Dockerfile

# openclaw docker image
# runs the openclaw personal AI assistant with python, npm, npx, git, and browser support

FROM node:22-bookworm

# install system packages: python, git, chromium, and other essentials
RUN apt-get update && \
    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
    python3 \
    python3-pip \
    python3-venv \
    git \
    curl \
    ca-certificates \
    build-essential \
    chromium \
    chromium-sandbox \
    fonts-liberation \
    libasound2 \
    libatk-bridge2.0-0 \
    libatk1.0-0 \
    libcups2 \
    libdbus-1-3 \
    libdrm2 \
    libgbm1 \
    libgtk-3-0 \
    libnspr4 \
    libnss3 \
    libxcomposite1 \
    libxdamage1 \
    libxfixes3 \
    libxkbcommon0 \
    libxrandr2 \
    xdg-utils \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*

# symlink python3 to python for convenience
RUN ln -sf /usr/bin/python3 /usr/bin/python

# install openclaw globally via npm (includes npx)
RUN npm install -g openclaw@latest

# install playwright browsers for browser automation
ENV PLAYWRIGHT_BROWSERS_PATH=/home/node/.cache/ms-playwright
RUN npx playwright install chromium && npx playwright install-deps chromium

# set chromium path for puppeteer/playwright
ENV CHROME_PATH=/usr/bin/chromium
ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium

# set working directory
WORKDIR /home/node

# create directories for config and workspace
RUN mkdir -p /home/node/.openclaw /home/node/.openclaw/workspace /home/node/.openclaw/credentials

ENV NODE_ENV=production
ENV HOME=/home/node

# allow non-root user to write
RUN chown -R node:node /home/node

# run as non-root user (uid 1000)
USER node

# expose gateway port
EXPOSE 18789 18790

# start the gateway
CMD ["openclaw", "gateway", "--allow-unconfigured", "--bind", "lan", "--port", "18789"]