Update Dockerfile

Dockerfile

@@ -1,34 +1,210 @@
+# ========= Base =========
 FROM node:22-slim
 
-# ---------------------------
-# 系统依赖
-# ---------------------------
-RUN apt-get update && apt-get install -y \
-    curl jq python3 python3-venv python3-pip git build-essential \
- && rm -rf /var/lib/apt/lists/*
+# ========= System deps =========
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    git \
+    openssh-client \
+    build-essential \
+    python3 \
+    python3-pip \
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
 
-# ---------------------------
-# 安装 OpenClaw
-# ---------------------------
+RUN apt-get update && \
+    apt-get install -y \
+        curl \
+        jq \
+    && rm -rf /var/lib/apt/lists/*
+
+# ========= HF CLI =========
+RUN pip3 install --no-cache-dir huggingface_hub --break-system-packages
+
+# ========= Git HTTPS fallback =========
+RUN git config --global url."https://github.com/".insteadOf ssh://git@github.com/
+
+# ========= OpenClaw =========
 RUN npm install -g openclaw@latest --unsafe-perm
 
-# ---------------------------
-# 创建目录
-# ---------------------------
-RUN mkdir -p /root/.openclaw/{sessions,workspace,credentials} && chmod 700 /root/.openclaw
+COPY auto-approve.sh /usr/local/bin/auto-approve.sh
+RUN chmod +x /usr/local/bin/auto-approve.sh
 
-# ---------------------------
-# 拷贝启动脚本
-# ---------------------------
-COPY start-openclaw-slack-echo.sh /usr/local/bin/start-openclaw.sh
-RUN chmod +x /usr/local/bin/start-openclaw.sh
+
+# ========= ENV =========
+ENV PORT=7860 \
+    OPENCLAW_GATEWAY_MODE=local \
+    HOME=/root
+
+# ========= sync.py =========
+RUN cat <<'PYEOF' > /usr/local/bin/sync.py
+import os, sys, tarfile
+from huggingface_hub import HfApi, hf_hub_download
+from datetime import datetime, timedelta
+
+api = HfApi()
+repo_id = os.getenv("HF_DATASET")
+token = os.getenv("HF_TOKEN")
+
+def restore():
+    try:
+        print(f"--- [SYNC] Restore from {repo_id} ---")
+        if not repo_id or not token:
+            print("--- [SYNC] Skipped (no config) ---")
+            return
+
+        files = api.list_repo_files(repo_id=repo_id, repo_type="dataset", token=token)
+        now = datetime.now()
+
+        for i in range(5):
+            day = (now - timedelta(days=i)).strftime("%Y-%m-%d")
+            name = f"backup_{day}.tar.gz"
+
+            if name in files:
+                path = hf_hub_download(
+                    repo_id=repo_id,
+                    filename=name,
+                    repo_type="dataset",
+                    token=token
+                )
+
+                with tarfile.open(path, "r:gz") as tar:
+                    tar.extractall("/root/.openclaw/")
+                print("--- [SYNC] Restore OK ---")
+                return
+
+        print("--- [SYNC] No backup found ---")
+
+    except Exception as e:
+        print("Restore error:", e)
+
+def backup():
+    try:
+        day = datetime.now().strftime("%Y-%m-%d")
+        name = f"backup_{day}.tar.gz"
+
+        with tarfile.open(name, "w:gz") as tar:
+            for t in ["sessions","workspace","agents","memory","openclaw.json"]:
+                p=f"/root/.openclaw/{t}"
+                if os.path.exists(p):
+                    tar.add(p, arcname=t)
+
+        api.upload_file(
+            path_or_fileobj=name,
+            path_in_repo=name,
+            repo_id=repo_id,
+            repo_type="dataset",
+            token=token
+        )
+        print("--- [SYNC] Backup OK ---")
+
+    except Exception as e:
+        print("Backup error:", e)
+
+if __name__ == "__main__":
+    if len(sys.argv)>1 and sys.argv[1]=="backup":
+        backup()
+    else:
+        restore()
+PYEOF
+
+# ========= start script =========
+RUN cat <<'SHEOF' > /usr/local/bin/start-openclaw
+#!/bin/bash
+set -e
+
+mkdir -p /root/.openclaw/{sessions,workspace,credentials}
+chmod 700 /root/.openclaw
+
+# Restore state
+python3 /usr/local/bin/sync.py
+
+# Clean base url safely
+if [ -n "$OPENAI_API_BASE" ]; then
+  CLEAN_BASE=$(echo "$OPENAI_API_BASE" \
+      | sed "s|/chat/completions||g" \
+      | sed "s|/v1/|/v1|g" \
+      | sed "s|/v1$|/v1|g")
+else
+  CLEAN_BASE="https://api.siliconflow.cn/v1"
+fi
 
 # ---------------------------
-# 暴露端口
+# Slack 
 # ---------------------------
-EXPOSE 7860
+if [ -n "$SLACK_BOT_TOKEN" ]; then
+cat > /root/.openclaw/credentials/slack.json <<EOF
+{
+  "botToken":"$SLACK_BOT_TOKEN",
+  "appToken":"$SLACK_APP_TOKEN"
+}
+EOF
+fi
+
+# Write config
+cat > /root/.openclaw/openclaw.json <<EOF
+{
+  "models":{
+    "providers":{
+      "siliconflow":{
+        "baseUrl":"$CLEAN_BASE",
+        "apiKey":"$OPENAI_API_KEY",
+        "api":"openai-completions",
+        "models":[
+          {"id":"$MODEL","name":"LLM","contextWindow":128000}
+        ]
+      }
+    }
+  },
+  "agents":{
+    "defaults":{
+      "model":{"primary":"siliconflow/$MODEL"}
+    }
+  },
+  "gateway":{
+    "mode":"local",
+    "bind":"lan",
+    "port":$PORT,
+    "trustedProxies":["0.0.0.0/0"],
+    "auth":{
+      "mode":"token",
+      "token":"$OPENCLAW_GATEWAY_PASSWORD"
+    },
+    "controlUi":{"allowInsecureAuth":true}
+  },
+  "channels":{
+    "slack":{
+      "enabled":true,
+      "botToken":"$SLACK_BOT_TOKEN",
+      "appToken":"$SLACK_APP_TOKEN"
+    }
+  }
+}
+EOF
+
+# Background backup loop
+(
+while true; do
+  sleep 10800
+  python3 /usr/local/bin/sync.py backup
+done
+) &
+
+# Run doctor once
+openclaw doctor --fix || true
 
 # ---------------------------
-# 启动
+# Slack 自动 approve ，需要slack先发送消息，获得paring code
 # ---------------------------
-CMD ["/usr/local/bin/start-openclaw.sh"]
+#openclaw pairing approve slack H3CBFPEN
+
+# Start gateway foreground
+#exec openclaw gateway run --port $PORT
+openclaw gateway run --port $PORT &
+# 立即运行 auto-approve 脚本（前台）
+/usr/local/bin/auto-approve.sh
+SHEOF
+
+RUN chmod +x /usr/local/bin/start-openclaw
+
+EXPOSE 7860
+CMD ["/usr/local/bin/start-openclaw"]