Merge branch 'feat-remote-browser' into test-build

backend/remotebrowser/runner.go

@@ -514,13 +514,18 @@ func (r *Runner) Run(ctx context.Context) error {
 				Logger(chromeLog).
 				Set("disable-crash-reporter").
 				Set("crash-dumps-dir", crashDir).
+				// No GPU in headless server environments; software rendering avoids
+				// the GPU process entirely and prevents CreateCommandBuffer failures.
+				Set("disable-gpu").
 				// Prevents navigator.webdriver from being set to true, which is
 				// the primary signal sites like Gmail use to detect automation.
 				Set("disable-blink-features", "AutomationControlled").
-				// Disables the HID/USB device-detection service. Without udev (common
-				// in containers), Chrome's HidServiceLinux crashes with SIGSEGV when
-				// it tries to enumerate devices via a udev handle it failed to open.
-				Set("disable-features", "UsbDeviceDetection").
+				// Disable device-service features that try to enumerate hardware via
+				// udev/NETLINK. On VPS environments where AF_NETLINK is restricted,
+				// Chrome's HidServiceLinux crashes with SIGSEGV when the udev monitor
+				// fails to open but enumeration is still attempted on the null handle.
+				// Append (not Set) so Rod's existing site-per-process,TranslateUI defaults are preserved.
+				Append("disable-features", "WebHID,WebUSB,WebBluetooth").
 				Env(chromeEnv(
 					"XDG_CONFIG_HOME="+filepath.Join(rootDir, "config"),
 					"XDG_CACHE_HOME="+filepath.Join(rootDir, "cache"),