fix: disable Chrome sandbox in CI and install chromium for PDF test

Author: urmzd

.github/workflows/ci.yml

@@ -23,6 +23,9 @@ jobs:
       - name: Verify benchmarks compile
         run: cargo bench --no-run
 
+      - name: Install Chrome
+        run: sudo apt-get update && sudo apt-get install -y chromium-browser
+
       - name: Test (HTML → PDF)
         run: |
           echo "<h1>ci</h1>" > /tmp/test.html

src/lib.rs

@@ -60,8 +60,10 @@ impl PdfRenderer {
     /// Launch a headless Chrome browser.
     pub fn new() -> Result<Self> {
         let _span = info_span!("browser_launch").entered();
+        let sandbox = !std::env::var("CI").is_ok_and(|v| !v.is_empty());
         let options = LaunchOptions {
             headless: true,
+            sandbox,
             ..LaunchOptions::default()
         };
         let browser = Browser::new(options).context("failed to launch headless Chrome")?;