heiye1024/openclaw

适配 k8s 部署

通过 ‘su node -s /bin/sh -c 'node openclaw.mjs onboard' 来设置配置

运行

方式一：使用 Auth Key 自动登录（推荐）

bash




### 方式二：手动登录

```bash
# 先启动容器（不设置 TS_AUTHKEY）
docker run -d --name openclaw heiye1024/openclaw:2026.3.7

# 进入容器手动登录
docker exec -it openclaw tailscale up
# 会输出一个 URL，在浏览器中打开并授权即可

环境变量

获取 Auth Key

1. 登录 Tailscale Admin Console
2. 点击 Generate auth key
3. 建议勾选 Reusable（容器重启不需要重新生成 Key）
4. 复制 tskey-auth-... 格式的密钥

Kubernetes 部署

yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: openclaw
spec:
  replicas: 1
  selector:
    matchLabels:
      app: openclaw
  template:
    metadata:
      labels:
        app: openclaw
    spec:
      containers:
        - name: openclaw
          image: heiye1024/openclaw:2026.3.7
          env:
            - name: TS_AUTHKEY
              valueFrom:
                secretKeyRef:
                  name: tailscale-auth
                  key: authkey
            - name: TS_HOSTNAME
              value: "openclaw"

创建 Secret：

bash
kubectl create secret generic tailscale-auth \
  --from-literal=authkey=tskey-auth-xxxxx

常见问题

Q: 出现 You are logged out 日志

这是 tailscaled 的提示，说明 Tailscale 守护进程已启动但未登录。请确认：

• 是否设置了 TS_AUTHKEY 环境变量
• Auth Key 是否有效（未过期）

Q: 如何查看 Tailscale 状态

bash
docker exec -it openclaw tailscale status

Based on the https://hub.docker.com/r/alpine/openclaw image, integrated with Tailscale for secure private network access to your OpenClaw instance.

Run

Option 1: Auto-login with Auth Key (Recommended)

bash
docker run -d \
  --name openclaw \
  -e TS_AUTHKEY=tskey-auth-xxxxx \
  -e TS_HOSTNAME=openclaw \
  heiye1024/openclaw:2026.3.7

Option 2: Manual Login

bash
# Start the container without TS_AUTHKEY
docker run -d --name openclaw heiye1024/openclaw:2026.3.7

# Manually login from inside the container
docker exec -it openclaw tailscale up
# A URL will be printed — open it in your browser to authorize

Environment Variables

How to Get an Auth Key

1. Go to Tailscale Admin Console
2. Click Generate auth key
3. Recommended: enable Reusable (so container restarts don't require a new key)
4. Copy the tskey-auth-... key

Kubernetes Deployment

yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: openclaw
spec:
  replicas: 1
  selector:
    matchLabels:
      app: openclaw
  template:
    metadata:
      labels:
        app: openclaw
    spec:
      containers:
        - name: openclaw
          image: heiye1024/openclaw:2026.3.7
          env:
            - name: TS_AUTHKEY
              valueFrom:
                secretKeyRef:
                  name: tailscale-auth
                  key: authkey
            - name: TS_HOSTNAME
              value: "openclaw"

Create the Secret:

bash
kubectl create secret generic tailscale-auth \
  --from-literal=authkey=tskey-auth-xxxxx