fix(cistech-tunnel): add sudo and system dbus for openconnect-sso

apps/cistech-tunnel/build/Dockerfile

@@ -88,6 +88,8 @@ RUN apt-get update && apt-get install -y \
     libxcb-randr0 \
     libxcb-glx0 \
     libxcb-shape0 \
+    # sudo needed for openconnect-sso
+    sudo \
     && apt-get clean \
     && rm -rf /var/lib/apt/lists/*
 

apps/cistech-tunnel/shared/entrypoint.sh

@@ -10,7 +10,7 @@ export GALLIUM_DRIVER=llvmpipe
 export MESA_GL_VERSION_OVERRIDE=3.3
 
 # Qt/Chromium flags for running as root
-export QTWEBENGINE_CHROMIUM_FLAGS="--no-sandbox --disable-gpu --use-gl=swiftshader"
+export QTWEBENGINE_CHROMIUM_FLAGS="--no-sandbox --disable-gpu"
 export QTWEBENGINE_DISABLE_SANDBOX=1
 
 # Setup TigerVNC password file from env var (passed by runtipi)

apps/cistech-tunnel/shared/xstartup

@@ -25,9 +25,13 @@ export GDK_BACKEND=x11
 export WEBKIT_DISABLE_DMABUF_RENDERER=1
 
 # Qt/Chromium flags for running as root (no sandbox)
-export QTWEBENGINE_CHROMIUM_FLAGS="--no-sandbox --disable-gpu --use-gl=swiftshader"
+export QTWEBENGINE_CHROMIUM_FLAGS="--no-sandbox --disable-gpu"
 export QTWEBENGINE_DISABLE_SANDBOX=1
 
+# Start system dbus daemon (needed for Chromium)
+mkdir -p /run/dbus
+dbus-daemon --system --fork 2>/dev/null || true
+
 # Start dbus session
 [ -x /usr/bin/dbus-launch ] && eval $(dbus-launch --sh-syntax --exit-with-session)