Clawdbot
48e30b9d0e
Start OpenClaw node host on ClawdBox boot
2026-06-07 14:30:07 +10:00
c909668246
Security and reliability improvements
...
- Add SHA256 checksum verification for yq and oc downloads to prevent supply chain attacks
- Pin busybox init container to version 1.36 for consistency
- Fix gitconfig symlink to work unconditionally (survives file creation after boot)
- Document kubeconfig secret prerequisite with correct breakglass config path
Security: Protects against compromised mirrors and MITM attacks during image build
Reliability: Ensures reproducible builds and proper git config persistence
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com >
2026-03-08 00:18:39 +11:00
e039f77f0e
Enhance LLM sandbox with persistent caching, helper scripts, and improved UX
...
Added comprehensive improvements to ClawdBox for better LLM agent experience:
- Tools: Added tree, tmux, htop, strace, file, less for enhanced debugging
- Python packages: httpie, pyyaml, requests, black, ipython pre-installed
- Persistent caching: pip/npm caches now survive container restarts
- Git config persistence: .gitconfig auto-links from /data volume
- Shell improvements: colored prompt, aliases (ll, k, dc), 10k line history
- Helper scripts: ConfigMap with disk-usage, health-check, clean-workspace, install-tools
- Environment variables: TERM, TZ, DEBIAN_FRONTEND for better compatibility
- Makefile: Common operations (build, deploy, logs, shell, health-check)
- Documentation: Comprehensive README with troubleshooting and workflows
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com >
2026-03-07 23:51:26 +11:00
8fe712cda7
gemini changes
2026-03-07 23:29:56 +11:00
900f8f23aa
Harden deployment probes/fsGroup and align README runtime config
2026-03-07 22:22:40 +11:00
9c4339f22d
and fixed mount name again..
2026-02-02 19:56:50 +11:00
1e764719ca
fixed mount name
2026-02-02 19:56:16 +11:00
9e92254492
indenting fix
2026-02-02 19:55:10 +11:00
3a5333330c
mounting kubeconfig as a secret at /home/claw/.kube
2026-02-02 19:53:51 +11:00
9daa35178f
added cap_audit_write
2026-02-02 18:28:24 +11:00
8427663d71
remove cap drop
2026-02-02 16:17:16 +11:00
22472c633d
fixed indent
2026-02-02 16:03:43 +11:00
20bf6afee4
Fix SSH session crash: Disable PAM and enable stderr logging
2026-02-02 05:01:17 +00:00
6b4079c065
need priv esc for root
2026-02-02 15:51:51 +11:00
10ca1a3b5c
this is cursed
2026-02-02 15:44:50 +11:00
bf661b5cf7
Fix SSH permissions via init container copy
2026-02-02 04:43:47 +00:00
2d1c671e58
hallucination special
2026-02-02 15:23:20 +11:00
debd5d30b5
added init container
2026-02-02 15:22:09 +11:00
075ef91fa0
reverted init container
2026-02-02 15:17:41 +11:00
0dc50a4d0d
added init container
2026-02-02 15:11:21 +11:00
ddd9877848
removed seccompprofile
2026-02-02 15:01:19 +11:00
449e7f690a
reverted the claw's changes
2026-02-02 14:57:06 +11:00
fb864eb52f
Fix: Use existing ServiceAccount clawd-sa, remove duplicate SA definition
2026-02-02 03:54:22 +00:00
34b794cca2
Fix: Add dedicated ServiceAccount claw-sa, remove seccompProfile, simplify securityContext
2026-02-02 03:52:45 +00:00
d86d95dcfd
typo in sa
2026-02-02 14:49:06 +11:00
8eeee5de18
changed sa
2026-02-02 14:44:56 +11:00
2178ba7641
updated
2026-02-02 14:32:16 +11:00
c9f4e03e84
added namespace
2026-02-02 14:29:26 +11:00
f176be5ddb
staaawp putting everything in one manifest, clawman
2026-02-02 14:28:09 +11:00
776f97605e
Fix: Deployment explicit UID 1000 for anyuid SCC support
2026-02-02 03:25:13 +00:00
82ea0b2162
sc
2026-02-02 14:24:00 +11:00
a1aa960099
removed security context
2026-02-02 14:21:52 +11:00
a5fed4a656
scc
2026-02-02 14:17:31 +11:00
e731c0ac77
changed scc
2026-02-02 14:15:45 +11:00
51cb4aa795
corrected registry url (again)
2026-02-02 13:51:03 +11:00
3be9e45fac
fixed registry port
2026-02-02 13:48:45 +11:00
25859647f9
fixed namespace
2026-02-02 13:47:17 +11:00
7e15549221
seperated manifests
2026-02-02 13:37:00 +11:00
454677fd14
seperated manifests
2026-02-02 13:36:33 +11:00
4250ec3925
Add OpenShift deployment manifests
2026-02-02 00:36:46 +00:00
