OpenClaw Cloud Desktop — One-Click OpenClaw Agent Deployment

Why Choose OpenClaw Cloud Desktop

Solving core pain points of official Docker solution and cloud vendor deployments

🔧

Full Container Lifecycle

Official Docker solution lacks systemd, preventing in-container restart/upgrade. This project solves it perfectly with systemctl shim, supporting full lifecycle management like restart and upgrade inside containers

👁️

Visual Desktop Environment

Cloud vendor one-click deployments only provide CLI, making it impossible to observe Agent operations. This project provides a complete XFCE desktop to watch OpenClaw interact with browsers in real-time

🔒

Security Hardening

Provides no-dind variant without privileged mode, removes SSL verification bypass, restricts sudo permissions, includes health checks and vulnerability scanning

🌐

Browser-Based Desktop

No VNC client installation needed, access full Linux desktop environment directly from your browser

📦

Environment Isolation

OpenClaw, desktop, and dependencies all run inside containers without polluting the host system

⚡

One-Click Deployment

Complete installation with a single command, supporting full lifecycle management: install / upgrade / restart / uninstall

🎮

GPU Auto-Detection

Automatically detects NVIDIA GPU during installation, enables nvidia runtime if available, skips otherwise

🦞

Large-Scale Deployment

Standardized container solution enables large-scale lobster deployment, unified management of multiple OpenClaw instances

💻

Cross-Platform Support

Unified experience across Windows (PowerShell) / macOS / Linux with consistent behavior

🐳

Docker-in-Docker

Built-in dockerd inside container, OpenClaw can directly create and manage child containers without extra configuration

🌍

Multi-Architecture

Supports amd64 and arm64 architectures with automated builds and tests ensuring cross-platform compatibility

🔄

CI/CD Automation

GitHub Actions automatically builds 4 image variants with integrated security scanning and functional testing

Quick Install

Choose installation method: one-click script or Docker image

irm https://claw.ihasy.com/openclaw-kasmvnc.ps1 | iex

curl -fsSL https://claw.ihasy.com/openclaw-kasmvnc.sh | bash -s -- install

curl -fsSL https://claw.ihasy.com/openclaw-kasmvnc.sh | bash -s -- install

Prerequisites: Docker (with Docker Compose v2) · Windows requires PowerShell 5+ · macOS/Linux requires Bash

Chinese Version (China Mirrors + DinD)

docker run -d \
  --name openclaw-kasmvnc \
  --privileged \
  --shm-size=2g \
  -p 18789:18789 \
  -p 8443:8444 \
  -e OPENCLAW_GATEWAY_TOKEN=your-token-here \
  -e OPENCLAW_KASMVNC_PASSWORD=your-password-here \
  -v ~/.openclaw:/home/node/.openclaw \
  ddong8/openclaw-kasmvnc:latest

International Version (Official Sources + DinD)

docker run -d \
  --name openclaw-kasmvnc \
  --privileged \
  --shm-size=2g \
  -p 18789:18789 \
  -p 8443:8444 \
  -e OPENCLAW_GATEWAY_TOKEN=your-token-here \
  -e OPENCLAW_KASMVNC_PASSWORD=your-password-here \
  -e USE_CN_MIRROR=0 \
  -v ~/.openclaw:/home/node/.openclaw \
  ddong8/openclaw-kasmvnc:latest-intl

No-DinD Version (More Secure)

If you don't need OpenClaw to manage sub-containers, use the no-dind variant for better security (no --privileged required):

docker run -d \
  --name openclaw-kasmvnc \
  --shm-size=2g \
  -p 18789:18789 \
  -p 8443:8444 \
  -e OPENCLAW_GATEWAY_TOKEN=your-token-here \
  -e OPENCLAW_KASMVNC_PASSWORD=your-password-here \
  -v ~/.openclaw:/home/node/.openclaw \
  ddong8/openclaw-kasmvnc:latest-intl-no-dind

For more image variants and configuration, see DOCKER-en.md

Recommended Configuration

Use Alibaba Cloud Bailian API to access Chinese LLMs

1. Get API Key

Visit Alibaba Cloud Bailian Console to create an API Key for OpenClaw to call LLMs.

2. Configure openclaw.json

After installation, edit ~/.openclaw/openclaw.json (path inside container) and fill in your API Key:

{
  "mcpServers": {},
  "providers": {
    "bailian": {
      "name": "Alibaba Cloud Bailian",
      "baseUrl": "https://coding.dashscope.aliyuncs.com/v1",
      "apiKey": "sk-your-api-key-here",
      "models": [
        { "name": "qwen3.5-plus", "maxTokens": 41960 },
        { "name": "qwen3-max", "maxTokens": 41960 },
        { "name": "qwen3-coder-next", "maxTokens": 41960 },
        { "name": "qwen3-coder-plus", "maxTokens": 41960 },
        { "name": "MiniMax-M2.5", "maxTokens": 41960 },
        { "name": "glm-5", "maxTokens": 41960 },
        { "name": "glm-4.7", "maxTokens": 41960 },
        { "name": "kimi-k2.5", "maxTokens": 41960 }
      ]
    }
  },
  "selectedProvider": "bailian",
  "selectedModel": "qwen3-coder-plus"
}

⚠ Replace sk-your-api-key-here with your actual API Key

3. Supported Models

Available models through Bailian API:

Model	Provider	Features
qwen3.5-plus	Qwen	Latest generation, strong overall capability
qwen3-max	Qwen	Flagship model, top reasoning ability
qwen3-coder-next	Qwen	Code-specialized, next generation
qwen3-coder-plus	Qwen	Code-specialized, cost-effective
MiniMax-M2.5	MiniMax	Multimodal, long context
glm-5	Zhipu AI	Latest GLM generation
glm-4.7	Zhipu AI	Stable and reliable
kimi-k2.5	Moonshot	Long text understanding

Docker Image Variants

4 pre-built image variants for different use cases

Image Tag	Description	Use Case
latest	Chinese + China Mirrors + DinD	Chinese users, need Docker-in-Docker
latest-intl	International + Official Sources + DinD	International users, need Docker-in-Docker
latest-no-dind	Chinese + China Mirrors + No DinD	Chinese users, no sub-containers (more secure)
latest-intl-no-dind	International + Official Sources + No DinD	International users, no sub-containers (more secure)

Common Commands

Full lifecycle management with a single script

install

Fresh installation, build image and start service

uninstall

Stop and remove container (add --purge to delete install directory)

restart

Restart container, run after config changes to take effect

upgrade

Hot update OpenClaw to latest version without rebuilding image

status

Check container running status

logs --tail 200

View last 200 lines of logs for quick troubleshooting

FAQ

Build failed or need to clear cache?▼

Use --no-cache parameter to disable Docker build cache: ./openclaw-kasmvnc.sh install --no-cache (Windows use -NoCache).

Port already in use?▼

Specify different ports during installation: --gateway-port 28789 --https-port 9443 (Windows use -GatewayPort 28789 -HttpsPort 9443), then reinstall.

KasmVNC shows HTTPS certificate warning?▼

Default uses container self-signed certificate, this is normal. Click "Continue" in browser, or configure your own reverse proxy (Nginx / Caddy).

Black screen after entering desktop?▼

Try in order: restart → status → logs --tail 200 → upgrade.

macOS shows "chown: Operation not permitted"?▼

Some mount paths on macOS M-series may show this message, safe to ignore if container runs normally.

Why Chromium instead of Chrome?▼

Three reasons: 1) Multi-arch compatibility — Google doesn't provide ARM64 Chrome; 2) License compliance — Chrome contains closed-source plugins; 3) Clean dependencies — apt-installed Chromium integrates seamlessly with system libraries.

One-Click OpenClaw Agent Deployment