Problem statement
At times the security teams of our clients while scanning the Node can find Vulnerabilities with X Window System and request to remove it from the Nodes.
Usage of Xorg Packages
Catchpoint Node does not run Chrome tests in headless mode, as Chrome requires a screen to render the content and get the rendering-specific metrics. XVFib addresses this requirement.
Catchpoint Linux Enterprise Node package requires the following Xorg dependencies:
Dependency: xorg-x11-server-Xvfb
Provider: xorg-x11-server-Xvfb.x86_64 1.20.4-17.el7_9
Recommendations
Removal of X windows system-packages from the node's instances will make chrome tests non-functional, but rest of the tests e.g. network, object, JS-API etc. should work as expected.