openclaw-golden (sha256:18161d20e0b9a1d41273a865a97611d9bd351bce37d4e73c984b29e6aaa9ecbe)

Published 2026-09-28 17:52:44 +00:00 by lmathias

Pull the image from the command line:

docker pull git.buzzword.lol/buzzword/openclaw-golden@sha256:18161d20e0b9a1d41273a865a97611d9bd351bce37d4e73c984b29e6aaa9ecbe

Digest

sha256:18161d20e0b9a1d41273a865a97611d9bd351bce37d4e73c984b29e6aaa9ecbe

For more information on the Container registry, see the documentation.

# debian.sh --arch 'amd64' out/ 'bookworm' '@1783900800'

RUN /bin/sh -c groupadd --gid 1000 node && useradd --uid 1000 --gid node --shell /bin/bash --create-home node # buildkit

ENV NODE_VERSION=24.18.0

RUN /bin/sh -c ARCH= OPENSSL_ARCH= && dpkgArch="$(dpkg --print-architecture)" && case "${dpkgArch##*-}" in amd64) ARCH='x64' OPENSSL_ARCH='linux-x86_64';; ppc64el) ARCH='ppc64le' OPENSSL_ARCH='linux-ppc64le';; s390x) ARCH='s390x' OPENSSL_ARCH='linux*-s390x';; arm64) ARCH='arm64' OPENSSL_ARCH='linux-aarch64';; armhf) ARCH='armv7l' OPENSSL_ARCH='linux-armv4';; *) echo "unsupported architecture"; exit 1 ;; esac && set -ex && apt-get update && apt-get install -y ca-certificates curl wget gnupg dirmngr xz-utils libatomic1 --no-install-recommends && rm -rf /var/lib/apt/lists/* && export GNUPGHOME="$(mktemp -d)" && for key in 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz" && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc && gpgconf --kill all && rm -rf "$GNUPGHOME" && grep " node-v$NODE_VERSION-linux-$ARCH.tar.xz\$" SHASUMS256.txt | sha256sum -c - && tar -xJf "node-v$NODE_VERSION-linux-$ARCH.tar.xz" -C /usr/local --strip-components=1 --no-same-owner && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt && find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name "$OPENSSL_ARCH" -exec rm -rf {} \; && apt-mark auto '.*' > /dev/null && find /usr/local -type f -executable -exec ldd '{}' ';' | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); print so }' | sort -u | xargs -r dpkg-query --search | cut -d: -f1 | sort -u | xargs -r apt-mark manual && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false && ln -s /usr/local/bin/node /usr/local/bin/nodejs && node --version && npm --version && rm -rf /tmp/* # buildkit

ENV YARN_VERSION=1.22.22

RUN /bin/sh -c set -ex && savedAptMark="$(apt-mark showmanual)" && apt-get update && apt-get install -y ca-certificates curl wget gnupg dirmngr --no-install-recommends && rm -rf /var/lib/apt/lists/* && export GNUPGHOME="$(mktemp -d)" && for key in 6A010C5166006599AA17F08146C2130DFD2497F5 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc" && gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && gpgconf --kill all && rm -rf "$GNUPGHOME" && mkdir -p /opt && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg && rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && apt-mark auto '.*' > /dev/null && { [ -z "$savedAptMark" ] || apt-mark manual $savedAptMark > /dev/null; } && find /usr/local -type f -executable -exec ldd '{}' ';' | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); print so }' | sort -u | xargs -r dpkg-query --search | cut -d: -f1 | sort -u | xargs -r apt-mark manual && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false && yarn --version && rm -rf /tmp/* # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

CMD ["node"]

ARG OPENCLAW_VERSION=2026.7.1

RUN |1 OPENCLAW_VERSION=2026.7.1 /bin/sh -c apt-get update && apt-get install -y --no-install-recommends ca-certificates curl git && rm -rf /var/lib/apt/lists/* && npm install -g "openclaw@${OPENCLAW_VERSION}" && npm cache clean --force # buildkit

COPY image/claude-cli-steer-patch.js /opt/golden/claude-cli-steer-patch.js # buildkit

RUN |1 OPENCLAW_VERSION=2026.7.1 /bin/sh -c node --check /opt/golden/claude-cli-steer-patch.js && node /opt/golden/claude-cli-steer-patch.js # buildkit

RUN |1 OPENCLAW_VERSION=2026.7.1 /bin/sh -c apt-get update && apt-get install -y --no-install-recommends ffmpeg && rm -rf /var/lib/apt/lists/* && ffmpeg -nostdin -hide_banner -loglevel error -f lavfi -i "sine=frequency=440:duration=1" -ac 1 -ar 48000 -c:a libopus -b:a 64k /tmp/voice-gate.ogg && rm /tmp/voice-gate.ogg && ffmpeg -version > /tmp/ffmpeg-version && head -1 /tmp/ffmpeg-version && rm /tmp/ffmpeg-version && echo "ffmpeg OK" # buildkit

RUN |1 OPENCLAW_VERSION=2026.7.1 /bin/sh -c apt-get update && apt-get install -y --no-install-recommends chromium fontconfig fonts-dejavu-core fonts-liberation && rm -rf /var/lib/apt/lists/* && test -x /usr/bin/chromium && fc-match sans > /tmp/font-probe && test -s /tmp/font-probe && head -1 /tmp/font-probe && rm /tmp/font-probe && echo "chromium OK: /usr/bin/chromium, Schriften aufloesbar" # buildkit

ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium

ENV PUPPETEER_NO_SANDBOX=1

COPY image/chromium.d/xdg-tmpfs /etc/chromium.d/xdg-tmpfs # buildkit

ARG CLAUDE_CODE_VERSION=2.1.283

RUN |2 OPENCLAW_VERSION=2026.7.1 CLAUDE_CODE_VERSION=2.1.283 /bin/sh -c npm install -g "@anthropic-ai/claude-code@${CLAUDE_CODE_VERSION}" && mv /usr/local/bin/claude /usr/local/bin/claude-orig && npm cache clean --force # buildkit

COPY image/claude-wrapper.sh /usr/local/bin/claude # buildkit

COPY image/claude-cli-restrict.js /opt/golden/claude-cli-restrict.js # buildkit

RUN |2 OPENCLAW_VERSION=2026.7.1 CLAUDE_CODE_VERSION=2.1.283 /bin/sh -c chmod 0755 /usr/local/bin/claude && node --check /opt/golden/claude-cli-restrict.js && node /opt/golden/claude-cli-restrict.js --check-sdk /usr/local/lib/node_modules/@anthropic-ai/claude-code/sdk-tools.d.ts && claude --version >/dev/null && echo "claude wrapper OK: $(claude --version)" # buildkit

COPY /clawctl /usr/local/bin/clawctl # buildkit

COPY /mail-gateway /usr/local/bin/mail-gateway # buildkit

RUN |2 OPENCLAW_VERSION=2026.7.1 CLAUDE_CODE_VERSION=2.1.283 /bin/sh -c set -eu; chmod 0755 /usr/local/bin/mail-gateway; rc=0; timeout -k 5 30 env -i /usr/local/bin/mail-gateway > /tmp/mg-inactive 2>&1 || rc=$?; if [ "$rc" -eq 124 ] || [ "$rc" -eq 137 ]; then echo "FEHLER: mail-gateway unkonfiguriert endete nicht von selbst" >&2; echo "(Zeitgrenze erreicht, rc=$rc). Ausgabe bis dahin:" >&2; cat /tmp/mg-inactive >&2; exit 1; fi; if [ "$rc" -ne 0 ]; then echo "FEHLER: mail-gateway unkonfiguriert muss Exit 0 sein. Ausgabe:" >&2; cat /tmp/mg-inactive >&2; exit 1; fi; grep -q inaktiv /tmp/mg-inactive || { echo "FEHLER: Exit 0 ohne 'inaktiv'-Meldung — was lief da?" >&2; cat /tmp/mg-inactive >&2; exit 1; }; rm /tmp/mg-inactive; echo "mail-gateway OK: unkonfiguriert Exit 0, inaktiv" # buildkit

ARG BREW_VERSION=6.0.18

ARG BREW_COMMIT=5b90e281d4e0c8fbd6ca4d8358276fb305b8d0bd

RUN |4 OPENCLAW_VERSION=2026.7.1 CLAUDE_CODE_VERSION=2.1.283 BREW_VERSION=6.0.18 BREW_COMMIT=5b90e281d4e0c8fbd6ca4d8358276fb305b8d0bd /bin/sh -c set -eu; git clone --depth 1 --branch "${BREW_VERSION}" https://github.com/Homebrew/brew /opt/golden/brew-seed/Homebrew; actual="$(git -C /opt/golden/brew-seed/Homebrew rev-parse HEAD)"; if [ "$actual" != "${BREW_COMMIT}" ]; then echo "Homebrew-Tag ${BREW_VERSION} zeigt auf $actual," >&2; echo "gepinnt ist ${BREW_COMMIT}. Ein verschobener Tag ist genau das," >&2; echo "wogegen der Commit-Pin da ist." >&2; exit 1; fi; mkdir -p /opt/golden/brew-seed/bin; ln -s ../Homebrew/bin/brew /opt/golden/brew-seed/bin/brew; chown -R node:node /opt/golden/brew-seed; su node -s /bin/sh -c '/opt/golden/brew-seed/bin/brew --version' >/dev/null; echo "brew seed OK: ${BREW_VERSION}" # buildkit

COPY contracts/ /opt/golden/contracts/ # buildkit

COPY image/templates/ /opt/golden/templates/ # buildkit

COPY image/workspaces/ /opt/golden/workspaces/ # buildkit

COPY /opt/golden/skills/ /opt/golden/skills/ # buildkit

ARG BRAVE_PLUGIN_VERSION=2026.7.1

ARG BRAVE_PLUGIN_SHA256=f5198ea18ea0adebc376c669b8e5e1100781f07ec2d9e24e86c90cb82acb039c

RUN |6 OPENCLAW_VERSION=2026.7.1 CLAUDE_CODE_VERSION=2.1.283 BREW_VERSION=6.0.18 BREW_COMMIT=5b90e281d4e0c8fbd6ca4d8358276fb305b8d0bd BRAVE_PLUGIN_VERSION=2026.7.1 BRAVE_PLUGIN_SHA256=f5198ea18ea0adebc376c669b8e5e1100781f07ec2d9e24e86c90cb82acb039c /bin/sh -c set -eu; printf '%s %s\n' "${BRAVE_PLUGIN_SHA256}" /tmp/brave-plugin.tgz > /tmp/brave.sum; sha256sum -c /tmp/brave.sum; rm -f /tmp/brave.sum; mkdir -p /opt/golden/plugins; tar xzf /tmp/brave-plugin.tgz -C /opt/golden/plugins; mv /opt/golden/plugins/package /opt/golden/plugins/brave; grep -q '"id": "brave"' /opt/golden/plugins/brave/openclaw.plugin.json; grep -q "\"version\": \"${BRAVE_PLUGIN_VERSION}\"" /opt/golden/plugins/brave/package.json; runtime_version=$(node -p "require('/usr/local/lib/node_modules/openclaw/package.json').version"); [ "$runtime_version" = "${BRAVE_PLUGIN_VERSION}" ] || { echo "FEHLER: Laufzeit $runtime_version, brave-plugin ${BRAVE_PLUGIN_VERSION} — die beiden gehoeren versionsgleich." >&2; exit 1; }; chmod -R a+rX /opt/golden/plugins; echo "brave-plugin OK: versionsgleich zur Laufzeit (${BRAVE_PLUGIN_VERSION}), Manifest-Id brave" # buildkit

ARG LLAMA_PLUGIN_VERSION=2026.7.1

ARG LLAMA_PLUGIN_SHA256=e7e8b354ac90ceb0eb31a9b28883736e1097bb09f760314dce115ac43486a8a1

ARG NODE_LLAMA_CPP_VERSION=3.19.0

WORKDIR /opt/golden/plugins/llama-cpp

RUN |9 OPENCLAW_VERSION=2026.7.1 CLAUDE_CODE_VERSION=2.1.283 BREW_VERSION=6.0.18 BREW_COMMIT=5b90e281d4e0c8fbd6ca4d8358276fb305b8d0bd BRAVE_PLUGIN_VERSION=2026.7.1 BRAVE_PLUGIN_SHA256=f5198ea18ea0adebc376c669b8e5e1100781f07ec2d9e24e86c90cb82acb039c LLAMA_PLUGIN_VERSION=2026.7.1 LLAMA_PLUGIN_SHA256=e7e8b354ac90ceb0eb31a9b28883736e1097bb09f760314dce115ac43486a8a1 NODE_LLAMA_CPP_VERSION=3.19.0 /bin/sh -c set -eu; node -e "const p=require('./package.json'); delete p.devDependencies; require('fs').writeFileSync('package.json', JSON.stringify(p, null, 2))"; node -e "const f='npm-shrinkwrap.json'; const s=JSON.parse(require('fs').readFileSync(f,'utf8')); for (const [k,v] of Object.entries(s.packages||{})) { if (v.dev || String(v.resolved||'').startsWith('workspace:') || String(v.version||'').startsWith('workspace:')) delete s.packages[k]; } require('fs').writeFileSync(f, JSON.stringify(s, null, 2))"; npm install --omit=dev --no-audit --no-fund --silent; rm -rf node_modules/@node-llama-cpp/linux-x64-cuda node_modules/@node-llama-cpp/linux-x64-cuda-ext node_modules/@node-llama-cpp/linux-x64-vulkan node_modules/@node-llama-cpp/linux-arm64 node_modules/@node-llama-cpp/linux-armv7l; grep -q '"id": "llama-cpp"' openclaw.plugin.json; node -e "const v=require('./node_modules/node-llama-cpp/package.json').version; if (v !== '${NODE_LLAMA_CPP_VERSION}') { console.error('node-llama-cpp ' + v + ' statt ${NODE_LLAMA_CPP_VERSION}'); process.exit(1); }"; test -d node_modules/@node-llama-cpp/linux-x64; ln -s /usr/local/lib/node_modules/openclaw node_modules/openclaw; chmod -R a+rX /opt/golden/plugins/llama-cpp; echo "llama-cpp-Plugin OK: ${LLAMA_PLUGIN_VERSION}, node-llama-cpp ${NODE_LLAMA_CPP_VERSION}, CPU-x64" # buildkit

ARG EMBED_MODEL_SHA256=6fa0c02a9c302be6f977521d399b4de3a46310a4f2621ee0063747881b673f67

ARG EMBED_MODEL_URL=https://huggingface.co/ggml-org/embeddinggemma-300m-qat-q8_0-GGUF/resolve/66f974f8cd48cc3b9c41c516b95508e75b4bee64/embeddinggemma-300m-qat-Q8_0.gguf

RUN |11 OPENCLAW_VERSION=2026.7.1 CLAUDE_CODE_VERSION=2.1.283 BREW_VERSION=6.0.18 BREW_COMMIT=5b90e281d4e0c8fbd6ca4d8358276fb305b8d0bd BRAVE_PLUGIN_VERSION=2026.7.1 BRAVE_PLUGIN_SHA256=f5198ea18ea0adebc376c669b8e5e1100781f07ec2d9e24e86c90cb82acb039c LLAMA_PLUGIN_VERSION=2026.7.1 LLAMA_PLUGIN_SHA256=e7e8b354ac90ceb0eb31a9b28883736e1097bb09f760314dce115ac43486a8a1 NODE_LLAMA_CPP_VERSION=3.19.0 EMBED_MODEL_SHA256=6fa0c02a9c302be6f977521d399b4de3a46310a4f2621ee0063747881b673f67 EMBED_MODEL_URL=https://huggingface.co/ggml-org/embeddinggemma-300m-qat-q8_0-GGUF/resolve/66f974f8cd48cc3b9c41c516b95508e75b4bee64/embeddinggemma-300m-qat-Q8_0.gguf /bin/sh -c set -eu; mkdir -p /opt/golden/models; f=/opt/golden/models/embeddinggemma-300m-qat-Q8_0.gguf; printf '%s %s\n' "${EMBED_MODEL_SHA256}" "$f" > model.sum; i=0; until curl -fsSL --connect-timeout 30 --speed-limit 1024 --speed-time 60 -C - -o "$f" "${EMBED_MODEL_URL}" || sha256sum -c --status model.sum; do i=$((i+1)); if [ "$i" -ge 8 ]; then echo "Modell-Download nach 8 Versuchen aufgegeben." >&2; exit 1; fi; echo "Modell-Download unterbrochen (Versuch $i), setze in 5s fort" >&2; sleep 5; done; sha256sum -c model.sum; rm -f model.sum; chmod -R a+rX /opt/golden/models; echo "Embedding-Modell OK: SHA-256 verifiziert" # buildkit

WORKDIR /

COPY image/bootstrap/ /opt/golden/bootstrap/ # buildkit

COPY image/entrypoint.sh /usr/local/bin/golden-entrypoint.sh # buildkit

RUN |11 OPENCLAW_VERSION=2026.7.1 CLAUDE_CODE_VERSION=2.1.283 BREW_VERSION=6.0.18 BREW_COMMIT=5b90e281d4e0c8fbd6ca4d8358276fb305b8d0bd BRAVE_PLUGIN_VERSION=2026.7.1 BRAVE_PLUGIN_SHA256=f5198ea18ea0adebc376c669b8e5e1100781f07ec2d9e24e86c90cb82acb039c LLAMA_PLUGIN_VERSION=2026.7.1 LLAMA_PLUGIN_SHA256=e7e8b354ac90ceb0eb31a9b28883736e1097bb09f760314dce115ac43486a8a1 NODE_LLAMA_CPP_VERSION=3.19.0 EMBED_MODEL_SHA256=6fa0c02a9c302be6f977521d399b4de3a46310a4f2621ee0063747881b673f67 EMBED_MODEL_URL=https://huggingface.co/ggml-org/embeddinggemma-300m-qat-q8_0-GGUF/resolve/66f974f8cd48cc3b9c41c516b95508e75b4bee64/embeddinggemma-300m-qat-Q8_0.gguf /bin/sh -c mkdir -p /home/node/.openclaw/agents /home/node/.openclaw/identity /home/node/.openclaw/devices /home/node/.openclaw/state /home/node/.openclaw/credentials /home/node/.openclaw/media /home/node/.openclaw/logs /home/node/.openclaw/workspace-default /home/node/.openclaw/workspace-theming /home/node/.openclaw/workspace-guest /home/node/.openclaw/workspace-mail/outbox /home/node/.openclaw/workspace-mail/memory /home/node/.openclaw/mail-context /home/node/.openclaw/cron /home/node/.openclaw/extensions /var/lib/mail-gateway /home/node/.claude /opt/tenant/postinstall.d /home/linuxbrew/.linuxbrew /run/golden /run/golden-attest && touch /home/node/.openclaw/workspace-mail/MEMORY.md && chown -R node:node /home/node/.openclaw /home/node/.claude /opt/tenant /home/linuxbrew /run/golden /run/golden-attest /var/lib/mail-gateway # buildkit

ENV HOME=/home/node

ENV OPENCLAW_HOME=/home/node

ENV OPENCLAW_CONFIG_PATH=/run/golden/openclaw.json

ENV OPENCLAW_STATE_DIR=/home/node/.openclaw

ENV GOLDEN_CONTAINER=agent

ENV GOLDEN_FEATURES=

ENV PATH=/home/linuxbrew/.linuxbrew/bin:/home/linuxbrew/.linuxbrew/sbin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

ENV HOMEBREW_NO_ANALYTICS=1

ENV HOMEBREW_NO_AUTO_UPDATE=1

USER node

WORKDIR /home/node

LABEL org.opencontainers.image.source=https://git.buzzword.lol/buzzword/openclaw-golden

EXPOSE [18789/tcp]

HEALTHCHECK {Test:[CMD clawctl healthcheck] Interval:10s Timeout:20s StartPeriod:5m0s StartInterval:0s Retries:6}

ENTRYPOINT ["/usr/local/bin/golden-entrypoint.sh"]

CMD ["gateway"]

Key	Value
org.opencontainers.image.source	https://git.buzzword.lol/buzzword/openclaw-golden

Details

Container

2026-09-28 17:52:44 +00:00

OCI / Docker

linux/amd64

Repository website

1.3 GiB

Versions (5) View all

main

2026-09-28

sha-3f9b627c6

2026-09-28

sha-6b283b831

2026-09-28

sha-b0806fa3c

2026-09-27

sha-3850d7047

2026-09-17

openclaw-golden (sha256:18161d20e0b9a1d41273a865a97611d9bd351bce37d4e73c984b29e6aaa9ecbe)

Installation

Image layers

Labels