diff --git a/.env b/.env
index 056459d9..ec9e4316 100644
--- a/.env
+++ b/.env
@@ -11,6 +11,7 @@ SITE_ADMIN_EMAILS=
 GOOGLE_CLIENT_ID=
 GOOGLE_CLIENT_SECRET=
 GOOD_JOB_EXECUTION_MODE=
+GROVER_NO_SANDBOX=true  # must be true for running chromium as root in Docker container
 ADMIN_IDS=
 LOG_LEVEL=
 DB_HOST=
diff --git a/.env.test b/.env.test
index a69b9886..9b5f06bf 100644
--- a/.env.test
+++ b/.env.test
@@ -11,4 +11,5 @@ ZwIDAQAB
 ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY=1
 ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY=2
 ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT=3
+GROVER_NO_SANDBOX=true  # must be true for running chromium as root in Docker container
 PDF_DISPLAY_URL=
diff --git a/Dockerfile b/Dockerfile
index 81798a61..8b187125 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 FROM ruby:3.3.0
 
 # Install packages
-RUN apt-get update && apt-get install -y build-essential nodejs libpq-dev npm fop=1:2.* libsaxon-java libsaxonb-java
+RUN apt-get update && apt-get install -y build-essential nodejs libpq-dev npm fop=1:2.* libsaxon-java libsaxonb-java chromium
 
 # Setup FOP to use saxon xslt parser
 RUN sed -i '/find_jars/i \