系统要求
Node >=22
macOS、Linux 或通过 WSL2 的 Windows
npm: ≥ 9.0.0（随 Node.js 安装）
pnpm 仅在从源代码构建时需要
--以下环境为kali linux--
┌──(root㉿kali)-[~]
└─# node -v
v22.22.0
┌──(root㉿kali)-[~]
└─# npm -v
9.2.0
┌──(root㉿kali)-[/openclaw]
└─# curl -fsSL https://openclaw.ai/install.sh | bash
? OpenClaw Installer
I'll refactor your busywork like it owes me money.
✓ Detected: linux
Install plan
OS: linux
Install method: npm
Requested version: latest
[1/3] Preparing environment
✓ Node.js v22.22.0 found
· Active Node.js: v22.22.0 (/usr/bin/node)
· Active npm: 9.2.0 (/usr/bin/npm)
[2/3] Installing OpenClaw
✓ Git already installed
· Installing OpenClaw v2026.3.8
✓ OpenClaw npm package installed
✓ OpenClaw installed
[3/3] Finalizing setup
? OpenClaw installed successfully (OpenClaw 2026.3.8 (3caab92))!
Settled in. Time to automate your life whether you're ready or not.
· Starting setup
? OpenClaw 2026.3.8 (3caab92) — If it's repetitive, I'll automate it; if it's hard, I'll bring jokes and a rollback plan.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
██░▄▄▄░██░▄▄░██░▄▄▄██░▀██░██░▄▄▀██░████░▄▄▀██░███░██
██░███░██░▀▀░██░▄▄▄██░█░█░██░█████░████░▀▀░██░█░█░██
██░▀▀▀░██░█████░▀▀▀██░██▄░██░▀▀▄██░▀▀░█░██░██▄▀▄▀▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
? OPENCLAW ?
┌ OpenClaw onboarding
│
◇ Security ─────────────────────────────────────────────────────────────────────────────────╮
│ │
│ Security warning — please read. │
│ │
│ OpenClaw is a hobby project and still in beta. Expect sharp edges. │
│ By default, OpenClaw is a personal agent: one trusted operator boundary. │
│ This bot can read files and run actions if tools are enabled. │
│ A bad prompt can trick it into doing unsafe things. │
│ │
│ OpenClaw is not a hostile multi-tenant boundary by default. │
│ If multiple users can message one tool-enabled agent, they share that delegated tool │
│ authority. │
│ │
│ If you’re not comfortable with security hardening and access control, don’t run │
│ OpenClaw. │
│ Ask someone experienced to help before enabling tools or exposing it to the internet. │
│ │
│ Recommended baseline: │
│ - Pairing/allowlists + mention gating. │
│ - Multi-user/shared inbox: split trust boundaries (separate gateway/credentials, ideally │
│ separate OS users/hosts). │
│ - Sandbox + least-privilege tools. │
│ - Shared inboxes: isolate DM sessions (`session.dmScope: per-channel-peer`) and keep │
│ tool access minimal. │
│ - Keep secrets out of the agent’s reachable filesystem. │
│ - Use the strongest available model for any bot with tools or untrusted inboxes. │
│ │
│ Run regularly: │
│ openclaw security audit --deep │
│ openclaw security audit --fix │
│ │
│ Must read: https://docs.openclaw.ai/gateway/security │
│ │
├────────────────────────────────────────────────────────────────────────────────────────────╯
│
◇ I understand this is personal-by-default and shared/multi-user use requires lock-down. Continue?
│ Yes
│
◆ Onboarding mode
│ ● QuickStart (Configure details later via openclaw configure.)
│ ○ Manual
└
--选择安装模式--
│
◇ Onboarding mode
│ QuickStart
│
◇ QuickStart ─────────────────────────╮
│ │
│ Gateway port: 18789 │
│ Gateway bind: Loopback (127.0.0.1) │
│ Gateway auth: Token (default) │
│ Tailscale exposure: Off │
│ Direct to chat channels. │
│ │
├──────────────────────────────────────╯
│
◆ Model/auth provider
│ ● OpenAI (Codex OAuth + API key)
│ ○ Anthropic
│ ○ Chutes
│ ○ vLLM
│ ○ MiniMax
│ ○ Moonshot AI (Kimi K2.5)
│ ○ xAI (Grok)
│ ○ Mistral AI
│ ○ Volcano Engine
│ ○ BytePlus
│ ○ OpenRouter
│ ○ Kilo Gateway
│ ○ Qwen
│ ○ Z.AI
│ ○ Qianfan
│ ○ Copilot
│ ○ Vercel AI Gateway
│ ○ OpenCode Zen
│ ○ Xiaomi
│ ○ Synthetic
│ ○ Together AI
│ ○ Hugging Face
│ ○ Venice AI
│ ○ LiteLLM
│ ○ Cloudflare AI Gateway
│ ○ Custom Provider
│ ○ Skip for now
└
中选择 QuickStart (Configure details later via openclaw configure.) 然后回车 接下来就是模型选择
这部分各位有什么就选那个，我这边主要讲一下如何添加里面没有的模型
选择 Custom Provider ，API Base URL 输入模型提供商的api地址（具体是什么查看各提供商的文档），我这里以火山 coding 为例，
我就是要填 https://ark.cn-beijing.volces.com/api/coding/v3 ， How do you want to provide this API key?· 选择是以明文还是环境变量的方式存储key，
这边推荐使用 环境变量 的方式即选择 Use secret reference ， Where is this API key stored? 时选择 Environment variable
然后在 Environment variable name 中输入变量名即可 Endpoint compatibility 选择 OpenAI-compatible Model ID 输入模型名称 Endpoint ID 你要修改，
就使用获取到的值 Model alias (optional) 可以自己随便起个名字，我这边就叫 huoshan-coding 整个配置自定义模型就是这样的一个添加法。
--TIP
变量需要提前输入，在 OpenClaw 安装的过程中是不能输入变量的，如果前面忘记输入则可以先 ctrl+c退出，设置完变量之后运行 openclaw config 进行重新设置
◇ Model/auth provider
│ Skip for now
Filter models by provider
│ ● All providers
│ ○ amazon-bedrock
│ ○ anthropic
│ ○ azure-openai-responses
│ ○ cerebras
│ ○ github-copilot
│ ○ google-antigravity
│ ○ google-gemini-cli
│ ○ google-vertex
│ ○ groq
│ ○ huggingface
│ ○ kimi-coding
│ ○ minimax
│ ○ minimax-cn
│ ○ mistral
│ ○ openai
│ ○ openai-codex
│ ○ opencode
│ ○ opencode-go
│ ○ openrouter
│ ○ vercel-ai-gateway
│ ○ xai
│ ○ zai
└
│
◇ Filter models by provider
│ All providers
│
◆ Default model
│ ● Keep current (default: anthropic/claude-opus-4-6)
│ ○ Enter model manually
│ ○ amazon-bedrock/anthropic.claude-3-haiku-20240307-v1:0
│ ○ amazon-bedrock/anthropic.claude-3-5-haiku-20241022-v1:0
│ ○ amazon-bedrock/anthropic.claude-haiku-4-5-20251001-v1:0
│ ○ amazon-bedrock/eu.anthropic.claude-haiku-4-5-20251001-v1:0
│ ○ amazon-bedrock/global.anthropic.claude-haiku-4-5-20251001-v1:0
│ ○ amazon-bedrock/us.anthropic.claude-haiku-4-5-20251001-v1:0
│ ○ amazon-bedrock/anthropic.claude-3-opus-20240229-v1:0
│ ○ amazon-bedrock/anthropic.claude-opus-4-20250514-v1:0
│ ○ amazon-bedrock/us.anthropic.claude-opus-4-20250514-v1:0
│ ○ amazon-bedrock/anthropic.claude-opus-4-1-20250805-v1:0
│ ○ amazon-bedrock/us.anthropic.claude-opus-4-1-20250805-v1:0
│ ○ amazon-bedrock/anthropic.claude-opus-4-5-20251101-v1:0
│ ○ amazon-bedrock/eu.anthropic.claude-opus-4-5-20251101-v1:0
│ ○ amazon-bedrock/global.anthropic.claude-opus-4-5-20251101-v1:0
│ ○ amazon-bedrock/us.anthropic.claude-opus-4-5-20251101-v1:0
│ ○ amazon-bedrock/anthropic.claude-opus-4-6-v1
│ ○ amazon-bedrock/eu.anthropic.claude-opus-4-6-v1
│ ○ amazon-bedrock/global.anthropic.claude-opus-4-6-v1
│ ○ amazon-bedrock/us.anthropic.claude-opus-4-6-v1
│ ○ amazon-bedrock/anthropic.claude-3-sonnet-20240229-v1:0
│ ○ amazon-bedrock/anthropic.claude-3-5-sonnet-20240620-v1:0
│ ○ amazon-bedrock/anthropic.claude-3-5-sonnet-20241022-v2:0
│ ○ amazon-bedrock/anthropic.claude-3-7-sonnet-20250219-v1:0
│ ○ amazon-bedrock/anthropic.claude-sonnet-4-20250514-v1:0
│ ○ amazon-bedrock/eu.anthropic.claude-sonnet-4-20250514-v1:0
│ ○ amazon-bedrock/global.anthropic.claude-sonnet-4-20250514-v1:0
│ ○ amazon-bedrock/us.anthropic.claude-sonnet-4-20250514-v1:0
│ ○ amazon-bedrock/anthropic.claude-sonnet-4-5-20250929-v1:0
│ ○ amazon-bedrock/eu.anthropic.claude-sonnet-4-5-20250929-v1:0
│ ○ amazon-bedrock/global.anthropic.claude-sonnet-4-5-20250929-v1:0
│ ○ amazon-bedrock/us.anthropic.claude-sonnet-4-5-20250929-v1:0
│ ○ amazon-bedrock/anthropic.claude-sonnet-4-6
│ ○ amazon-bedrock/eu.anthropic.claude-sonnet-4-6
│ ○ amazon-bedrock/global.anthropic.claude-sonnet-4-6
│ ○ amazon-bedrock/us.anthropic.claude-sonnet-4-6
│ ○ amazon-bedrock/cohere.command-r-v1:0
│ ○ amazon-bedrock/cohere.command-r-plus-v1:0
│ ○ amazon-bedrock/deepseek.r1-v1:0
│ ...
└
│
◇ Default model
│ Keep current (default: anthropic/claude-opus-4-6)
│
◇ Model check ───────────────────────────────────────────────────────────────────────────╮
│ │
│ No auth configured for provider "anthropic". The agent may fail until credentials are │
│ added. │
│ │
├─────────────────────────────────────────────────────────────────────────────────────────╯
│
◇ Channel status ────────────────────────────╮
│ │
│ Telegram: needs token │
│ WhatsApp (default): not linked │
│ Discord: needs token │
│ Slack: needs tokens │
│ Signal: needs setup │
│ signal-cli: missing (signal-cli) │
│ iMessage: needs setup │
│ imsg: missing (imsg) │
│ IRC: not configured │
│ Google Chat: not configured │
│ LINE: not configured │
│ Feishu: install plugin to enable │
│ Google Chat: install plugin to enable │
│ Nostr: install plugin to enable │
│ Microsoft Teams: install plugin to enable │
│ Mattermost: install plugin to enable │
│ Nextcloud Talk: install plugin to enable │
│ Matrix: install plugin to enable │
│ BlueBubbles: install plugin to enable │
│ LINE: install plugin to enable │
│ Zalo: install plugin to enable │
│ Zalo Personal: install plugin to enable │
│ Synology Chat: install plugin to enable │
│ Tlon: install plugin to enable │
│ │
├─────────────────────────────────────────────╯
│
◇ How channels work ───────────────────────────────────────────────────────────────────────╮
│ │
│ DM security: default is pairing; unknown DMs get a pairing code. │
│ Approve with: openclaw pairing approve │
│ Public DMs require dmPolicy="open" + allowFrom=["*"]. │
│ Multi-user DMs: run: openclaw config set session.dmScope "per-channel-peer" (or │
│ "per-account-channel-peer" for multi-account channels) to isolate sessions. │
│ Docs: channels/pairing │
│ │
│ Telegram: simplest way to get started — register a bot with @BotFather and get going. │
│ WhatsApp: works with your own number; recommend a separate phone + eSIM. │
│ Discord: very well supported right now. │
│ IRC: classic IRC networks with DM/channel routing and pairing controls. │
│ Google Chat: Google Workspace Chat app with HTTP webhook. │
│ Slack: supported (Socket Mode). │
│ Signal: signal-cli linked device; more setup (David Reagans: "Hop on Discord."). │
│ iMessage: this is still a work in progress. │
│ LINE: LINE Messaging API webhook bot. │
│ Feishu: 飞书/Lark enterprise messaging with doc/wiki/drive tools. │
│ Nostr: Decentralized protocol; encrypted DMs via NIP-04. │
│ Microsoft Teams: Bot Framework; enterprise support. │
│ Mattermost: self-hosted Slack-style chat; install the plugin to enable. │
│ Nextcloud Talk: Self-hosted chat via Nextcloud Talk webhook bots. │
│ Matrix: open protocol; install the plugin to enable. │
│ BlueBubbles: iMessage via the BlueBubbles mac app + REST API. │
│ Zalo: Vietnam-focused messaging platform with Bot API. │
│ Zalo Personal: Zalo personal account via QR code login. │
│ Synology Chat: Connect your Synology NAS Chat to OpenClaw with full agent capabilities. │
│ Tlon: decentralized messaging on Urbit; install the plugin to enable. │
│ │
├───────────────────────────────────────────────────────────────────────────────────────────╯
│
◆ Select channel (QuickStart)
│ ● Telegram (Bot API) (recommended · newcomer-friendly)
│ ○ WhatsApp (QR link)
│ ○ Discord (Bot API)
│ ○ IRC (Server + Nick)
│ ○ Google Chat (Chat API)
│ ○ Slack (Socket Mode)
│ ○ Signal (signal-cli)
│ ○ iMessage (imsg)
│ ○ LINE (Messaging API)
│ ○ Feishu/Lark (飞书)
│ ○ Nostr (NIP-04 DMs)
│ ○ Microsoft Teams (Bot Framework)
│ ○ Mattermost (plugin)
│ ○ Nextcloud Talk (self-hosted)
│ ○ Matrix (plugin)
│ ○ BlueBubbles (macOS app)
│ ○ Zalo (Bot API)
│ ○ Zalo (Personal Account)
│ ○ Synology Chat (Webhook)
│ ○ Tlon (Urbit)
│ ○ Skip for now
└
│
◇ Select channel (QuickStart)
│ Skip for now
Updated ~/.openclaw/openclaw.json
Workspace OK: ~/.openclaw/workspace
Sessions OK: ~/.openclaw/agents/main/sessions
│
◇ Web search ────────────────────────────────────────╮
│ │
│ Web search lets your agent look things up online. │
│ Choose a provider and paste your API key. │
│ Docs: https://docs.openclaw.ai/tools/web │
│ │
├─────────────────────────────────────────────────────╯
│
◆ Search provider
│ ● Brave Search (Structured results · country/language/time filters)
│ ○ Gemini (Google Search)
│ ○ Grok (xAI)
│ ○ Kimi (Moonshot)
│ ○ Perplexity Search
│ ○ Skip for now
└
│
◇ Search provider
│ Skip for now
│
◇ Skills status ─────────────╮
│ │
│ Eligible: 4 │
│ Missing requirements: 40 │
│ Unsupported on this OS: 7 │
│ Blocked by allowlist: 0 │
│ │
├─────────────────────────────╯
│
◆ Configure skills now? (recommended)
│ ● Yes / ○ No
└
---以上根据需要，后面配置模型和沟通工具
----配置技能---
│
◇ Configure skills now? (recommended)
│ Yes
│
◆ Install missing skill dependencies
│ ◻ Skip for now (Continue without installing dependencies)
│ ◻ ? 1password
│ ◻ ? blogwatcher
│ ◻ ? blucli
│ ◻ ? camsnap
│ ◻ ? clawhub
│ ◻ ?️ eightctl
│ ◻ ♊️ gemini
│ ◻ ? gifgrep
│ ◻ ? github
│ ◻ ? gog
│ ◻ ? goplaces
│ ◻ ? himalaya
│ ◻ ? mcporter
│ ◻ ? nano-banana-pro
│ ◻ ? nano-pdf
│ ◻ ? obsidian
│ ◻ ?️ openai-whisper
│ ◻ ? openhue
│ ◻ ? oracle
│ ◻ ? ordercli
│ ◻ ?️ sag
│ ◻ ? songsee
│ ◻ ? sonoscli
│ ◻ ? summarize
│ ◻ ?️ video-frames
│ ◻ ? wacli
│ ◻ ? xurl
└
--后续按需添加--
│
◇ Install missing skill dependencies
│ Skip for now
│
◆ Set GOOGLE_PLACES_API_KEY for goplaces?
│ ○ Yes / ● No
└
----无Google KEY-------全部NO------
│
◇ Install missing skill dependencies
│ Skip for now
│
◇ Set GOOGLE_PLACES_API_KEY for goplaces?
│ No
│
◇ Set GEMINI_API_KEY for nano-banana-pro?
│ No
│
◇ Set NOTION_API_KEY for notion?
│ No
│
◇ Set OPENAI_API_KEY for openai-image-gen?
│ No
│
◇ Set OPENAI_API_KEY for openai-whisper-api?
│ No
│
◇ Set ELEVENLABS_API_KEY for sag?
│ No
│
◇ Hooks ──────────────────────────────────────────────────────────────────╮
│ │
│ Hooks let you automate actions when agent commands are issued. │
│ Example: Save session context to memory when you issue /new or /reset. │
│ │
│ Learn more: https://docs.openclaw.ai/automation/hooks │
│ │
├──────────────────────────────────────────────────────────────────────────╯
│
◆ Enable hooks?
│ ◻ Skip for now
│ ◻ ? boot-md
│ ◻ ? bootstrap-extra-files
│ ◻ ? command-logger
│ ◻ ? session-memory
└
建议只勾选 session-memory 就够了，最实用，能让 AI 记住之前聊过的内容。
其他的初次使用先跳过，之后熟悉了再开启。用空格键勾选，回车确认。
│
◆ Enable hooks?
│ ◻ Skip for now
│ ◻ ? boot-md
│ ◻ ? bootstrap-extra-files
│ ◻ ? command-logger
│ ◼ ? session-memory (Save session context to memory when /new or /reset command is issued)
└
├─────────────────────────────────────────────────────────────────╯
│
◇
Health check failed: gateway closed (1006 abnormal closure (no close frame)): no close reason
Gateway target: ws://127.0.0.1:18789
Source: local loopback
Config: /root/.openclaw/openclaw.json
Bind: loopback
│
◇ Health check help ────────────────────────────────╮
│ │
│ Docs: │
│ https://docs.openclaw.ai/gateway/health │
│ https://docs.openclaw.ai/gateway/troubleshooting │
│ │
├────────────────────────────────────────────────────╯
│
◇ Optional apps ────────────────────────╮
│ │
│ Add nodes for extra features: │
│ - macOS app (system + notifications) │
│ - iOS app (camera/canvas) │
│ - Android app (camera/canvas) │
│ │
├────────────────────────────────────────╯
│
◇ Control UI ───────────────────────────────────────────────────────────────────────────────╮
│ │
│ Web UI: http://127.0.0.1:18789/ │
│ Web UI (with token): │
│ http://127.0.0.1:18789/#token=1992bedff68a50f181439725a2209b765093a542c58b4967 │
│ Gateway WS: ws://127.0.0.1:18789 │
│ Gateway: not detected (gateway closed (1006 abnormal closure (no close frame)): no close │
│ reason) │
│ Docs: https://docs.openclaw.ai/web/control-ui │
│ │
├────────────────────────────────────────────────────────────────────────────────────────────╯
│
◇ Workspace backup ────────────────────────────────────────╮
│ │
│ Back up your agent workspace. │
│ Docs: https://docs.openclaw.ai/concepts/agent-workspace │
│ │
├───────────────────────────────────────────────────────────╯
│
◇ Security ──────────────────────────────────────────────────────╮
│ │
│ Running agents on your computer is risky — harden your setup: │
│ https://docs.openclaw.ai/security │
│ │
├─────────────────────────────────────────────────────────────────╯
│
◇ Shell completion ───────────────────────────────────────────────────────╮
│ │
│ Shell completion installed. Restart your shell or run: source ~/.zshrc │
│ │
├──────────────────────────────────────────────────────────────────────────╯
│
◇ Dashboard ready ────────────────────────────────────────────────────────────────╮
│ │
│ Dashboard link (with token): │
│ http://127.0.0.1:18789/#token=1992bedff68a50f181439725a2209b765093a542c58b4967 │
│ Copy/paste this URL in a browser on this machine to control OpenClaw. │
│ No GUI detected. Open from your computer: │
│ ssh -N -L 18789:127.0.0.1:18789 kali@172.168.8.81 │
│ Then open: │
│ http://localhost:18789/ │
│ http://localhost:18789/#token=1992bedff68a50f181439725a2209b765093a542c58b4967 │
│ Docs: │
│ https://docs.openclaw.ai/gateway/remote │
│ https://docs.openclaw.ai/web/control-ui │
│ │
├──────────────────────────────────────────────────────────────────────────────────╯
│
◇ Web search ───────────────────────────────────────╮
│ │
│ Web search was skipped. You can enable it later: │
│ openclaw configure --section web │
│ │
│ Docs: https://docs.openclaw.ai/tools/web │
│ │
├────────────────────────────────────────────────────╯
│
◇ What now ─────────────────────────────────────────────────────────────╮
│ │
│ What now: https://openclaw.ai/showcase ("What People Are Building"). │
│ │
├────────────────────────────────────────────────────────────────────────╯
│
└ Onboarding complete. Use the dashboard link above to control OpenClaw.
--安装后验证版本--
┌──(root㉿kali)-[/openclaw]
└─# openclaw --version
OpenClaw 2026.3.8 (3caab92)
初始化完成后，OpenClaw 会提示重新加载 shell 配置。
如果在新的终端窗口中找不到 openclaw 命令，请尝试执行以下命令或打开新的终端窗口：
source ~/.bashrc
--以上只本地可以访问，需开启其它访问
---开启局域网访问
修改 OpenClaw 的的配置文件 openclaw.json 在 gateway 中将
"gateway": {
"port": 18789,
"mode": "local",
"bind": "loopback",
"auth": {
"mode": "token",
"token": "c9a81263a0c584b00xx6400d92b72da3"
},
修改为
"gateway": {
"port": 18789,
"mode": "local",
"bind": "lan",
"controlUi": {
"dangerouslyAllowHostHeaderOriginFallback": true,
"allowInsecureAuth": true,
"dangerouslyDisableDeviceAuth": true
},
"auth": {
"mode": "token",
"token": "c9a81263a0c584b0xxxx6400d92b72da3"
},
其实主要就修改了一个字段的值，将 bind 字段从 loopback 修改为了 lan，然后有添加了几个字段
"controlUi": {
"dangerouslyAllowHostHeaderOriginFallback": true,
"allowInsecureAuth": true,
"dangerouslyDisableDeviceAuth": true
},
将上面的添加到 gateway 中就行了，然后在终端中输入 openclaw gateway restart
┌──(root㉿kali)-[/openclaw]
└─# openclaw gateway restart
? OpenClaw 2026.3.8 (3caab92) — Like having a senior engineer on call, except I don't bill hourly or sigh audibly.
Gateway service disabled.
Start with: openclaw gateway install
Start with: openclaw gateway
Start with: systemctl --user start openclaw-gateway.service
配置OK！
web 浏览器打开：
http://IP:18789/ 开始调教你的随身小M
附：
---OpenClaw 目录说明
非root用户
配置路径：~/.openclaw
数据路径：~/.npm-global/lib/node_modules/openclaw
root用户
配置路径：/root/.openclaw/openclaw.json`
数据路径：/root/.npm-global/lib/node_modules/openclaw
使用以下命令快速诊断问题
openclaw status --all
最佳的一键诊断报告，包含所有状态信息
openclaw gateway status
检查守护进程和 RPC 连接状态
openclaw doctor
自动修复常见配置问题