Update Dockerfile

Dockerfile

@@ -1,42 +1,124 @@
+# 核心镜像选择
 FROM node:22-slim
-RUN apt-get update && apt-get install -y curl git
-RUN npm install -g openclaw@latest
 
-# 创建强制使用Nvidia的配置文件
-RUN mkdir -p /root/.openclaw && cat > /root/.openclaw/openclaw.json << 'EOF'
+# 1. 基础依赖补全
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    git openssh-client build-essential python3 python3-pip \
+    g++ make ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+# 2. 安装 HF 数据交互工具
+RUN pip3 install --no-cache-dir huggingface_hub --break-system-packages
+
+# 3. 构建环境与 Git 协议优化
+RUN update-ca-certificates && \
+    git config --global http.sslVerify false && \
+    git config --global url."https://github.com/".insteadOf ssh://git@github.com/
+
+# 4. OpenClaw 核心安装
+RUN npm install -g openclaw@latest --unsafe-perm
+
+# 5. 环境变量预设
+ENV PORT=7860 \
+    OPENCLAW_GATEWAY_MODE=local \
+    HOME=/root
+
+# 6. Python 同步引擎 (sync.py)
+RUN echo 'import os, sys, tarfile
+from huggingface_hub import HfApi, hf_hub_download
+from datetime import datetime, timedelta
+api = HfApi()
+repo_id = os.getenv("HF_DATASET")
+token = os.getenv("HF_TOKEN")
+def restore():
+    try:
+        files = api.list_repo_files(repo_id=repo_id, repo_type="dataset", token=token)
+        now = datetime.now()
+        for i in range(5):
+            day = (now - timedelta(days=i)).strftime("%Y-%m-%d")
+            name = f"backup_{day}.tar.gz"
+            if name in files:
+                path = hf_hub_download(repo_id=repo_id, filename=name, repo_type="dataset", token=token)
+                with tarfile.open(path, "r:gz") as tar: tar.extractall(path="/root/.openclaw/")
+                print(f"Success: Restored from {name}")
+                return True
+    except Exception as e: print(f"Restore Error: {e}")
+def backup():
+    try:
+        day = datetime.now().strftime("%Y-%m-%d")
+        name = f"backup_{day}.tar.gz"
+        with tarfile.open(name, "w:gz") as tar:
+            if os.path.exists("/root/.openclaw/sessions"): tar.add("/root/.openclaw/sessions", arcname="sessions")
+            tar.add("/root/.openclaw/openclaw.json", arcname="openclaw.json")
+        api.upload_file(path_or_fileobj=name, path_in_repo=name, repo_id=repo_id, repo_type="dataset", token=token)
+        print(f"Backup {name} Success.")
+    except Exception as e: print(f"Backup Error: {e}")
+if __name__ == "__main__":
+    if len(sys.argv) > 1 and sys.argv[1] == "backup": backup()
+    else: restore()' > /usr/local/bin/sync.py
+
+# 7. 启动控制逻辑（NVIDIA 配置版）
+RUN echo '#!/bin/bash
+set -e
+mkdir -p /root/.openclaw/sessions
+
+# 阶段 3: 执行启动前恢复
+python3 /usr/local/bin/sync.py restore
+
+# 处理地址逻辑
+CLEAN_BASE=$(echo "$OPENAI_API_BASE" | sed "s|/chat/completions||g" | sed "s|/v1/|/v1|g" | sed "s|/v1$|/v1|g")
+
+# 阶段 2: 生成网关与模型配置（NVIDIA 版）
+cat > /root/.openclaw/openclaw.json <<EOF
 {
-  "gateway": {
-    "mode": "local",
-    "auth": {
-      "mode": "token",
-      "token": "$OPENCLAW_GATEWAY_TOKEN"
-    }
-  },
   "models": {
     "providers": {
       "nvidia": {
-        "baseUrl": "https://build.nvidia.com/v1",
-        "apiKey": "$OPENAI_API_KEY",
+        "baseUrl": "$CLEAN_BASE", 
+        "apiKey": "$OPENAI_API_KEY", 
         "api": "openai-completions",
-        "models": [
-          {
-            "id": "$MODEL",
-            "name": "Kimi K2.5",
-            "contextWindow": 256000
-          }
-        ]
+        "models": [{ 
+          "id": "$MODEL", 
+          "name": "Kimi K2.5", 
+          "contextWindow": 256000 
+        }]
       }
     }
   },
-  "agents": {
-    "defaults": {
-      "model": {
-        "primary": "nvidia/$MODEL"
-      }
+  "agents": { 
+    "defaults": { 
+      "model": { 
+        "primary": "nvidia/$MODEL" 
+      } 
+    } 
+  },
+  "gateway": {
+    "mode": "local", 
+    "bind": "lan", 
+    "port": $PORT,
+    "trustedProxies": ["0.0.0.0/0", "10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16"],
+    "auth": { 
+      "mode": "token", 
+      "token": "$OPENCLAW_GATEWAY_TOKEN" 
+    },
+    "remote": { 
+      "token": "$OPENCLAW_GATEWAY_TOKEN" 
+    },
+    "controlUi": { 
+      "allowInsecureAuth": true,
+      "dangerouslyAllowHostHeaderOriginFallback": true,
+      "dangerouslyDisableDeviceAuth": true 
     }
   }
 }
 EOF
 
-EXPOSE 3000
-CMD ["openclaw", "gateway", "run", "--port", "3000", "--verbose"]
+# 增量备份循环 (每 6 小时)
+(while true; do sleep 21600; python3 /usr/local/bin/sync.py backup; done) &
+
+openclaw doctor --fix
+exec openclaw gateway run --port $PORT
+' > /usr/local/bin/start-openclaw && chmod +x /usr/local/bin/start-openclaw
+
+EXPOSE 7860
+CMD ["/usr/local/bin/start-openclaw"]