Loopzero/OpenClawLoop

1# 核心镜像：Node 22 slim 保证了环境的现代性与轻量化2FROM node:22-slim3 4# 1. 安装系统依赖5# 包含：git (拉取依赖), openssh-client (解决构建报错), build-essential/g++/make (编译原生模块), python3 (运行同步脚本)6RUN apt-get update && apt-get install -y --no-install-recommends \7    git openssh-client build-essential python3 python3-pip \8    g++ make ca-certificates \9    && rm -rf /var/lib/apt/lists/*10 11# 2. 安装 Hugging Face 命令行工具12RUN pip3 install --no-cache-dir huggingface_hub --break-system-packages13 14# 3. 构建环境优化15# 修复 Git 证书问题并将所有 SSH 协议重定向为 HTTPS16RUN update-ca-certificates && \17    git config --global http.sslVerify false && \18    git config --global url."https://github.com/".insteadOf ssh://git@github.com/19 20# 4. 全局安装 OpenClaw21RUN npm install -g openclaw@latest --unsafe-perm22 23# 5. 设置环境变量24ENV PORT=7860 \25    OPENCLAW_GATEWAY_MODE=local \26    HOME=/root27 28# 6. 核心同步引擎 (sync.py)29# 针对 OpenClaw 新版 MEMORY.md 机制进行了全路径覆盖30RUN echo 'import os, sys, tarfile\n\31from huggingface_hub import HfApi, hf_hub_download\n\32from datetime import datetime, timedelta\n\33api = HfApi()\n\34repo_id = os.getenv("HF_DATASET")\n\35token = os.getenv("HF_TOKEN")\n\36\n\37def restore():\n\38    try:\n\39        print(f"--- [SYNC] 启动恢复流程, 目标仓库: {repo_id} ---")\n\40        if not repo_id or not token: \n\41            print("--- [SYNC] 跳过恢复: 未配置 HF_DATASET 或 HF_TOKEN ---")\n\42            return False\n\43        files = api.list_repo_files(repo_id=repo_id, repo_type="dataset", token=token)\n\44        now = datetime.now()\n\45        for i in range(5):\n\46            day = (now - timedelta(days=i)).strftime("%Y-%m-%d")\n\47            name = f"backup_{day}.tar.gz"\n\48            if name in files:\n\49                print(f"--- [SYNC] 发现备份文件: {name}, 正在下载... ---")\n\50                path = hf_hub_download(repo_id=repo_id, filename=name, repo_type="dataset", token=token)\n\51                with tarfile.open(path, "r:gz") as tar: tar.extractall(path="/root/.openclaw/")\n\52                print(f"--- [SYNC] 恢复成功! 数据已覆盖至 /root/.openclaw/ ---")\n\53                return True\n\54        print("--- [SYNC] 未找到最近 5 天的备份包 ---")\n\55    except Exception as e: print(f"--- [SYNC] 恢复异常: {e} ---")\n\56\n\57def backup():\n\58    try:\n\59        day = datetime.now().strftime("%Y-%m-%d")\n\60        name = f"backup_{day}.tar.gz"\n\61        print(f"--- [SYNC] 正在执行全量备份: {name} ---")\n\62        with tarfile.open(name, "w:gz") as tar:\n\63            # 路径说明：sessions(网关历史), workspace(记忆文件), agents(配置), memory(旧版目录)\n\64            for target in ["sessions", "workspace", "agents", "memory", "openclaw.json"]:\n\65                full_path = f"/root/.openclaw/{target}"\n\66                if os.path.exists(full_path):\n\67                    tar.add(full_path, arcname=target)\n\68        api.upload_file(path_or_fileobj=name, path_in_repo=name, repo_id=repo_id, repo_type="dataset", token=token)\n\69        print(f"--- [SYNC] 备份上传成功! ---")\n\70    except Exception as e: print(f"--- [SYNC] 备份失败: {e} ---")\n\71\n\72if __name__ == "__main__":\n\73    if len(sys.argv) > 1 and sys.argv[1] == "backup": backup()\n\74    else: restore()' > /usr/local/bin/sync.py75 76# 7. 容器入口脚本 (start-openclaw)77# 负责恢复数据 -> 生成配置 -> 启动网关 -> 定时备份78RUN echo "#!/bin/bash\n\79set -e\n\80mkdir -p /root/.openclaw/sessions\n\81mkdir -p /root/.openclaw/workspace\n\82\n\83# 启动前执行数据恢复\n\84python3 /usr/local/bin/sync.py restore\n\85\n\86# 清理 API Base 地址\n\87CLEAN_BASE=\$(echo \"\$OPENAI_API_BASE\" | sed \"s|/chat/completions||g\" | sed \"s|/v1/|/v1|g\" | sed \"s|/v1\$|/v1|g\")\n\88\n\89# 生成 openclaw.json 配置文件\n\90cat > /root/.openclaw/openclaw.json <<EOF\n\91{\n\92  \"models\": {\n\93    \"providers\": {\n\94      \"siliconflow\": {\n\95        \"baseUrl\": \"\$CLEAN_BASE\",\n\96        \"apiKey\": \"\$OPENAI_API_KEY\",\n\97        \"api\": \"openai-completions\",\n\98        \"models\": [{ \"id\": \"\$MODEL\", \"name\": \"DeepSeek\", \"contextWindow\": 128000 }]\n\99      }\n\100    }\n\101  },\n\102  \"agents\": { \"defaults\": { \"model\": { \"primary\": \"siliconflow/\$MODEL\" } } },\n\103  \"gateway\": {\n\104    \"mode\": \"local\", \"bind\": \"lan\", \"port\": \$PORT,\n\105    \"trustedProxies\": [\"0.0.0.0/0\", \"10.0.0.0/8\", \"172.16.0.0/12\", \"192.168.0.0/16\"],\n\106    \"auth\": { \"mode\": \"token\", \"token\": \"\$OPENCLAW_GATEWAY_PASSWORD\" },\n\107    \"controlUi\": { \"allowInsecureAuth\": true }\n\108  }\n\109}\n\110EOF\n\111\n\112# 启动定时备份进程 (每 3 小时执行一次，增强安全性)\n\113(while true; do sleep 10800; python3 /usr/local/bin/sync.py backup; done) &\n\114\n\115# 启动 OpenClaw 网关\n\116openclaw doctor --fix\n\117exec openclaw gateway run --port \$PORT\n\118" > /usr/local/bin/start-openclaw && chmod +x /usr/local/bin/start-openclaw119 120EXPOSE 7860121CMD ["/usr/local/bin/start-openclaw"]