ubuntu安装openclaw-docker安装openclaw - AI创想

创建部署目录

mkdir-p ~/openclaw-server1
cd ~/openclaw-server1

复制代码

编写Docker Compose配置文件
有几点说明：

OpenClaw 官方镜像地址通常为 ghcr.io/openclaw/openclaw

Nginx 容器

Gateway 容器

可能有更好的方式没有找到

创建nginx.conf

vim nginx.conf

复制代码

粘贴以下内容

user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid;
events {
worker_connections 1024;
}
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
keepalive_timeout 65;
server {
listen 80; # 监听容器内的 80 端口 (对应宿主机的 18789)
server_name localhost;
location / {
# ✅ 关键：改为 127.0.0.1，因为它们在同一个网络栈里
proxy_pass http://127.0.0.1:18789;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
}

复制代码

创建docker-compose.yml

vim docker-compose.yml

复制代码

粘贴以下内容

version:'3.8'services:# 1. OpenClaw Gateway (主网络拥有者)openclaw-gateway:image: ghcr.io/openclaw/openclaw:2026.3.23-2container_name: openclaw-gateway
restart: always
# ✅ 关键：在这里映射端口！# 因为 Nginx 共享了本服务的网络，所以这里映射的端口实际上是 Nginx 监听的端口。# 我们希望宿主机访问 18789 -> 进入容器 -> 被 Nginx 的 80 端口接收。ports:-"18789:80"environment:- TZ=Asia/Shanghai
- OPENCLAW_PORT=18789
volumes:- ./data:/home/node/.openclaw
networks:- openclaw-net
mem_limit: 4g
cpus:2.0# 2. Nginx 反向代理 (共享网络)openclaw-nginx:image: registry.openanolis.cn/openanolis/nginx:1.14.1-8.6container_name: openclaw-nginx
restart: always
# ✅ 核心：共享 openclaw-gateway 的网络栈network_mode:"service:openclaw-gateway"# 注意：使用 network_mode 后，ports, networks, hostname 等指令在此处无效# 端口映射已在上面的 openclaw-gateway 中定义 (18789:80)volumes:- ./nginx.conf:/etc/nginx/nginx.conf:ro
depends_on:- openclaw-gateway
networks:openclaw-net:driver: bridge

复制代码

启动服务

docker compose up -d

复制代码

openclaw-gateway容器可能会一直重启
查看日志：

docker logs --tail=10-f openclaw-gateway

复制代码

如果是报权限不足

Gateway failed to start: Error: EACCES: permission denied, open '/home/node/.openclaw/openclaw.json.15.aaaaaa.tmp'

复制代码

需要修改当前路径下的data文件夹的所有者，将该目录所有者修改当前用户

sudochown-R1000:1000 ./data

复制代码

此时容器openclaw-gateway启动成功，需重启openclaw-nginx，否则http://ip:18789访问不成功

docker restart openclaw-nginx

复制代码

此时访问：http://ip:18789，可以请求成功，出现UI页面，但会有如下提示

origin not allowed (open the Control UI from the gateway host or allow it in gateway.controlUi.allowedOrigins)

复制代码

(, 下载次数: 0)

出现上面异常，需要改配置文件./data/openclaw.json
以下是当前的内容

{"agents":{"defaults":{"compaction":{"mode":"safeguard"},"maxConcurrent":4,"subagents":{"maxConcurrent":8}}},"messages":{"ackReactionScope":"group-mentions"},"commands":{"native":"auto","nativeSkills":"auto","restart":true,"ownerDisplay":"raw"},"gateway":{"auth":{"mode":"token","token":"aaaaaabbbbbbccccccdddddd"}},"meta":{"lastTouchedVersion":"2026.3.23","lastTouchedAt":"2026-03-29T07:37:21.817Z"}}

复制代码

需要增加权限配置，扩充gateway节点的内容

"gateway":{"auth":{"mode":"token","token":"aaaaaabbbbbbccccccdddddd"},"bind":"lan","mode":"local","trustedProxies":["192.168.0.0/16","172.16.0.0/12","10.0.0.0/8"],"controlUi":{"allowedOrigins":["http://127.0.0.1:18789","http://192.168.1.50:18789"],"allowInsecureAuth":true,"dangerouslyDisableDeviceAuth":true}}

复制代码

(⚠️ 再次提醒：将 http://192.168.1.50:18789 替换为实际请求服务的地址)

重启openclaw-gateway、openclaw-nginx

docker restart openclaw-gateway
docker restart openclaw-nginx

复制代码

此时浏览器再次访问：http://ip:18789，填写配置文件中的token，即可登录成功
没有配置大模型，不能进行对话。