docker-google-chrome-headless

Running the image

Google Chrome Headless is the Chromium browser started without a graphical interface, used here for tasks such as PDF printing, performance measurement, and automation. The image is launched with a docker run command that names the container, maps the debug port, and optionally passes a site URL to open. By default the browser listens on port 9222 for its debugging endpoint, but this can be changed by setting the CHROME_DEBUG_PORT environment variable to another value. Command line arguments are passed before the URL when extra browser flags are needed.

Security context options

Some environments need extra permissions or a restricted profile to run the container. The README notes you may add SYS_ADMIN capability with the --cap-add flag, or apply Jessie Frazelle's SECCOMP profile for Chrome by downloading the profile and passing it through the security-opt flag. These options help the headless browser run under tighter container security policies without disabling the whole sandbox.

Maintenance and license

The project documentation states the repository is auto updated by a bot whenever Google releases a new Chrome version, so the image tracks upstream releases without manual intervention. A note at the top of the README says the product no longer has a free support team as of 2021 and asks for financial support to keep improvements going. The image source is made available under the MIT license.

Editorial conclusion

The container listens on port 9222 by default and is maintained under the MIT license, with fresh builds published automatically each time Google ships a new Chrome release.