Sign inSign up

mikegemut/armorclaw

By mikegemut

Updated 4 months ago

Hardened container for OpenClaw with encrypted secret storage (SQLCipher) and host hardening.

Image
0

10K+

mikegemut/armorclaw repository overview

ArmorClaw

ArmorClaw - Your Secure Platform for OpenClaw

Image: mikegemut/armorclaw:latest Version: 4.3.0 Last Updated: 2026-03-05

Run AI agents on your VPS that work for you 24/7.

                    
ArmorChat

ArmorClaw turns a server into a secure AI “digital secretary” that can browse websites, fill forms, research information, and complete tasks while you control it from your phone.


What ArmorClaw Does

ArmorClaw ArmorClaw runs OpenClaw agents on your server instead of on your laptop.

These agents can:

  • browse websites
  • research information
  • fill forms
  • automate repetitive tasks
  • run workflows 24/7

You control them using the ArmorChat mobile app.

Sensitive data (passwords, credit cards, etc.) is protected using BlindFill™, which injects secrets directly into the browser so the AI never sees them.


ArmorClaw works on most Linux servers.

Minimum VPS
ResourceMinimum
CPU1 core
RAM2 GB
Disk10 GB
OSUbuntu 20.04+
Docker24+
ResourceRecommended
CPU2 cores
RAM4 GB
Disk20 GB
OSUbuntu 22.04
Good VPS Providers

Common providers that work well:

  • DigitalOcean
  • Hetzner
  • Vultr
  • AWS EC2
  • Google Cloud

Any Linux VPS with Docker works.


Install ArmorClaw (2 Minutes)

ArmorClaw Run this command on your VPS:

curl -fsSL https://raw.githubusercontent.com/armorclaw/armorclaw/main/deploy/install.sh | bash

The setup wizard asks 4 questions:

  1. AI provider (OpenAI, Anthropic, Google, etc.)
  2. API key
  3. Admin username
  4. Admin password

After setup you will see something like:

ArmorClaw is Ready!

Bridge:  http://192.168.1.50:8443
Matrix:  http://192.168.1.50:6167

Admin: admin / <generated-password>

[QR CODE]

Connect From Your Phone

  1. Install ArmorChat from Google Play
  2. Open the app
  3. Scan the QR code shown in the server logs

Your AI agent is now connected.


Run Your First Agent

In ArmorChat send:

!agent create name="Researcher" skills="web_browsing"

Then ask it something:

Find the best restaurants in NYC for a birthday dinner

The agent will open websites, gather information, and report back.


How ArmorClaw Works

ArmorClaw

Phone
ArmorChat
    │
    │ encrypted
    ▼
ArmorClaw Bridge (your VPS)
    │
    ▼
Agent Container
(OpenClaw worker)
    │
    ▼
Automated Browser

Each agent runs in its own isolated container.

Secrets are injected into the browser without being exposed to the AI.


Security Model

ArmorClaw is designed for secure automation.

LayerProtection
NetworkEnd-to-end encrypted Matrix communication
SecretsMemory-only injection (BlindFill™)
AgentsIsolated containers
StorageEncrypted keystore
AuditLogged access to sensitive data

Troubleshooting Quick Checks

Check if ArmorClaw is running:

docker ps

View logs:

docker logs -f armorclaw

If ports are in use see:


Additional Documentation

Advanced topics from the original overview are available below.


System Requirements

RequirementMinimumRecommended
CPU1 core2+ cores
RAM2 GB4 GB
Disk10 GB20 GB
OSLinux (Ubuntu 20.04+)Ubuntu 22.04
Docker24.0+Latest

Deployment Modes

ModeCommandUse Case
Full StackdefaultArmorChat mobile integration
Bridge Only--bridge-onlyTesting
Bootstrap--bootstrapGenerate docker-compose
Show Ports--portsDebug port conflicts

Non-Interactive Deployment

You can deploy without prompts using environment variables.

export ARMORCLAW_PROVIDER=openai
export ARMORCLAW_API_KEY=sk-your-api-key
export ARMORCLAW_ADMIN_USER=admin
export ARMORCLAW_ADMIN_PASSWORD=$(openssl rand -base64 24)

curl -fsSL https://raw.githubusercontent.com/armorclaw/armorclaw/main/deploy/install.sh | bash

Manual Docker Run

Full stack example:

docker run -it --name armorclaw \
  --restart unless-stopped \
  --user root \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v armorclaw-config:/etc/armorclaw \
  -v armorclaw-keystore:/var/lib/armorclaw \
  -p 8443:8443 \
  -p 6167:6167 \
  -p 5000:5000 \
  mikegemut/armorclaw:latest

Auto Port Detection

If default ports are busy ArmorClaw will select new ones automatically.

ServiceDefaultFallback
Bridge RPC844330000-40000
Matrix616730000-40000
Push Gateway500030000-40000

Deployment Profiles

ProfileRuntimeSecurity
QuickDockerStandard
AdvancedDocker hardenedEnhanced
EnterpriseDocker / containerd / FirecrackerMaximum

Enterprise Runtime Options

RuntimeStatusUse Case
Docker hardenedAvailableDefault enterprise
containerdv5.0Kubernetes environments
FirecrackerOn requestMaximum isolation

Common Issues

Port already in use

Check with:

ss -ltn | grep 8443
Wizard crashes

Use environment variables instead.


Upgrading

docker rm -f armorclaw
docker pull mikegemut/armorclaw:latest
curl -fsSL https://raw.githubusercontent.com/armorclaw/armorclaw/main/deploy/install.sh | bash

Uninstalling

docker rm -f armorclaw
docker volume rm armorclaw-config armorclaw-keystore

Support

GitHub https://github.com/armorclaw/armorclaw

Issues https://github.com/armorclaw/armorclaw/issues


License

MIT License - See LICENSE for details.

Tag summary

Content type

Image

Digest

sha256:217ea100e

Size

233 MB

Last updated

4 months ago

docker pull mikegemut/armorclaw