refactor(devcontainer): drop dep on playwright

We don't use it after all and using it just to get
chromium headless was an overkill.

Author: solnic

.devcontainer/Dockerfile

@@ -52,6 +52,6 @@ USER sentry
 # directory content when a volume is first attached).
 RUN mkdir -p /home/sentry/bundle
 
-# mise and the toolchain (Java, Ruby, Node, Chromium) are installed by the local
-# `./features/tools` dev container feature, which runs after this Dockerfile —
-# see devcontainer.json.
+# Chromium, ChromeDriver, mise, and the toolchain (Java, Ruby, Node) are
+# installed by the local `./features/tools` dev container feature, which runs
+# after this Dockerfile — see devcontainer.json.

.devcontainer/features/tools/devcontainer-feature.json

@@ -2,12 +2,18 @@
   "name": "sentry-ruby toolchain",
   "id": "tools",
   "version": "1.0.0",
-  "description": "Installs mise and pre-installs the sentry-ruby toolchain (Java, Ruby, Node) via mise plus headless Chromium via Playwright, baked into the image so the container starts without downloading anything.",
+  "description": "Installs Chromium, ChromeDriver, mise, and the sentry-ruby toolchain (Java, Ruby, Node).",
+  "installsAfter": [
+    "ghcr.io/devcontainers/features/git",
+    "ghcr.io/devcontainers/features/github-cli",
+    "ghcr.io/nils-geistmann/devcontainers-features/zsh",
+    "ghcr.io/rocker-org/devcontainer-features/apt-packages"
+  ],
   "options": {
     "rubyVersion": {
       "type": "string",
       "default": "4.0",
-      "description": "Ruby version to pre-install and set as the global default (latest 4.0.x by default). Switching versions requires an image rebuild."
+      "description": "Ruby version to pre-install (latest 4.0.x by default). Switching versions requires an image rebuild."
     }
   }
 }

.devcontainer/features/tools/install.sh

@@ -1,15 +1,26 @@
 #!/usr/bin/env bash
 #
-# Installs mise system-wide and pre-installs the sentry-ruby toolchain (Java,
-# Ruby, Node) plus a headless Chromium, all baked into the image so the
-# container starts without downloading anything at runtime.
+# Installs mise, the sentry-ruby toolchain, and Chromium with ChromeDriver.
 #
 set -euo pipefail
 
 RUBY_VERSION="${RUBYVERSION:-latest}"
 USERNAME="${_REMOTE_USER:-sentry}"
 USER_HOME="${_REMOTE_USER_HOME:-/home/${USERNAME}}"
 
+echo "📦 Installing Chromium and ChromeDriver..."
+echo "deb http://deb.debian.org/debian sid main" > /etc/apt/sources.list.d/debian.list
+wget -qO- https://ftp-master.debian.org/keys/archive-key-12.asc \
+  | gpg --dearmor > /etc/apt/trusted.gpg.d/debian-archive-keyring.gpg
+wget -qO- https://ftp-master.debian.org/keys/archive-key-12-security.asc \
+  | gpg --dearmor > /etc/apt/trusted.gpg.d/debian-archive-security-keyring.gpg
+for directory in bin lib lib32 lib64 libo32 libx32 sbin; do
+  dpkg-divert --package base-files --no-rename --remove "/${directory}"
+done
+apt-get update
+apt-get install -y --no-install-recommends chromium chromium-driver
+rm -rf /var/lib/apt/lists/* /var/cache/apt/* /etc/apt/sources.list.d/debian.list
+
 # Install mise system-wide via the official installer. This downloads a prebuilt
 # binary from mise's CDN rather than the GitHub API, avoiding the API rate
 # limits the gh-release-based community feature hits on shared CI runners.
@@ -24,38 +35,15 @@ echo "eval \"\$(${MISE_BIN} activate bash)\"" >> "${USER_HOME}/.bashrc"
 echo "eval \"\$(${MISE_BIN} activate zsh)\"" >> "${USER_HOME}/.zshenv"
 chown "${USERNAME}:${USERNAME}" "${USER_HOME}/.bashrc" "${USER_HOME}/.zshenv"
 
-# Run a command as the remote user with a sane PATH so mise writes tools into
-# the user's own data dir (~/.local/share/mise) rather than root's.
+# Feature installers run as root, but the toolchain belongs to the remote user.
 as_user() {
   sudo -u "${USERNAME}" -H env "PATH=${USER_HOME}/.local/bin:/usr/local/bin:/usr/bin:/bin" "$@"
 }
 
-# ~/.local/bin is on PATH but nothing creates it now that mise is installed
-# system-wide; ensure it exists for the Chromium symlink below.
-as_user mkdir -p "${USER_HOME}/.local/bin"
-
-# Java is always installed (required for JRuby) and listed in .mise.toml so it
-# is available regardless of which Ruby flavour is used.
-echo "📦 Pre-installing java@temurin-21..."
-as_user "$MISE_BIN" install "java@temurin-21"
-as_user "$MISE_BIN" use --global "java@temurin-21"
-
-# Pre-install Ruby (precompiled) so the container starts immediately.
-echo "📦 Pre-installing ruby@${RUBY_VERSION} (precompiled)..."
-as_user env MISE_RUBY_COMPILE=0 "$MISE_BIN" install "ruby@${RUBY_VERSION}"
-as_user "$MISE_BIN" use --global "ruby@${RUBY_VERSION}"
-
-# Node.js is always needed for the svelte-mini e2e app.
-echo "📦 Pre-installing node@lts..."
-as_user "$MISE_BIN" install "node@lts"
-as_user "$MISE_BIN" use --global "node@lts"
-
-# Install headless Chromium via Playwright (includes all system dependencies)
-# and symlink the binary into ~/.local/bin which is already on PATH.
-echo "📦 Installing headless Chromium via Playwright..."
-as_user "${USER_HOME}/.local/share/mise/shims/npx" playwright install chromium --with-deps --only-shell
-# Playwright lays out the binary under chrome-linux/ on arm64 and chrome-linux64/
-# on x86_64 (since Playwright 1.57), so the glob has to match both.
-as_user bash -c "ln -sf ${USER_HOME}/.cache/ms-playwright/chromium-*/chrome-linux*/chrome ${USER_HOME}/.local/bin/chromium"
+echo "📦 Pre-installing toolchain..."
+as_user env MISE_RUBY_COMPILE=0 "$MISE_BIN" install \
+  "java@temurin-21" \
+  "ruby@${RUBY_VERSION}" \
+  "node@lts"
 
 echo "✅ Toolchain pre-install completed!"

.github/workflows/build_images.yml

@@ -56,8 +56,8 @@ jobs:
         uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
 
       # Build with the dev container CLI (not a plain `docker build`) so the dev
-      # container features — mise and the local `tools` feature that bakes the
-      # Ruby/Node/Java/Chromium toolchain — are applied to the pushed image.
+      # container features — including the local `tools` feature that bakes the
+      # Ruby/Node/Java toolchain and browser — are applied to the pushed image.
       # BASE_IMAGE and RUBY_VERSION are consumed via ${localEnv:...} in
       # devcontainer.json, so they are passed as env vars to the CLI here.
       - name: Build and push devcontainer image

spec/spec_helper.rb

@@ -31,13 +31,12 @@
   options.add_argument("--disable-gpu")
   options.add_argument("--temp-profile")
 
-  # Use custom chromium binary if available
-  chromium_path = "/home/sentry/.local/bin/chromium"
+  chromium_path = ENV.fetch("SENTRY_E2E_CHROME", "/usr/bin/chromium")
   options.binary = chromium_path if File.exist?(chromium_path)
 
   # Use a local chromedriver if provided, bypassing Selenium Manager's
   # download (which only ships an x86 driver and fails on arm64).
-  chromedriver_path = ENV["SENTRY_E2E_CHROMEDRIVER"] || "/home/sentry/.local/bin/chromedriver"
+  chromedriver_path = ENV.fetch("SENTRY_E2E_CHROMEDRIVER", "/usr/bin/chromedriver")
   service = File.exist?(chromedriver_path) ? Selenium::WebDriver::Service.chrome(path: chromedriver_path) : nil
 
   Capybara::Selenium::Driver.new(app, browser: :chrome, options: options, service: service)