OpenClaw Docker Image for Unraid

This repository provides a custom Docker image for OpenClaw, designed for Unraid and other systems where file permissions on mounted volumes need to match a host UID and GID.

Key Features

• User/Group ID Mapping: Supports PUID and PGID environment variables so OpenClaw writes appdata files as the expected host user.
• Root Entrypoint: Starts as root so setup and Unraid's Tailscale container hook can run, then drops to the mapped node user with gosu.
• Tailscale State: Defaults the Unraid Tailscale hook state directory to a persistent path under OpenClaw appdata.
• Automated Updates: A workflow checks upstream OpenClaw image tags on GHCR and builds missing Docker Hub tags.

Usage

docker run -d \
  --name openclaw \
  -e PUID=99 \
  -e PGID=100 \
  -e UMASK=022 \
  -e OPENCLAW_GATEWAY_TOKEN=change-me \
  -p 18789:18789 \
  -p 18790:18790 \
  -v /mnt/user/appdata/openclaw:/home/node/.openclaw \
  -v /mnt/user/appdata/openclaw/auth-profile-secrets:/home/node/.config/openclaw \
  medzin/openclaw:latest

Image Channels

• medzin/openclaw:latest is the standard Unraid wrapper image.
• medzin/openclaw:extras includes additional tools for agents: ripgrep, openssh-client, nmap, qrencode, imagemagick, ffmpeg, nftables, and debugpy.

Versioned extras tags are published as <openclaw-version>-extras, for example medzin/openclaw:1.2.3-extras.

OpenClaw refuses to bind its gateway to a container-published address without authentication. Set OPENCLAW_GATEWAY_TOKEN or OPENCLAW_GATEWAY_PASSWORD before exposing the WebUI port.

Environment Variables

The image follows the upstream OpenClaw container paths:

• OpenClaw state and config: /home/node/.openclaw
• OpenClaw workspace: /home/node/.openclaw/workspace
• Auth profile secrets: /home/node/.config/openclaw

The image also honors OpenClaw path override variables such as OPENCLAW_HOME, OPENCLAW_STATE_DIR, OPENCLAW_CONFIG_PATH, OPENCLAW_CONFIG_DIR, and OPENCLAW_WORKSPACE_DIR, but the Unraid template intentionally does not expose them. If you override an internal path, update the matching volume mount yourself.

License

This project is licensed under the MIT License - see the LICENSE file for details.