OpenClaw Linux Docker 部署教學：Debian/Ubuntu 全天候穩定運行完整攻略

Ubuntu 24.04 / Debian 12 安裝 Docker：

# 更新套件庫
sudo apt-get update

# 安裝必要套件
sudo apt-get install -y ca-certificates curl gnupg lsb-release

# 加入 Docker 官方 GPG 金鑰
sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | \
  sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg

# 加入 Docker 儲存庫（Ubuntu）
echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] \
  https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list

# 安裝 Docker Engine 和 Compose
sudo apt-get update
sudo apt-get install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin

# 讓當前使用者可以直接使用 Docker（不需 sudo）
sudo usermod -aG docker $USER
newgrp docker

# 確認安裝成功
docker --version
docker compose version

建立目錄和 compose 文件：

mkdir -p ~/openclaw && cd ~/openclaw
nano docker-compose.yml

docker-compose.yml 內容：

version: '3.8'

services:
  openclaw:
    image: node:22-alpine
    container_name: openclaw-gateway
    restart: unless-stopped
    working_dir: /app
    volumes:
      # 持久化 OpenClaw 的設定和記憶
      - ./openclaw-repo:/app
      - openclaw-data:/root/.openclaw
    environment:
      - NODE_ENV=production
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
      - TELEGRAM_BOT_TOKEN=${TELEGRAM_BOT_TOKEN}
    ports:
      - "18789:18789"
    command: >
      sh -c "
        if [ ! -f package.json ]; then
          git clone https://github.com/openclaw/openclaw.git . ;
        fi &&
        npm install -g pnpm &&
        pnpm install &&
        pnpm run build &&
        node openclaw.mjs gateway --port 18789
      "
    healthcheck:
      test: ["CMD", "wget", "-q", "--spider", "http://localhost:18789/health"]
      interval: 30s
      timeout: 10s
      retries: 3

volumes:
  openclaw-data:
    driver: local

建立環境變數文件 .env：

cat > .env <<'EOF'
# 填入你的 API 金鑰
ANTHROPIC_API_KEY=sk-ant-xxxxxxxxxxxxxxxxxx
TELEGRAM_BOT_TOKEN=xxxxxxxxxx:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
EOF

# 確保 .env 不被意外提交
echo ".env" >> .gitignore

# 一鍵安裝腳本
curl -fsSL https://openclaw.ai/install.sh | bash

# 安裝完成後引導設定
openclaw onboard

# 安裝為 systemd 用戶服務
openclaw gateway install

# 設定開機後自動啟動（不需要登入）
sudo loginctl enable-linger $USER

# 確認服務狀態
systemctl --user status openclaw
openclaw health

Docker 日誌管理：

# 即時查看日誌
docker compose logs -f --tail=100 openclaw

# 日誌旋轉配置（在 docker-compose.yml 的 logging 段落）
logging:
  driver: "json-file"
  options:
    max-size: "50m"
    max-file: "5"

# 查看容器資源使用
docker stats openclaw-gateway

# 健康狀態
docker inspect --format='{{.State.Health.Status}}' openclaw-gateway

設定 Telegram 警報（容器崩潰時自動通知）：

#!/bin/bash
# 存為 /usr/local/bin/openclaw-monitor.sh

CONTAINER="openclaw-gateway"
BOT_TOKEN="你的 Telegram Bot Token"
CHAT_ID="你的 Chat ID"

STATUS=$(docker inspect --format='{{.State.Status}}' $CONTAINER 2>/dev/null)

if [ "$STATUS" != "running" ]; then
  curl -s -X POST "https://api.telegram.org/bot$BOT_TOKEN/sendMessage" \
    -d "chat_id=$CHAT_ID" \
    -d "text=⚠️ OpenClaw 容器異常：狀態=$STATUS，正在重啟..."
  docker compose -f ~/openclaw/docker-compose.yml restart openclaw
fi

設定 cron 每 5 分鐘監控（在終端機執行 crontab -e）：

# 每 5 分鐘監控一次容器狀態
*/5 * * * * /usr/local/bin/openclaw-monitor.sh

# 每天凌晨 3 點自動更新 OpenClaw
0 3 * * * cd ~/openclaw && git pull && docker compose up -d --build

使用 Watchtower 自動更新 Docker 容器：

# 在 docker-compose.yml 加入 Watchtower 服務
  watchtower:
    image: containrrr/watchtower
    container_name: watchtower
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - WATCHTOWER_SCHEDULE=0 0 3 * * *  # 每天凌晨 3 點檢查更新
      - WATCHTOWER_NOTIFICATIONS=telegram
      - WATCHTOWER_NOTIFICATION_TELEGRAM_TOKEN=${TELEGRAM_BOT_TOKEN}
      - WATCHTOWER_NOTIFICATION_TELEGRAM_CHATS=${TELEGRAM_CHAT_ID}
    restart: unless-stopped

多實例 docker-compose.yml 配置範例：

services:
  openclaw-personal:
    image: node:22-alpine
    container_name: openclaw-personal
    ports:
      - "18789:18789"
    volumes:
      - ./openclaw-repo:/app
      - openclaw-personal-data:/root/.openclaw
    environment:
      - ANTHROPIC_API_KEY=${PERSONAL_API_KEY}
      - TELEGRAM_BOT_TOKEN=${PERSONAL_BOT_TOKEN}
    restart: unless-stopped

  openclaw-dev:
    image: node:22-alpine
    container_name: openclaw-dev
    ports:
      - "18790:18789"
    volumes:
      - ./openclaw-repo:/app
      - openclaw-dev-data:/root/.openclaw
    environment:
      - ANTHROPIC_API_KEY=${DEV_API_KEY}
      - TELEGRAM_BOT_TOKEN=${DEV_BOT_TOKEN}
    restart: unless-stopped

volumes:
  openclaw-personal-data:
  openclaw-dev-data: