KWeaver Deploy

中文 | English

One-click deployment of KWeaver onto a single-node Kubernetes cluster.

This deploy repository is the unified online installer and supports these parallel entrypoints:

kweaver-dip: full-product path; automatically installs kweaver-core, isf, Kubernetes, and required data services
kweaver-core: core-capability path; suitable for Core-only deployment or a smaller first-time evaluation
isf: install the ISF base platform only
infra: install Kubernetes and dependency services only

From an open-source user perspective, the main goal is usually to get a working environment quickly. For that reason, kweaver-dip install is the default recommendation. Use kweaver-core install when you only want the Core capability set.

📋 Prerequisites

System requirements

Item	`kweaver-core` minimum	`kweaver-dip` minimum	Recommended
OS	CentOS 8+, OpenEuler 23+	CentOS 8+, OpenEuler 23+	CentOS 8+
CPU	16 cores	24 cores	32 cores
Memory	48 GB	48 GB	64 GB
Disk	200 GB	200 GB	500 GB

Network requirements

The deployment scripts need access to these domains:

Domain	Purpose
`mirrors.aliyun.com`	RPM package mirrors
`mirrors.tuna.tsinghua.edu.cn`	`containerd.io` RPM mirror
`registry.aliyuncs.com`	Kubernetes component images
`swr.cn-east-3.myhuaweicloud.com`	KWeaver application image registry
`repo.huaweicloud.com`	Helm binary download
`kweaver-ai.github.io`	KWeaver Helm chart repository

🚀 Quick Start

Host prerequisites

Run install commands as root.

# 1. Disable firewall
systemctl stop firewalld && systemctl disable firewalld

# 2. Disable swap
swapoff -a && sed -i '/ swap / s/^/#/' /etc/fstab

# 3. Set SELinux to permissive if needed
setenforce 0

# 4. Install containerd.io
dnf install containerd.io

Choose an install path

Path	Best for	Automatically installs
`kweaver-dip install`	Fastest way to try the full product	`kweaver-core`, `isf`, K8s, MariaDB, Redis, Kafka, ZooKeeper, OpenSearch, ingress-nginx
`kweaver-core install --minimum`	Smallest first-time evaluation, without auth and business-domain	K8s, data services, ingress-nginx
`kweaver-core install`	Core-only deployment with the full Core module set	`isf`, K8s, data services, ingress-nginx
`isf install`	Preparing the base platform first	K8s, data services, ingress-nginx

Path A: fastest full deployment (recommended)

# 1. Clone the unified deploy repository
git clone https://github.com/kweaver-ai/deploy.git
cd deploy

# 2. (Recommended) Pre-install host check / fix
sudo bash ./preflight.sh --fix -y

# 3. (Optional) Customize ingress ports (default 80/443)
export INGRESS_NGINX_HTTP_PORT=8080
export INGRESS_NGINX_HTTPS_PORT=8443

# 4. Install KWeaver DIP
bash ./deploy.sh kweaver-dip install

# 5. Install the OpenClaw DIP plugin
openclaw plugins install ./openclaw-extensions/dip

The installer prompts for the access address and auto-detects the API server address. You can also provide them explicitly:

bash ./deploy.sh kweaver-dip install \
  --access_address=<your-ip-or-domain> \
  --api_server_address=<your-ip>

After deployment, authorize OpenClaw to link with DIP Studio:

# 1. Find the pending device request
openclaw devices list

# 2. Approve it
openclaw devices approve <Request>

After authorization, you can access:

https://<node-ip>/dip-hub: DIP Hub

Default username: admin
Initial password: eisoo.com

Path B: lighter KWeaver Core installation

# 1. Clone the unified deploy repository
git clone https://github.com/kweaver-ai/deploy.git
cd deploy

# 2. (Recommended) Pre-install host check / fix
sudo bash ./preflight.sh --fix -y

# 3. Install KWeaver Core
# Minimum installation: recommended for first-time evaluation
bash ./deploy.sh kweaver-core install --minimum

# Full installation: includes auth and business-domain
bash ./deploy.sh kweaver-core install

# 4. (Recommended) Post-install bootstrap
bash ./onboard.sh        # interactive
bash ./onboard.sh -y     # non-interactive
bash ./onboard.sh --help # show all flags

To skip interactive address prompts:

bash ./deploy.sh kweaver-core install \
  --access_address=<your-ip-or-domain> \
  --api_server_address=<your-ip>

Full preflight / onboard flow, ISF dual-CLI auth and Mermaid diagrams: see help/en/install.md — Post-install: onboard.sh.

📦 Deployment Model

This repository exposes multiple product-level entrypoints. kweaver-dip and kweaver-core are both first-class install commands.

`kweaver-dip` install flow

Install or repair single-node Kubernetes, local-path storage, and ingress-nginx.
Install or repair data services: MariaDB, Redis, Kafka, ZooKeeper, and OpenSearch.
Check whether isf and kweaver-core are already present, and install them if they are missing.
Deploy the KWeaver DIP application charts.

`kweaver-core` install flow

Install or repair single-node Kubernetes, local-path storage, and ingress-nginx.
Install or repair data services: MariaDB, Redis, Kafka, ZooKeeper, and OpenSearch.
Deploy isf as needed based on the install mode; minimum mode skips auth and business-domain.
Deploy the KWeaver Core application charts.

Notes:

kweaver-dip is the best fit when you want the full experience with the fewest manual steps.
kweaver-core is a better fit for Core-only use, smaller validation, or staged installation before DIP.
isf can be installed independently if you want the platform base first.
The auto-installed dependency set currently does not include MongoDB. If your environment requires MongoDB, configure it manually as an external dependency in the config file.

🔧 Usage

Recommended commands

# Fastest full-product installation
./deploy.sh kweaver-dip install

# Install a specific DIP version
./deploy.sh kweaver-dip install --version 0.5.0

# Core-only installation (minimum mode recommended for first evaluation)
./deploy.sh kweaver-core install --minimum

# Full Core installation
./deploy.sh kweaver-core install

# Show status
./deploy.sh kweaver-dip status
./deploy.sh kweaver-core status
./deploy.sh isf status

# Uninstall application layers
./deploy.sh kweaver-dip uninstall
./deploy.sh kweaver-core uninstall

Dependency-layer and supplemental commands

# Install ISF only
./deploy.sh isf install

# Install infrastructure and data services only
./deploy.sh infra install

# Download local chart cache
./deploy.sh kweaver-dip download
./deploy.sh kweaver-core download
./deploy.sh isf download

# Cluster and pod status
kubectl get nodes
kubectl get pods -A

⚙️ Configuration

Default runtime config path:

~/.kweaver-ai/config.yaml

On the first install, if the config file does not exist, the script can generate it automatically and populate accessAddress. You can also generate it first and edit it before installation:

./deploy.sh config generate

Common scenarios:

Change only the external entrypoint: use --access_address
Re-run after config changes on an existing cluster: use --force-upgrade
Install from pre-downloaded or offline charts: use --charts_dir=<path>
Pin an aggregate release manifest: use --version or --version_file

✅ Verify deployment

# Cluster and pod status
kubectl get nodes
kubectl get pods -A

# Product status
./deploy.sh kweaver-dip status
./deploy.sh kweaver-core status
./deploy.sh isf status

📁 Project Structure

deploy/
├── deploy.sh                 # Main entry script
├── preflight.sh              # Pre-install checks / fixes
├── onboard.sh                # Core post-install bootstrap
├── conf/                     # Bundled config and static manifests
├── openclaw-extensions/      # OpenClaw plugins for DIP
├── release-manifests/        # Versioned release bill of materials
├── scripts/
│   ├── lib/                  # Common helper functions
│   ├── services/             # Product and dependency install scripts
│   └── sql/                  # Versioned SQL initialization scripts
└── .tmp/charts/              # Local chart cache generated by download

🗑️ Uninstall

Different entrypoints remove different layers:

kweaver-dip uninstall: removes only the DIP application layer, not kweaver-core, isf, or infrastructure
kweaver-core uninstall: removes only the Core application layer
k8s reset: resets the Kubernetes cluster including data services and infrastructure

# 1. Remove the DIP application layer
./deploy.sh kweaver-dip uninstall

# 2. Remove Core / ISF if no longer needed
./deploy.sh kweaver-core uninstall
./deploy.sh isf uninstall

# 3. Reset infrastructure last
./deploy.sh k8s reset

🔍 Troubleshooting

CoreDNS is not ready

# Check whether firewall is disabled
systemctl status firewalld

# Restart CoreDNS
kubectl -n kube-system delete pod -l k8s-app=kube-dns

If pods cannot reach the external network, check whether the host DNS server supports TCP 53. If not, run:

kubectl -n kube-system edit core-dns

Add prefer_udp under forward . /etc/resolv.conf {, then restart the CoreDNS pods.

Pods fail to pull images

# Check network connectivity
curl -I https://swr.cn-east-3.myhuaweicloud.com

# Check containerd config
cat /etc/containerd/config.toml

Kubernetes apt / yum source missing or 404

preflight.sh --check-only reports one of these in strict mode (default):

[FAIL] Deprecated Kubernetes apt source detected (packages.cloud.google.com) ...
[FAIL] apt has no install candidate for kubeadm — Kubernetes apt source missing or unreachable.
[FAIL] dnf/yum has no install candidate for kubeadm — Kubernetes yum repo missing or unreachable.

Recommended fix (one command):

sudo bash deploy/preflight.sh --fix --fix-allow=k8s-pkgs-repo
# or, to also pre-stage containerd / helm / Node, etc.:
sudo bash deploy/preflight.sh --fix -y

preflight --fix → k8s-pkgs-repo covers both scenarios (legacy alias k8s-apt-source still works in --fix-allow):

Legacy packages.cloud.google.com source present → migrate it to pkgs.k8s.io
No K8s source configured at all → write /etc/apt/sources.list.d/kubernetes.list (or /etc/yum.repos.d/kubernetes.repo) pointing to pkgs.k8s.io/core:/stable:/<vX.Y>/deb|rpm/

Pin a specific minor with PREFLIGHT_K8S_APT_MINOR=v1.28 (default: detected from installed kubeadm, falls back to v1.28).

Manual fallback (Ubuntu/Debian):

sudo apt-mark unhold kubeadm kubelet kubectl || true
sudo apt remove -y kubeadm kubelet kubectl
sudo rm -f /etc/apt/sources.list.d/kubernetes.list
sudo rm -f /etc/apt/keyrings/kubernetes-apt-keyring.gpg
sudo mkdir -p /etc/apt/keyrings

curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.28/deb/Release.key \
  | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg

echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.28/deb/ /' \
  | sudo tee /etc/apt/sources.list.d/kubernetes.list

sudo apt update
sudo apt install -y kubelet kubeadm kubectl
sudo apt-mark hold kubelet kubeadm kubectl

Manual fallback (RHEL/CentOS/openEuler):

sudo tee /etc/yum.repos.d/kubernetes.repo > /dev/null <<'EOF'
[kubernetes]
name=Kubernetes
baseurl=https://pkgs.k8s.io/core:/stable:/v1.28/rpm/
enabled=1
gpgcheck=1
gpgkey=https://pkgs.k8s.io/core:/stable:/v1.28/rpm/repodata/repomd.xml.key
exclude=kubelet kubeadm kubectl cri-tools kubernetes-cni
EOF

sudo dnf install -y --disableexcludes=kubernetes kubeadm kubelet kubectl   # or: yum

`containerd` cannot be installed (no `containerd.io` candidate)

On stock Ubuntu (no Docker CE repo) preflight.sh reports:

[FAIL] apt has no install candidate for containerd.io OR containerd.
[FAIL] containerd not found ...

preflight --fix → containerd-install now tries containerd.io first (Docker CE repo) and falls back to the distro containerd package automatically:

sudo bash deploy/preflight.sh --fix --fix-allow=containerd-install

If both fail, the apt/yum source itself is broken. Fix apt-get update / dnf repolist first.

Strict mode and `--lenient`

preflight.sh defaults to strict mode (PREFLIGHT_STRICT=true). Items that block install AND are auto-fixable by --fix are reported as [FAIL] (so --check-only exits 1), not [WARN]:

swap, net.ipv4.ip_forward, br_netfilter / overlay modules, bridge-nf-call-*
vm.max_map_count, fs.inotify.*, ulimit -n soft
containerd not found / socket missing, kubectl, helm, overlay fs
broken apt-get update, dnf/yum repolist failures, missing kubeadm/containerd install candidate

To downgrade these back to [WARN] temporarily, for example on a small lab host:

sudo bash deploy/preflight.sh --check-only --lenient
# equivalent to: PREFLIGHT_STRICT=false PREFLIGHT_STRICT_SOURCES=false sudo bash deploy/preflight.sh

View component logs

kubectl logs -n <namespace> <pod-name>

📄 License

Apache License 2.0

Name		Name	Last commit message	Last commit date
Latest commit History 3 Commits
auto_cofig		auto_cofig
charts		charts
conf		conf
docs/plans		docs/plans
openclaw-extensions/dip		openclaw-extensions/dip
release-manifests		release-manifests
scripts		scripts
tests		tests
LICENSE		LICENSE
README.md		README.md
README.zh.md		README.zh.md
agent.json		agent.json
deploy.sh		deploy.sh
onboard.sh		onboard.sh
preflight.sh		preflight.sh

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Repository files navigation

KWeaver Deploy

📋 Prerequisites

System requirements

Network requirements

🚀 Quick Start

Host prerequisites

Choose an install path

Path A: fastest full deployment (recommended)

Path B: lighter KWeaver Core installation

📦 Deployment Model

`kweaver-dip` install flow

`kweaver-core` install flow

🔧 Usage

Recommended commands

Dependency-layer and supplemental commands

⚙️ Configuration

✅ Verify deployment

📁 Project Structure

🗑️ Uninstall

🔍 Troubleshooting

CoreDNS is not ready

Pods fail to pull images

Kubernetes apt / yum source missing or 404

`containerd` cannot be installed (no `containerd.io` candidate)

Strict mode and `--lenient`

View component logs

📄 License

About

Uh oh!

Releases

Packages

Uh oh!

Contributors

Uh oh!

Languages

Folders and files

Latest commit

History

Repository files navigation

KWeaver Deploy

📋 Prerequisites

System requirements

Network requirements

🚀 Quick Start

Host prerequisites

Choose an install path

Path A: fastest full deployment (recommended)

Path B: lighter KWeaver Core installation

📦 Deployment Model

kweaver-dip install flow

kweaver-core install flow

🔧 Usage

Recommended commands

Dependency-layer and supplemental commands

⚙️ Configuration

✅ Verify deployment

📁 Project Structure

🗑️ Uninstall

🔍 Troubleshooting

CoreDNS is not ready

Pods fail to pull images

Kubernetes apt / yum source missing or 404

containerd cannot be installed (no containerd.io candidate)

Strict mode and --lenient

View component logs

📄 License

About

Resources

License

Uh oh!

Stars

Watchers

Forks

Releases

Packages 0

Uh oh!

Contributors

Uh oh!

Languages

`kweaver-dip` install flow

`kweaver-core` install flow

`containerd` cannot be installed (no `containerd.io` candidate)

Strict mode and `--lenient`

Packages