openclaw.net/Dockerfile at main · clawdotnet/openclaw.net · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
# ── Stage 1: Build + Publish (NativeAOT) ────────────────────────────────
# Tests run in the CI build-and-test job; Docker only builds the binary.
FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build

# Install native AOT prerequisites (clang, zlib)
RUN apt-get update && \
    apt-get install -y --no-install-recommends clang zlib1g-dev && \
    rm -rf /var/lib/apt/lists/*

WORKDIR /src

# Copy build props for layer caching
COPY Directory.Build.props ./

# Copy csproj files individually for restore caching
COPY src/OpenClaw.Core/OpenClaw.Core.csproj        src/OpenClaw.Core/
COPY src/OpenClaw.Agent/OpenClaw.Agent.csproj       src/OpenClaw.Agent/
COPY src/OpenClaw.Channels/OpenClaw.Channels.csproj src/OpenClaw.Channels/
COPY src/OpenClaw.Gateway/OpenClaw.Gateway.csproj   src/OpenClaw.Gateway/
COPY src/OpenClaw.PluginKit/OpenClaw.PluginKit.csproj src/OpenClaw.PluginKit/

# Restore (cached unless csproj files change)
RUN dotnet restore src/OpenClaw.Gateway/OpenClaw.Gateway.csproj

# Copy all source
COPY src/ src/
COPY compat/ compat/

# Publish Gateway as NativeAOT single-file binary
RUN dotnet publish src/OpenClaw.Gateway/OpenClaw.Gateway.csproj \
    -c Release \
    -o /app

# Create memory directory in build stage (chiseled images don't have mkdir)
RUN mkdir -p /app/memory

# ── Stage 2: Runtime (minimal, no SDK) ─────────────────────────────────
FROM mcr.microsoft.com/dotnet/runtime-deps:10.0-noble-chiseled AS runtime

# Non-root user (chiseled images use app user by default)
WORKDIR /app

COPY --from=build --chown=1654:1654 /app .

# Default environment variables (safe public-bind defaults).
# Note: Program.cs binds to `OpenClaw:BindAddress` + `OpenClaw:Port` (not ASPNETCORE_URLS).
ENV OpenClaw__BindAddress=0.0.0.0 \
    OpenClaw__Port=18789 \
    OpenClaw__Memory__StoragePath=/app/memory \
    OpenClaw__Tooling__AllowShell=false \
    OpenClaw__Tooling__AllowedReadRoots__0=/app/workspace \
    OpenClaw__Tooling__AllowedWriteRoots__0=/app/workspace \
    OpenClaw__Plugins__Enabled=false

EXPOSE 18789

HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
    CMD ["/app/OpenClaw.Gateway", "--health-check"]

ENTRYPOINT ["/app/OpenClaw.Gateway"]