You can run mermaid.ink using a Docker container. The default command requires --cap-add=SYS_ADMIN to function, but this is generally not recommended for security reasons.
Secure alternatives
1. Using a custom seccomp profile
Instead of using SYS_ADMIN, you can use Jessie Frazelle's seccomp profile for Chrome:
wget https://raw.githubusercontent.com/jfrazelle/dotfiles/master/etc/docker/seccomp/chrome.json
docker run --security-opt seccomp=$(pwd)/chrome.json ghcr.io/jihchi/mermaid.ink
2. Running without a seccomp profile
If you encounter core dump errors during startup, you can run the container without a seccomp profile:
docker run --security-opt seccomp=unconfined ghcr.io/jihchi/mermaid.ink
3. Default (Not recommended)
docker run --cap-add=SYS_ADMIN -p 3000:3000 ghcr.io/jihchi/mermaid.ink