
shinejh0528/openclaw-e Environment Variables (entrypoint.sh)OPENCLAW_GATEWAY_PORT : Gateway port inside the container. Default: ***
-e OPENCLAW_GATEWAY_PORT=***OPENCLAW_GATEWAY_TOKEN : Gateway auth token. If provided, it is used as-is. If not provided, the entrypoint generates one via openssl rand -hex 32, then saves it to /root/.openclaw/gateway.token and reuses it on later runs.
-e OPENCLAW_GATEWAY_TOKEN=xxxxxxxxLLM_PLATFORM : LLM provider selector. In the current entrypoint, only openai is handled explicitly (it writes OPENAI_API_KEY internally).
openai (OpenAI API + Codex)anthropic (Claude API)openrouter (OpenRouter)litellm (LiteLLM unified gateway)bedrock (Amazon Bedrock)vercel (Vercel AI Gateway)together (Together AI)cloudflare (Cloudflare AI Gateway)moonshot (Moonshot AI / Kimi)venice (Venice AI)ollama (local models)qwen (Qwen OAuth)-e LLM_PLATFORM=openaiLLM_MODEL : Model name.
gpt-5-mini, it is normalized to openai/gpt-5-mini.openai/<model>, it is used as-is.gpt-5-mini (effective: openai/gpt-5-mini)-e LLM_MODEL=gpt-5-miniLLM_API_KEY : API key for the selected provider. When LLM_PLATFORM=openai, it is written to OPENAI_API_KEY in /root/.openclaw/.env.
-e LLM_API_KEY=sk-...BRAVE_SEARCH_ENABLED : Enables Brave Search key injection (env-only).
true / falsefalse-e BRAVE_SEARCH_ENABLED=trueBRAVE_API_KEY : Brave Search API key. Used only when BRAVE_SEARCH_ENABLED=true. Stored in /root/.openclaw/.env.
-e BRAVE_API_KEY=...CHAT_PLATFORM : Chat platform selector. In the current entrypoint, this is only used to decide whether to store the *** token (no pairing automation).
*** (others are ignored)-e CHAT_PLATFORM=******_BOT_TOKEN : *** bot token. Stored in /root/.openclaw/.env only when CHAT_PLATFORM=***. (Pairing/enable steps are not automated.)
-e ***_BOT_TOKEN=***:ABC...powershell# ========================= # env variables # ========================= $sOpenai_api_key = "sk-...YOUR_OPENAI_KEY..." $sBrave_api_key = "BSA...YOUR_BRAVE_KEY..." $s***_bot_token = "***:ABC...YOUR_***_BOT_TOKEN..." # ========================= # command # ========================= docker run -it --name openclaw ` -p ***:*** ` -v F:\docker_volume\openclaw\.openclaw:/root/.openclaw ` -e OPENCLAW_GATEWAY_PORT=*** ` -e LLM_PLATFORM=openai ` -e LLM_MODEL=gpt-5-mini ` -e LLM_API_KEY=$sOpenai_api_key ` -e BRAVE_SEARCH_ENABLED=true ` -e BRAVE_API_KEY=$sBrave_api_key ` -e CHAT_PLATFORM=*** ` -e ***_BOT_TOKEN=$s***_bot_token ` shinejh0528/openclaw:1.0.0
bash# ========================= # env variables # ========================= export OPENAI_API_KEY="sk-...YOUR_OPENAI_KEY..." export BRAVE_API_KEY="BSA...YOUR_BRAVE_KEY..." export ***_BOT_TOKEN="***:ABC...YOUR_***_BOT_TOKEN..." # ========================= # command # ========================= docker run -it --name openclaw \ -p ***:*** \ -v /opt/docker_volume/openclaw/.openclaw:/root/.openclaw \ -e OPENCLAW_GATEWAY_PORT=*** \ -e LLM_PLATFORM=openai \ -e LLM_MODEL=gpt-5-mini \ -e LLM_API_KEY="${OPENAI_API_KEY}" \ -e BRAVE_SEARCH_ENABLED=true \ -e BRAVE_API_KEY="${BRAVE_API_KEY}" \ -e CHAT_PLATFORM=*** \ -e ***_BOT_TOKEN="${***_BOT_TOKEN}" \ shinejh0528/openclaw:1.0.0
docker exec -it openclaw /bin/bash openclaw onboard
🦞 OpenClaw 2026.2.9 (<commit>) — <tagline> ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ██░▄▄▄░██░▄▄░██░▄▄▄██░▀██░██░▄▄▀██░████░▄▄▀██░███░██ ██░███░██░▀▀░██░▄▄▄██░█░█░██░█████░████░▀▀░██░█░█░██ ██░▀▀▀░██░█████░▀▀▀██░██▄░██░▀▀▄██░▀▀░█░██░██▄▀▄▀▄██ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ 🦞 OPENCLAW 🦞 ┌ OpenClaw onboarding │ ◇ Security ──────────────────────────────────────────────────────────────────────────────╮ │ │ │ Security warning — please read. │ │ │ │ OpenClaw is a hobby project and still in beta. Expect sharp edges. │ │ This bot can read files and run actions if tools are enabled. │ │ A bad prompt can trick it into doing unsafe things. │ │ │ │ If you’re not comfortable with basic security and access control, don’t run OpenClaw. │ │ Ask someone experienced to help before enabling tools or exposing it to the internet. │ │ │ │ Recommended baseline: │ │ - Pairing/allowlists + mention gating. │ │ - Sandbox + least-privilege tools. │ │ - Keep secrets out of the agent’s reachable filesystem. │ │ - Use the strongest available model for any bot with tools or untrusted inboxes. │ │ │ │ Run regularly: │ │ openclaw security audit --deep │ │ openclaw security audit --fix │ │ │ │ Must read: [***] │ │ │ ├─────────────────────────────────────────────────────────────────────────────────────────╯ │ ◇ I understand this is powerful and inherently risky. Continue? │ Yes │ ◇ Onboarding mode │ QuickStart │ ◇ Existing config detected ─────────╮ │ │ │ workspace: ~/.openclaw/workspace │ │ model: openai/gpt-5-mini │ │ gateway.mode: local │ │ gateway.port: *** │ │ gateway.bind: loopback │ │ skills.nodeManager: pnpm │ │ │ ├────────────────────────────────────╯ │ ◇ Config handling │ Use existing values │ ◇ QuickStart ─────────────────────────────╮ │ │ │ Keeping your current gateway settings: │ │ Gateway port: *** │ │ Gateway bind: Loopback (127.0.0.1) │ │ Gateway auth: Token (default) │ │ Tailscale exposure: Off │ │ Direct to chat channels. │ │ │ ├──────────────────────────────────────────╯ │ ◇ Model/auth provider │ OpenAI │ ◇ OpenAI auth method │ OpenAI API key │ ◇ Use existing OPENAI_API_KEY (env: OPENAI_API_KEY, sk-…<redacted>)? │ Yes │ ◇ OpenAI API key ──────────────────────────────────────────────────────────╮ │ │ │ Saved OPENAI_API_KEY to /root/.openclaw/.env for launchd compatibility. │ │ │ ├───────────────────────────────────────────────────────────────────────────╯ │ ◇ Model configured ──────────────────────────╮ │ │ │ Default model set to openai/<redacted> │ │ │ ├─────────────────────────────────────────────╯ │ ◇ Default model │ openai/gpt-5-mini │ ◇ Channel status ────────────────────────────╮ │ │ │ ***: configured │ │ ***: not configured │ │ ***: not configured │ │ Google Chat: not configured │ │ Slack: not configured │ │ Signal: not configured │ │ iMessage: work in progress │ │ (Other channels omitted) │ │ │ ├─────────────────────────────────────────────╯ │ ◇ Select channel (QuickStart) │ *** (Bot API) │ ◇ *** already configured. What do you want to do? │ Skip (leave as-is) Updated ~/.openclaw/openclaw.json Workspace OK: ~/.openclaw/workspace Sessions OK: ~/.openclaw/agents/main/sessions │ ◇ Skills status ────────────╮ │ │ │ Eligible: <n> │ │ Missing requirements: <n> │ │ Blocked by allowlist: <n> │ │ │ ├────────────────────────────╯ │ ◇ Configure skills now? (recommended) │ Yes │ ◇ Homebrew recommended ──────────────────────────────────────────────────────────╮ │ │ │ Many skill dependencies are shipped via Homebrew. │ │ Without brew, you'll need to build from source or download releases manually. │ │ │ ├─────────────────────────────────────────────────────────────────────────────────╯ │ ◇ Hooks ──────────────────────────────────────────────────────────╮ │ │ │ Hooks let you automate actions when agent commands are issued. │ │ Example: Save session context to memory when you issue /new. │ │ │ │ Learn more: [***] │ │ │ ├──────────────────────────────────────────────────────────────────╯ │ ◇ Enable hooks? │ 📝 command-logger │ ◇ Control UI ─────────────────────────────────────────────────────────────────────╮ │ │ │ Web UI: [***] │ │ Web UI (with token): [***]<REDACTED_TOKEN> │ │ Gateway WS: ws://127.0.0.1:*** │ │ Docs: [***] │ │ │ ├──────────────────────────────────────────────────────────────────────────────────╯ │ ◇ Token ─────────────────────────────────────────────────────────────────────────────────╮ │ │ │ Gateway token: shared auth for the Gateway + Control UI. │ │ Stored in: ~/.openclaw/openclaw.json (gateway.auth.token) or OPENCLAW_GATEWAY_TOKEN. │ │ View token: openclaw config get gateway.auth.token │ │ Generate token: openclaw doctor --generate-gateway-token │ │ Web UI stores a copy in this browser's localStorage (openclaw.control.settings.v1). │ │ If prompted: paste the token into Control UI settings (or use the tokenized URL). │ │ │ ├─────────────────────────────────────────────────────────────────────────────────────────╯ │ ◇ Start TUI (best option!) │ openclaw tui - ws://127.0.0.1:*** - agent main - session main │ │ Wake up, my friend! │ │ Hey — I’m awake. │ (Intro questions omitted)
openclaw pairing approve *** [your_token]
docker run -itd -p ***:*** --name openclaw shinejh0528/openclaw:1.0.0 /bin/bash # and enter inside the container, run openclaw manually docker exec -it openclaw
.openclaw folder with the -v option), you can just run the command, and OpenClaw will start up right away.docker run -it --name openclaw -p ***:*** -v F:\docker_volume\openclaw\.openclaw:/root/.openclaw shinejh0528/openclaw:1.0.0 openclaw gateway --port *** --verbose





manifest unknown 错误
TLS 证书验证失败
DNS 解析超时
410 错误:版本过低
402 错误:流量耗尽
身份认证失败错误
429 限流错误
凭证保存错误
来自真实用户的反馈,见证轩辕镜像的优质服务