openclaw-基于ubuntu24安装部署

|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| root@ubuntu:~# npm config set registry https://registry.npmmirror.com root@ubuntu:~# npm config get registry |
| https://registry.npmmirror.com |

1.2安装openclaw

1.2.1一键安装脚本执行

它会自动安装Node.js等相关依赖，但还是建议自己提前安装好

|-------------------------------------------------------------------------------------------------------------------------------------------|
| root@ubuntu:~# curl -fsSL https://openclaw.ai/install.sh | sudo bash |

#安全免责声明确认，选择yes

#选择快速安装模式

#选择大模型，本次选择千问qwen cloud

#配置大模型，选择国内标准api

#保持qwen大模型

#选择对话渠道，先跳过，选择skip for now

#选择web search搜索引擎，先跳过，选择skip for now

#配置skills，选择yes

#选择一个安装skill的工具

#选择npm安装方式

#接下来都是国外的api，全部选no

#暂不配置hooks，选择skip for now

#安装完毕

1.2.2安装gateway

直接运行openclaw doctor,它将引导你配置完整，一路 yes完成。

|---------------------------------|
| root@ubuntu:~# openclaw doctor |

1.3安装后查看

1.3.1启动gateway

|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| root@ubuntu:~# openclaw gateway start |
| 🦞 OpenClaw 2026.4.11 (769908e) --- I'm the assistant your terminal demanded, not the one your sleep schedule requested. Restarted systemd service: openclaw-gateway.service |

#再次运行 openclaw doctor,把它提示的问题都修复。

1.3.2启动dashboard

2.openclaw访问

2.1查看当前能够访问的设备

|------------------------------------------------------------------------------------------------|
| root@ubuntu:~# openclaw devices list --token=334da86857df304958d17eec0976f4af1f68f88707341b9d |
| 此设备应为本机 |

2.2配置nginx反向代理

#添加域名解析

|---------------------------------|
| root@ubuntu:~# vim /etc/hosts |
| 10.9.254.72 openclaw.cywetc.com |

#安装nginx

#下载并解压域名证书

|------------------------------------------------------------------------------------------------------------------------|
| root@ubuntu:~# ll |
| -rw-r--r-- 1 root root 4943 Apr 13 15:24 22377294_cywetc.com_nginx.zip |
| root@ubuntu:~# unzip 22377294_cywetc.com_nginx.zip |
| Archive: 22377294_cywetc.com_nginx.zip Aliyun Certificate Download inflating: cywetc.com.pem inflating: cywetc.com.key |
| root@ubuntu:~# ll |
| -rw-r--r-- 1 root root 1679 Apr 13 15:20 cywetc.com.key -rw-r--r-- 1 root root 5510 Apr 13 15:20 cywetc.com.pem |
| root@ubuntu:~# mv cywetc.com.pem /etc/ssl/certs/ root@ubuntu:~# mv cywetc.com.key /etc/ssl/private/ |

#修改nginx配置

|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| root@ubuntu:~# vim /etc/nginx/conf.d/openclaw.conf |
| server { listen 80; server_name openclaw.cywetc.com cywetc.com; # 强制跳转 HTTPS (建议) return 301 https:// $server_name$ request_uri; } server { listen 443 ssl http2; server_name openclaw.cywetc.com cywetc.com; # SSL 证书路径 ssl_certificate /etc/ssl/certs/cywetc.com.pem; ssl_certificate_key /etc/ssl/private/cywetc.com.key; # SSL 安全配置 ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384; ssl_prefer_server_ciphers off; ssl_session_cache shared:SSL:10m; ssl_session_timeout 10m; #安全头 add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always; add_header X-Frame-Options DENY always; add_header X-Content-Type-Options nosniff always; add_header X-XSS-Protection "1; mode=block" always; #主代理配置 location / { proxy_pass http://127.0.0.1:18789; # 假设 OpenClaw 运行在本地 18789 端口 # 关键：传递真实 IP proxy_set_header Host $host; proxy_set_header X-Real-IP$ remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto$ scheme; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Port$ server_port; # 关键：WebSocket 支持 proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; #重要:禁用缓冲，确保实时通信 proxy_buffering off; proxy_cache off; proxy_request_buffering off; # 超时设置（长连接） proxy_connect_timeout 7d; proxy_send_timeout 7d; proxy_read_timeout 7d; #增加缓冲区大小 proxy_buffer_size 128k; proxy_buffers 4 256k; proxy_busy_buffers_size 256k; #增加最大body大小 client_max_body_size 100M; #禁用重试 proxy_next_upstream off; } #健康检查端点 location = /health { proxy_pass [http://127.0.0.1:18789/health;](http://127.0.0.1:18789/health; "http://127.0.0.1:18789/health;") proxy_set_header Host$ host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For$ proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; access_log off; #健康检查不需要长超时 proxy_connect_timeout 5s; proxy_send_timeout 5s; proxy_read_timeout 5s; } } |
| root@ubuntu:~# nginx -t |
| nginx: the configuration file /etc/nginx/nginx.conf syntax is ok nginx: configuration file /etc/nginx/nginx.conf test is successful |
| root@ubuntu:~# nginx -s reload |
| 2026/04/13 16:22:40 $notice$ 25895#25895: signal process started |
| root@ubuntu:~# systemctl restart nginx |

2.3客户端访问

添加域名解析

https://openclaw.cywetc.com/#token=334da86857df304958d17eec0976f4af1f68f88707341b9d

#服务端配置

‌"Pairing required"是 OpenClaw 设备的配对安全机制提示‌，当新设备首次连接

|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| root@ubuntu:~# openclaw devices list --token=334da86857df304958d17eec0976f4af1f68f88707341b9d |
| root@ubuntu:~# openclaw devices approve 990eb8cc-ff42-4976-b1e9-c157307645c9 --url=http://127.0.0.1:18789 --token=334da86857df304958d17eec0976f4af1f68f88707341b9d |
| 🦞 OpenClaw 2026.4.11 (769908e) --- I read logs so you can keep pretending you don't have to. │ ◇ Approved cb587265d3d537ce2d61ee67ceb8041e19d77e6bbe23f9c9250f21a46daba72a (990eb8cc-ff42-4976-b1e9-c157307645c9) |

https://openclaw.cywetc.com/#token=334da86857df304958d17eec0976f4af1f68f88707341b9d