furyhawk/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-07-21 10:16:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs: document docker cli dns override

Browse Source 
Signed-off-by: sallyom <somalley@redhat.com>
This commit is contained in:
sallyom
2026-05-07 15:18:25 -04:00
committed by Sally O'Malley
parent 95a1c91531
commit 484a289be3
2 changed files with 27 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+1
View File
@@ -148,6 +148,7 @@ Docs: https://docs.openclaw.ai
### Fixes
- Docs/Docker: document a local Compose override for Docker Desktop DNS failures in the shared-network `openclaw-cli` sidecar, keeping the default compose setup hardened while unblocking `openclaw plugins install` when users opt in. Fixes #79018. Thanks @Jason-Vaughan.
- Compute plugin callback authorization dynamically [AI]. (#78866) Thanks @pgondhi987.
- fix(active-memory): require admin scope for global toggles [AI]. (#78863) Thanks @pgondhi987.
- Honor owner enforcement for native commands [AI]. (#78864) Thanks @pgondhi987.
docs/install/docker.md
+26
View File
@@ -335,6 +335,32 @@ See [ClawDock](/install/clawdock) for the full helper guide.
`no-new-privileges` on both `openclaw-gateway` and `openclaw-cli`.
</Accordion>
<Accordion title="Docker Desktop DNS failures in openclaw-cli">
Some Docker Desktop setups fail DNS lookups from the shared-network
`openclaw-cli` sidecar after `NET_RAW` is dropped, which shows up as
`EAI_AGAIN` during npm-backed commands such as `openclaw plugins install`.
Keep the default hardened compose file for normal gateway operation. The
local override below loosens the CLI container's security posture by
restoring Docker's default capabilities, so use it only for the one-off CLI
command that needs package registry access, not as your default Compose
invocation:
```bash
printf '%s\n' \
'services:' \
' openclaw-cli:' \
' cap_drop: !reset []' \
> docker-compose.cli-no-dropped-caps.local.yml
docker compose -f docker-compose.yml -f docker-compose.cli-no-dropped-caps.local.yml run --rm openclaw-cli plugins install <package>
```
If you already created a long-running `openclaw-cli` container, recreate it
with the same override. `docker compose exec` and `docker exec` cannot
change Linux capabilities on an already-created container.
</Accordion>
<Accordion title="Permissions and EACCES">
The image runs as `node` (uid 1000). If you see permission errors on
`/home/node/.openclaw`, make sure your host bind mounts are owned by uid 1000: