更新 Dockerfile

Dockerfile

@@ -13,24 +13,34 @@ COPY Cargo.lock ./
 COPY src ./src
 RUN cargo build --release --locked
 
-# ── Stage 2: Runtime — use OpenClaw's official image (Node 22 + openclaw.mjs) ─
+# ── Stage 2: Runtime ──────────────────────────────────────────────────────────
+# Base: OpenClaw official image (Node 22 + openclaw.mjs)
 FROM ghcr.io/openclaw/openclaw:latest AS runtime
 
-# Switch to root just long enough to install tini and copy our binary
 USER root
+
+# Install: tini (pid1), curl (health-check), Python 3 + pip (LiteLLM)
 RUN apt-get update \
-    && apt-get install -y --no-install-recommends tini ca-certificates \
+    && apt-get install -y --no-install-recommends \
+        tini ca-certificates curl \
+        python3 python3-pip \
+    && pip3 install --no-cache-dir --break-system-packages litellm[proxy] \
     && rm -rf /var/lib/apt/lists/*
 
+# Copy Rust sync binary
 COPY --from=builder /app/target/release/openclaw-hf-sync /usr/local/bin/openclaw-hf-sync
 RUN chmod +x /usr/local/bin/openclaw-hf-sync
 
-# Ensure the openclaw data dir exists and is owned by the node user (uid 1000)
+# Copy startup script
+COPY start.sh /app/start.sh
+RUN chmod +x /app/start.sh
+
+# Ensure OpenClaw data dir belongs to the node user (uid 1000)
 RUN mkdir -p /home/node/.openclaw && chown -R node:node /home/node/.openclaw
 
-# ── OpenClaw port config ───────────────────────────────────────────────────────
-# HF Space expects the app to listen on 7860 (declared in README.md app_port).
-# We override OpenClaw's default (18789) so the Space health-check passes.
+# ── Port config ───────────────────────────────────────────────────────────────
+# HF Space health-check expects port 7860.
+# OpenClaw listens on OPENCLAW_API_PORT; LiteLLM proxy on 4000 (internal only).
 ENV OPENCLAW_API_PORT=7860 \
     OPENCLAW_WS_PORT=7861 \
     HOME=/home/node
@@ -40,10 +50,10 @@ EXPOSE 7860 7861
 WORKDIR /app
 USER node
 
-# ── Entrypoint ─────────────────────────────────────────────────────────────────
-# openclaw-hf-sync wraps the child process:
-#   1. pull ~/.openclaw from the HF dataset
-#   2. spawn the OpenClaw gateway (arguments after --)
-#   3. push changes back on a timer and on shutdown
+# ── Entrypoint ────────────────────────────────────────────────────────────────
+# openclaw-hf-sync:
+#   1. Pulls ~/.openclaw workspace from the HF dataset
+#   2. Spawns start.sh (LiteLLM proxy → OpenClaw gateway)
+#   3. Periodically pushes workspace changes back, and on shutdown
 ENTRYPOINT ["/usr/bin/tini", "--", "/usr/local/bin/openclaw-hf-sync"]
-CMD ["node", "openclaw.mjs", "gateway", "--allow-unconfigured"]
+CMD ["/app/start.sh"]