land007/openclaw repository overview

⁠OpenClaw by WebClaw

🌐 Official Website⁠ — Documentation, guides, and downloads

📦 Repository⁠ | 🚀 Launcher⁠ | 🌐 Website⁠ | 🐳 Default Image⁠ | 🧰 Full Image⁠ | 🐛 Issues⁠

An OpenClaw-first runtime and launcher stack for users who want a simpler way to install and run OpenClaw.

Migration note: naming is currently in transition. See WEBCLAW_MIGRATION_PLAN.md⁠ for the official mapping between webcode, WebClaw, and the new image names.

⁠✨ What's Inside

⁠🎯 Use Cases

• 🧪 AI Development & Testing: Experiment with AI tools safely without risking your host system
• 📚 Learning Environment: Practice Linux, coding, or DevOps — reset instantly with docker compose down -v
• 🌐 Remote Development: Access your full development environment from any device with a browser
• 🔧 Quick Project Sandbox: Spin up an isolated dev environment for temporary projects

⁠📊 Comparison

⁠🚀 Installation

📖 For detailed installation guides and documentation, visit webcode.qhkly.com⁠

⁠Method 1: Desktop App — Download & Run (Easiest) ⭐

No Git or Node.js needed. Just Docker Desktop + a download.

Step 1 — Install Docker Desktop (if not already installed):

Step 2 — Download the WebClaw launcher app:

Visit webcode.qhkly.com⁠ to download the launcher app for your platform, or download from the Releases page⁠:

Step 3 — Unzip and run:

• macOS: Unzip → right-click webclaw.app → Open (required first time to bypass Gatekeeper)
• Windows: Unzip → double-click webclaw.exe → click "Run anyway" if SmartScreen appears
• Linux: Unzip → run ./webclaw

The app will guide you through setup with a step-by-step wizard.

⁠Method 2: One-Command Installer (Terminal)

macOS / Linux:

curl -fsSL https://raw.githubusercontent.com/land007/openclaw/main/install.sh | bash

Windows (PowerShell — Run as Administrator):

irm https://raw.githubusercontent.com/land007/openclaw/main/install.ps1 | iex

⁠Method 3: Docker Only (Servers / Headless)

No GUI needed. Requires Docker⁠.

Option A — Minimal one-liner (simplest) ⚡:

docker run -d --name webclaw -p 20000-20004:20000-20004 -p 20005:10005 \
  --shm-size=512m --security-opt seccomp=unconfined \
  -v webclaw-config:/home/ubuntu/.webclaw \
  -v projects:/home/ubuntu/projects \
  land007/openclaw:latest

Then open http://localhost:20000⁠ — log in with admin / changeme, click ⚙ to configure passwords, tokens, and Git settings. All configuration persists across restarts via the webclaw-config volume.

Option B — Using docker compose (recommended for easier management):

macOS / Linux / WSL / Git Bash:

mkdir -p ~/webcode && cd ~/webcode
curl -fsSL https://raw.githubusercontent.com/land007/openclaw/main/launcher/assets/docker-compose.yml -o docker-compose.yml
docker compose up -d

Option C — Full docker run with all volumes and env vars:

docker run -d \
  --name webclaw \
  --restart unless-stopped \
  -p 20000:20000 \
  -p 20001:20001 \
  -p 20002:20002 \
  -p 20003:20003 \
  -p 20004:20004 \
  -p 20005:10005 \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v webclaw-config:/home/ubuntu/.webclaw \
  -v dna-data:/home/ubuntu/dna \
  -v projects:/home/ubuntu/projects \
  -v vibe-kanban-data:/home/ubuntu/.local/share/vibe-kanban \
  -v code-server-data:/home/ubuntu/.code-server \
  -v user-data:/home/ubuntu/.local/share \
  -v gitconfig:/home/ubuntu/.gitconfig-vol \
  -v openclaw-data:/home/ubuntu/.openclaw \
  -v chrome-data:/home/ubuntu/.config \
  -v recordings:/home/ubuntu/recordings \
  -e MODE=desktop \
  -e AUTH_USER=admin \
  -e AUTH_PASSWORD=changeme \
  -e VNC_PASSWORD=changeme \
  -e VNC_RESOLUTION=1920x1080 \
  --shm-size=512m \
  --security-opt seccomp=unconfined \
  land007/openclaw:latest

Windows PowerShell:

New-Item -ItemType Directory -Force "$env:USERPROFILE\webcode"
Set-Location "$env:USERPROFILE\webcode"
Invoke-WebRequest -Uri "https://raw.githubusercontent.com/land007/openclaw/main/launcher/assets/docker-compose.yml" -OutFile docker-compose.yml
docker compose up -d

⁠🌐 Access

After startup, open http://localhost:20000⁠ — this is the unified dashboard entry point.

⁠🔒 Security & Isolation

Will AI break my computer? No!

Everything runs inside a sandboxed Docker container. Your host computer is completely safe.

• ✅ AI can't touch your files — It only sees files inside the container, not your documents, photos, or anything on your real computer
• ✅ Experiment freely — Run any code, install anything, break things inside — your computer stays untouched
• ✅ One-command reset — Messed up? Run docker compose down -v and start fresh in seconds

⚠️ About Docker socket (optional)

By default, /var/run/docker.sock is mounted for Docker-in-Docker capability.

• Most users: Keep it — you'll want this feature
• Security-sensitive use: Comment it out in docker-compose.yml if running untrusted code

⁠⚙️ Configuration

⁠Runtime Config Panel (Recommended) ⭐

Open http://localhost:20000⁠, log in, and click the ⚙ gear icon in the top bar. You can change:

• Basic Auth username / password
• VNC password
• OpenClaw API token
• Git username and email
• Cloudflare Tunnel token
• Enable / disable Kanban and OpenClaw services

Changes apply immediately (no restart needed) and persist in the webclaw-config volume across container restarts.

⁠Environment Variables (docker-compose / docker run)

Create a .env file next to docker-compose.yml, or pass -e flags to docker run:

cp .env.example .env
# Edit .env, then:
docker compose up -d

⁠🔨 Building from Source

⁠Build Full Version (with Desktop)

Full version includes GNOME desktop, VNC/noVNC, Chinese input (fcitx), browser, Theia IDE, Vibe Kanban, and OpenClaw.

⁠🚀 Quick Start (Recommended - Use Pre-built Base Image)

The fastest way to build is using the pre-built base image from Docker Hub:

# Pull or ensure base image exists (first time only)
docker pull land007/openclaw_base:latest

# Build full version (30-60 seconds, using cached base)
docker build -t webclaw:latest --build-arg THEIA_BASE_VERSION=latest .

# Build lite version (5-10 seconds, using cached base)
docker build -t webclaw:latest --build-arg THEIA_BASE_VERSION=latest --build-arg INSTALL_DESKTOP=false .

Benefits:

• ⚡ Fast: Configuration changes take seconds, not minutes
• 💾 Efficient: Base Theia image (~2GB) is downloaded once and cached
• 🔄 Iterative: Perfect for rapid development on dashboard, configs, scripts

⁠🔨 Full Build (Base + Overlay, 10-15 minutes)

Build everything from scratch, including the base Theia image:

# Clone repository
git clone https://github.com/land007/openclaw.git && cd webclaw

# Step 1: Build base image (10-12 minutes, slowest step)
docker build -f Dockerfile.base -t webcode:base-theia-local .

# Step 2a: Build full version (30-60 seconds)
docker build -t webclaw:latest --build-arg THEIA_BASE_VERSION=local .

# Step 2b: OR build lite version (5-10 seconds)
docker build -t webclaw:latest --build-arg THEIA_BASE_VERSION=local --build-arg INSTALL_DESKTOP=false .

Image size: ~2.5-3 GB (full) / ~1-1.5 GB (lite)

⁠🌍 Multi-Arch Build (AMD64 + ARM64)

For production deployment to Docker Hub:

# Build base image for both architectures
docker buildx build --platform linux/amd64,linux/arm64 \
  -f Dockerfile.base \
  -t land007/openclaw_base:latest \
  --push .

# Build full version
docker buildx build --platform linux/amd64,linux/arm64 \
  --build-arg THEIA_BASE_VERSION=latest \
  --build-arg INSTALL_DESKTOP=true \
  -t land007/openclaw:latest \
  --push .

# Build lite version
docker buildx build --platform linux/amd64,linux/arm64 \
  --build-arg THEIA_BASE_VERSION=latest \
  --build-arg INSTALL_DESKTOP=false \
  -t land007/openclaw:latest \
  --push .

⁠Version Comparison

⁠🖥️ Run Modes

Desktop mode (default) — Full GNOME Linux desktop in your browser, with Chinese input (fcitx + Google Pinyin):

docker compose up -d

Lite mode — Only Theia + OpenClaw, no desktop (lower resource usage):

MODE=lite docker compose up -d

⁠🔧 Common Commands

# Check status
docker compose ps

# View logs
docker compose logs -f

# Stop
docker compose down

# Stop and erase all data (caution!)
docker compose down -v

# Restart a single service
docker exec -it webcode supervisorctl restart theia

⁠💾 Data Persistence

Your data survives container restarts and updates — stored in Docker volumes:

⁠🤖 OpenClaw First-Time Setup

After first startup, run this once to complete initialization:

docker exec -it -u ubuntu webcode openclaw onboard

Follow the prompts, then refresh http://localhost:20003⁠.

⁠webcode（中文文档）

提供两个版本：

• webclaw⁠ — 默认版，适合 OpenClaw-first 使用
• webclaw_full⁠ — 完整版，包含额外高级工具

基于 Docker 的浏览器可访问开发环境，内置 Theia IDE、Vibe Kanban、noVNC 桌面和 OpenClaw AI。

⁠✨ 内置组件

⁠🎯 适用场景

• 🧪 AI 开发与测试：安全地试验各种 AI 工具，无需担心影响宿主机
• 📚 学习环境：练习 Linux、编程或 DevOps — 用 docker compose down -v 一键重置
• 🌐 远程开发：从任何设备的浏览器访问完整开发环境
• 🔧 临时项目沙盒：为临时项目快速启动隔离的开发环境

⁠📊 对比

⁠🚀 安装方式

📖 详细安装指南和文档，请访问 webcode.qhkly.com⁠

⁠方式一：下载桌面应用（最简单）⭐

不需要安装 Git 或 Node.js，只需安装 Docker Desktop 后下载应用即可。

第一步 — 安装 Docker Desktop（已安装可跳过）：

第二步 — 下载 WebClaw 启动器应用：

访问 webcode.qhkly.com⁠ 下载启动器应用，或前往 Releases 页面⁠：

第三步 — 解压并运行：

• macOS：解压后右键点击 webclaw.app → 选择打开（首次运行需要这样操作以绕过系统安全提示）
• Windows：解压后双击 webclaw.exe，如弹出 SmartScreen 警告，点击"仍要运行"
• Linux：解压后运行 ./webclaw

应用会通过图形向导一步步引导你完成设置。

⁠方式二：一键命令安装（终端）

macOS / Linux：

curl -fsSL https://raw.githubusercontent.com/land007/openclaw/main/install.sh | bash

Windows（PowerShell — 需以管理员身份运行）：

irm https://raw.githubusercontent.com/land007/openclaw/main/install.ps1 | iex

⁠方式三：纯 Docker（服务器 / 无图形界面）

不需要图形界面。需要安装 Docker⁠。

选项 A — 极简一行命令（最简单）⚡：

docker run -d --name webclaw -p 20000-20004:20000-20004 -p 20005:10005 \
  --shm-size=512m --security-opt seccomp=unconfined \
  -v webclaw-config:/home/ubuntu/.webclaw \
  -v projects:/home/ubuntu/projects \
  land007/openclaw:latest

然后浏览器打开 **http://localhost:20000**，用⁠ admin / changeme 登录，点击右上角 ⚙ 按钮即可配置密码、Token、Git 等所有设置。配置自动持久化，容器重启后依然生效。

选项 B — 使用 docker compose（推荐，更方便管理）：

macOS / Linux / WSL / Git Bash：

mkdir -p ~/webcode && cd ~/webcode
curl -fsSL https://raw.githubusercontent.com/land007/openclaw/main/launcher/assets/docker-compose.yml -o docker-compose.yml
docker compose up -d

选项 C — 完整 docker run 命令（指定所有参数）：

docker run -d \
  --name webclaw \
  --restart unless-stopped \
  -p 20000:20000 \
  -p 20001:20001 \
  -p 20002:20002 \
  -p 20003:20003 \
  -p 20004:20004 \
  -p 20005:10005 \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v webclaw-config:/home/ubuntu/.webclaw \
  -v dna-data:/home/ubuntu/dna \
  -v projects:/home/ubuntu/projects \
  -v vibe-kanban-data:/home/ubuntu/.local/share/vibe-kanban \
  -v code-server-data:/home/ubuntu/.code-server \
  -v user-data:/home/ubuntu/.local/share \
  -v gitconfig:/home/ubuntu/.gitconfig-vol \
  -v openclaw-data:/home/ubuntu/.openclaw \
  -v chrome-data:/home/ubuntu/.config \
  -v recordings:/home/ubuntu/recordings \
  -e MODE=desktop \
  -e AUTH_USER=admin \
  -e AUTH_PASSWORD=changeme \
  -e VNC_PASSWORD=changeme \
  -e VNC_RESOLUTION=1920x1080 \
  --shm-size=512m \
  --security-opt seccomp=unconfined \
  land007/openclaw:latest

Windows PowerShell：

New-Item -ItemType Directory -Force "$env:USERPROFILE\webcode"
Set-Location "$env:USERPROFILE\webcode"
Invoke-WebRequest -Uri "https://raw.githubusercontent.com/land007/openclaw/main/launcher/assets/docker-compose.yml" -OutFile docker-compose.yml
docker compose up -d

⁠🌐 访问地址

启动后，浏览器打开 http://localhost:20000⁠ — 这是统一入口仪表盘。

⁠🔒 安全性与隔离

AI 会弄坏我的电脑吗？不会！

所有操作都在沙箱化的 Docker 容器里运行，你的电脑完全安全。

• ✅ AI 碰不到你的文件 — 它只能看到容器里的文件，碰不到你的文档、照片或电脑上的任何东西
• ✅ 随便折腾没关系 — 运行任何代码、安装任何东西、把容器弄坏 — 你的真实电脑毫发无损
• ✅ 一键恢复 — 搞乱了？运行 docker compose down -v 几秒内即可重新开始

⚠️ 关于 Docker socket（可选）

默认 docker-compose.yml 挂载了 /var/run/docker.sock，支持容器内管理其他容器（Docker-in-Docker）。

• 大多数用户：保持启用 — 通常需要这个功能
• 安全敏感场景：如果运行不可信代码，可在 docker-compose.yml 中注释掉该行

⁠⚙️ 配置说明

⁠运行时配置面板（推荐）⭐

打开 **http://localhost:20000**，登录后点击顶部栏的⁠ ⚙ 齿轮图标，可修改：

• Basic Auth 用户名 / 密码
• VNC 密码
• OpenClaw API Token
• Git 用户名和邮箱
• Cloudflare Tunnel Token
• 启用 / 禁用看板和 OpenClaw 服务

修改立即生效（无需重启服务），并持久保存到 webclaw-config 数据卷，容器重启后自动恢复。

⁠环境变量（docker-compose / docker run）

在 docker-compose.yml 同目录下创建 .env 文件，或通过 docker run -e 传入：

cp .env.example .env
# 按需修改 .env，然后：
docker compose up -d

⁠🔨 从源码构建

⁠🚀 快速构建（推荐 - 使用预构建基础镜像）

使用 Docker Hub 上的预构建基础镜像，配置修改后只需 5-60 秒重建：

# 拉取或确保基础镜像存在（首次运行）
docker pull land007/openclaw_base:latest

# 构建完整版（30-60 秒，使用缓存的基础镜像）
docker build -t webclaw:latest --build-arg THEIA_BASE_VERSION=latest .

# 构建精简版（5-10 秒，使用缓存的基础镜像）
docker build -t webclaw:latest --build-arg THEIA_BASE_VERSION=latest --build-arg INSTALL_DESKTOP=false .

优势：

• ⚡ 快速：配置文件修改只需秒级重建
• 💾 高效：基础 Theia 镜像（~2GB）仅下载一次并缓存
• 🔄 迭代：非常适合 dashboard、配置文件、脚本的快速开发

⁠🔨 完整构建（基础 + 配置层，10-15 分钟）

从零开始构建所有内容，包括基础 Theia 镜像：

# 克隆仓库
git clone https://github.com/land007/openclaw.git && cd webclaw

# 步骤 1：构建基础镜像（10-12 分钟，最慢的步骤）
docker build -f Dockerfile.base -t webcode:base-theia-local .

# 步骤 2a：构建完整版（30-60 秒）
docker build -t webclaw:latest --build-arg THEIA_BASE_VERSION=local .

# 步骤 2b：或构建精简