OpenClaw 本地部署完全指南：从容器编排到生产级工具链安全沙箱

# 使用 pyenv 管理 Python 版本
pyenv install 3.11.8
pyenv local 3.11.8

# 关键依赖（摘自 pyproject.toml）
poetry add openclaw-core@git+https://github.com/your-fork/openclaw.git \
  langgraph==0.0.20 \
  playwright==1.40.0 \
  chromadb==0.5.0 \
  opentelemetry-api==1.21.0

/opt/openclaw/
├── compose/
│   └── docker-compose.yml
├── configs/
│   ├── agent_config.yaml      # 模型路由、温度、最大步数
│   └── tool_whitelist.yaml    # 高危命令正则黑名单
├── data/
│   ├── chroma_db/             # 向量持久化
│   ├── redis_data/            # RDB/AOF 持久化
│   └── workspace/             # 代理可操作的宿主目录（只读挂载）
└── logs/                      # 结构化 JSON 日志输出

version: '3.8'
services:
  # 1. 核心代理引擎（无状态，可水平扩展）
  agent-core:
    image: openclaw/agent:latest
    restart: unless-stopped
    ports:
      - "8000:8000"          # HTTP API 入口
    environment:
      - OPENCLAW_MODEL_PROVIDER=ollama
      - OPENCLAW_MODEL_NAME=llama3.1:70b-q4_0
      - OPENCLAW_MAX_ITERATIONS=15
      - OPENCLAW_TOKEN_BUDGET=4096
      - OTEL_EXPORTER_OTLP_ENDPOINT=http://jaeger:4318
    volumes:
      - ./configs/agent_config.yaml:/app/config.yaml:ro
      - ./logs:/app/logs
    depends_on:
      - redis-memory
      - chroma-server
      - tool-executor

  # 2. 工具执行器（高隔离，单独资源限制）
  tool-executor:
    image: openclaw/toolbox:latest
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: '2.0'
          memory: 4096M
    environment:
      - PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
      - EXECUTOR_ALLOW_NETWORK=true
      - EXECUTOR_ROOT_PATH=/workspace
    volumes:
      - ./data/workspace:/workspace:ro          # 只读保护
      - ./data/tmp_exec:/tmp/exec               # 临时可写区
      - /var/run/docker.sock:/var/run/docker.sock # 用于启动独立沙盒容器（高级）
    security_opt:
      - seccomp=./configs/seccomp-profile.json  # 严格系统调用过滤

  # 3. 记忆与状态存储
  redis-memory:
    image: redis:7.2-alpine
    command: redis-server --appendonly yes --maxmemory 2gb --maxmemory-policy allkeys-lru
    volumes:
      - ./data/redis_data:/data

  # 4. 向量数据库（RAG 上下文增强）
  chroma-server:
    image: chromadb/chroma:0.5.0
    volumes:
      - ./data/chroma_db:/chroma/chroma
    environment:
      - IS_PERSISTENT=TRUE

  # 5. 可观测性后端
  jaeger:
    image: jaegertracing/all-in-one:1.53
    ports:
      - "16686:16686"  # UI
      - "4318:4318"    # OTLP HTTP

shell:
  allowed_commands:
    - "^ls -la /workspace/.*"
    - "^cat /workspace/.*\\.(txt|log|json)$"
    - "^grep -r 'TODO' /workspace/src/.*"
  blocked_patterns:
    - "rm -rf /"
    - "curl .* | bash"
    - "chmod 777"
  default_timeout: 30  # 秒

# 在执行器内部自动注入
browser = await playwright.chromium.launch(
    headless=True,
    args=['--disable-blink-features=AutomationControlled']
)
context = await browser.new_context(
    user_agent=random_user_agent(),
    viewport={'width': 1920, 'height': 1080}
)

# 限制工具进程最大 CPU 使用率和内存
cgexec -g cpu,memory:openclaw_tools python executor.py

from opentelemetry import trace
tracer = trace.get_tracer(__name__)

with tracer.start_as_current_span("planning") as span:
    span.set_attribute("plan.step", current_step)
    span.set_attribute("tool.selected", tool_name)
    # 附加业务标签用于过滤
    span.set_attribute("session.id", session_id)

tools:
  - name: send_email
    compensation: send_retract_email  # 反向操作函数名