starred/karakeep

Fork 0

mirror of https://github.com/karakeep-app/karakeep.git synced 2026-04-26 00:16:03 +03:00

[GH-ISSUE #1241] Update docker-compose #805

New issue

Open

opened 2026-03-02 11:52:53 +03:00 by kerem · 4 comments

kerem commented

2026-03-02 11:52:53 +03:00

Owner

Originally created by @MemQu on GitHub (Apr 12, 2025).
Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/1241

Describe the feature you'd like

version: "3.8"
services:
  web:
    image: ghcr.io/karakeep-app/karakeep:${KARAKEEP_VERSION:-release}
    restart: unless-stopped
    container_name: Hoarder
    volumes:
      # By default, the data is stored in a docker volume called "data".
      # If you want to mount a custom directory, change the volume mapping to:
      # - /path/to/your/directory:/data
      - ./data:/data
    ports:
      - 3000:3000
    env_file:
      - .env
    environment:
      MEILI_ADDR: http://meilisearch:7700
      BROWSER_WEB_URL: http://chrome:9222
      # OPENAI_API_KEY: ...

      # You almost never want to change the value of the DATA_DIR variable.
      # If you want to mount a custom directory, change the volume mapping above instead.
      DATA_DIR: /data # DON'T CHANGE THIS
  chrome:
    image: gcr.io/zenika-hub/alpine-chrome:124
    restart: unless-stopped
    container_name: hoarder_1
    security_opt:
      - seccomp:./chrome.json
    command:
      - --disable-gpu
      - --disable-dev-shm-usage
      - --remote-debugging-address=0.0.0.0
      - --remote-debugging-port=9222
      - --hide-scrollbars
  meilisearch:
    image: getmeili/meilisearch:v1.11.1
    restart: unless-stopped
    container_name: hoarder_2
    env_file:
      - .env
    environment:
      MEILI_NO_ANALYTICS: "true"
    volumes:
      - ./meilisearch:/meili_data

(Enable sandbox and apply security policies)
Upgrade chromium to 124, use security_opt as recommended in Alpine Chromium repo

Use chrome.json from here:

chrome.json

Describe the benefits this would bring to existing Hoarder users

Sandboxing

Can the goal of this request already be achieved via other means?

Idk

Have you searched for an existing open/closed issue?

I have searched for existing issues and none cover my fundamental request

Additional context

No response

Originally created by @MemQu on GitHub (Apr 12, 2025). Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/1241 ### Describe the feature you'd like ``` version: "3.8" services: web: image: ghcr.io/karakeep-app/karakeep:${KARAKEEP_VERSION:-release} restart: unless-stopped container_name: Hoarder volumes: # By default, the data is stored in a docker volume called "data". # If you want to mount a custom directory, change the volume mapping to: # - /path/to/your/directory:/data - ./data:/data ports: - 3000:3000 env_file: - .env environment: MEILI_ADDR: http://meilisearch:7700 BROWSER_WEB_URL: http://chrome:9222 # OPENAI_API_KEY: ... # You almost never want to change the value of the DATA_DIR variable. # If you want to mount a custom directory, change the volume mapping above instead. DATA_DIR: /data # DON'T CHANGE THIS chrome: image: gcr.io/zenika-hub/alpine-chrome:124 restart: unless-stopped container_name: hoarder_1 security_opt: - seccomp:./chrome.json command: - --disable-gpu - --disable-dev-shm-usage - --remote-debugging-address=0.0.0.0 - --remote-debugging-port=9222 - --hide-scrollbars meilisearch: image: getmeili/meilisearch:v1.11.1 restart: unless-stopped container_name: hoarder_2 env_file: - .env environment: MEILI_NO_ANALYTICS: "true" volumes: - ./meilisearch:/meili_data ``` (Enable sandbox and apply security policies) Upgrade chromium to 124, use security_opt as recommended in [Alpine Chromium repo](https://github.com/jlandure/alpine-chrome) Use chrome.json from here: [chrome.json](https://github.com/Zenika/alpine-chrome/blob/master/chrome.json) ### Describe the benefits this would bring to existing Hoarder users Sandboxing ### Can the goal of this request already be achieved via other means? Idk ### Have you searched for an existing open/closed issue? - [x] I have searched for existing issues and none cover my fundamental request ### Additional context _No response_

kerem added the

feature request

status/untriaged

labels

2026-03-02 11:52:53 +03:00

kerem commented

2026-03-02 11:52:54 +03:00

Author

Owner

@Zoobdude commented on GitHub (Apr 21, 2025):

The Alpine Chromium repo seems to be a bit abandoned - the GitHub actions build has been failing for the last 5 months https://github.com/jlandure/alpine-chrome/actions and it's very unclear where this 124 image has come from, as it doesn't seem to have been the GH action. So while it is far from ideal to use the current out of date 123 build. I think we need to ensure the source of this build + that regualr builds are still being made.

@Zoobdude commented on GitHub (Apr 21, 2025): The Alpine Chromium repo seems to be a bit abandoned - the GitHub actions build has been failing for the last 5 months https://github.com/jlandure/alpine-chrome/actions and it's [very unclear where this 124 image has come from](https://hub.docker.com/layers/zenika/alpine-chrome/124/images/sha256-df5ef9cc11eccf4e14c530a66f48b7307c6935b1daa98c86e79d27c3a68d74ab), as it doesn't seem to have been the GH action. So while it is far from ideal to use the current out of date 123 build. I think we need to ensure the source of this build + that regualr builds are still being made.

kerem commented

2026-03-02 11:52:54 +03:00

Author

Owner

@stefnats commented on GitHub (Apr 26, 2025):

If I may contribute another aspect: that chrome image is failing to start on the Oracle Cloud Always Free Tier ARM Servers and I think it's related to the cpu architecture (I guess arm64).

So yes, a better image would be helpful.

@stefnats commented on GitHub (Apr 26, 2025): If I may contribute another aspect: that chrome image is failing to start on the Oracle Cloud Always Free Tier ARM Servers and I think it's related to the cpu architecture (I guess arm64). So yes, a better image would be helpful.

kerem commented

2026-03-02 11:52:54 +03:00

Author

Owner

@Zoobdude commented on GitHub (Apr 30, 2025):

I'm going to fork the repository and start making builds myself. I'll add the arm64 arch to the build command while I'm at it.

@Zoobdude commented on GitHub (Apr 30, 2025): I'm going to fork the repository and start making builds myself. I'll add the arm64 arch to the build command while I'm at it.

kerem commented

2026-03-02 11:52:54 +03:00

Author

Owner

@gilbrotheraway commented on GitHub (May 10, 2025):

I'm going to fork the repository and start making builds myself. I'll add the arm64 arch to the build command while I'm at it.

can't we use this one instead?
https://github.com/dgtlmoon/sockpuppetbrowser
runs fine on arm64

@gilbrotheraway commented on GitHub (May 10, 2025): > I'm going to fork the repository and start making builds myself. I'll add the arm64 arch to the build command while I'm at it. can't we use this one instead? https://github.com/dgtlmoon/sockpuppetbrowser runs fine on arm64

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/karakeep#805

No description provided.

Rows
Columns