From 9f1ee62454a4073501ffa79c6c30c368b023a0a3 Mon Sep 17 00:00:00 2001
From: Ulzii Otgonbaatar <ulzii@kernel.sh>
Date: Wed, 25 Feb 2026 13:17:08 -0700
Subject: [PATCH] fix: install more system fonts to match standard Linux
 desktop

Install the Ubuntu 22.04 default font set so the browser has a
realistic set of fonts. The container previously had only 3 font
families which looked unusual on fingerprinting sites like CreepJS.

Made-with: Cursor
---
 images/chromium-headful/Dockerfile | 35 +++++++++++++++++++++++++++---
 1 file changed, 32 insertions(+), 3 deletions(-)

diff --git a/images/chromium-headful/Dockerfile b/images/chromium-headful/Dockerfile
index 4377a86f..09c8aa65 100644
--- a/images/chromium-headful/Dockerfile
+++ b/images/chromium-headful/Dockerfile
@@ -204,13 +204,42 @@ RUN --mount=type=cache,target=/var/cache/apt,sharing=locked,id=$CACHEIDPREFIX-ap
     wget \
     xdg-utils \
     libvulkan1 \
+    fontconfig \
+    unzip && \
+    apt-get clean && rm -rf /var/lib/apt/lists/*
+
+# Install fonts to match a realistic Ubuntu 22.04 desktop fingerprint.
+# A minimal container has only 3 fonts, which is a strong fingerprinting signal
+# used by reCAPTCHA Enterprise and other bot detection vendors.
+RUN apt-get update && \
+    apt-get --no-install-recommends -y install \
     fonts-liberation \
+    fonts-liberation2 \
     fonts-noto-cjk \
     fonts-noto-color-emoji \
+    fonts-noto-core \
     fonts-nanum \
-    fontconfig \
-    unzip && \
-    fc-cache -f
+    fonts-dejavu-core \
+    fonts-dejavu-extra \
+    fonts-freefont-ttf \
+    fonts-ubuntu \
+    fonts-opensymbol \
+    fonts-roboto \
+    fonts-croscore \
+    fonts-smc-chilanka \
+    fonts-hosny-amiri \
+    fonts-indic \
+    fonts-kacst \
+    fonts-khmeros-core \
+    fonts-lao \
+    fonts-lklug-sinhala \
+    fonts-sil-abyssinica \
+    fonts-sil-padauk \
+    fonts-thai-tlwg \
+    fonts-tibetan-machine \
+    fonts-droid-fallback && \
+    fc-cache -f && \
+    apt-get clean && rm -rf /var/lib/apt/lists/*
 
 # install ffmpeg manually since the version available in apt is from the 4.x branch due to #drama.
 COPY --from=ffmpeg-downloader /usr/local/bin/ffmpeg /usr/local/bin/ffmpeg