE_PATH=/usr/bin/google-chrome-stable
RUN apt-get update && apt-get install -y xvfb
WORKDIR /usr/src/app
COPY package*.json ./
RUN npm ci
COPY . .
CMD ["xvfb-run", "--server-args=-screen 0 1024x768x24", "node", "index.js"]

Render构建错误日志 #

#6 [2/6] RUN apt-get update && apt-get install -y xvfb
#6 0.050 Reading package lists...
#6 0.061 E: List directory /var/lib/apt/lists/partial is missing. - Acquire (13: Permission denied)
#6 0.061 W: Target Packages (main/binary-amd64/Packages) is configured multiple times in /etc/apt/sources.list.d/google-chrome.list:3 and /etc/apt/sources.list.d/google.list:1
#6 0.061 W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list.d/google-chrome.list:3 and /etc/apt/sources.list.d/google.list:1
#6 ERROR: process "/bin/sh -c apt-get update && apt-get install -y xvfb" did not complete successfully: exit code: 100

 > [2/6] RUN apt-get update && apt-get install -y xvfb:
0.061 E: List directory /var/lib/apt/lists/partial is missing. - Acquire (13: Permission denied)
0.061 W: Target Packages (main/binary-amd64/Packages) is configured multiple times in /etc/apt/sources.list.d/google-chrome.list:3 and /etc/apt/sources.list.d/google.list:1
0.061 W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list.d/google-chrome.list:3 and /etc/apt/sources.list.d/google.list:1

Dockerfile:9

   7 |     
   8 |     # Install xvfb
   9 | >>> RUN apt-get update && apt-get install -y xvfb
  10 |     
  11 |     # Set working directory
error: failed to solve: process "/bin/sh -c apt-get update && apt-get install -y xvfb" did not complete successfully: exit code: 100
error: exit status 1

错误原因 #

1. 权限不足：ghcr.io/puppeteer/puppeteer镜像默认以puppeteer普通用户运行，该用户没有权限执行apt-get update和安装软件的操作，导致无法创建/var/lib/apt/lists/partial目录。
2. 软件源重复：镜像中存在重复的Google Chrome软件源配置，这是警告级问题，但会伴随权限错误一同出现。

解决方案 #

修改Dockerfile，在执行apt-get操作前切换到root用户，完成安装后再切回puppeteer用户，同时清理重复的软件源配置：

FROM ghcr.io/puppeteer/puppeteer:19.7.2
ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true \
    PUPPETEER_EXECUTABLE_PATH=/usr/bin/google-chrome-stable

# 切换到root用户执行系统操作
USER root

# 删除重复的软件源配置
RUN rm /etc/apt/sources.list.d/google.list

# 更新源并安装xvfb，同时清理缓存减小镜像体积
RUN apt-get update && apt-get install -y xvfb \
    && rm -rf /var/lib/apt/lists/*

# 切回puppeteer用户
USER puppeteer

WORKDIR /usr/src/app
COPY package*.json ./
RUN npm ci
COPY . .
CMD ["xvfb-run", "--server-args=-screen 0 1024x768x24", "node", "index.js"]

额外优化建议 #

• 在getDownloadLink函数中，puppeteer-real-browser的headless: false设置在Docker环境下可能无法正常运行，建议改为headless: true，配合xvfb提供虚拟显示环境。
• 确保Render的环境变量BASE_URL和PORT已正确配置。

内容的提问来源于stack exchange，提问作者Kuldeep