Install without a root-owned home
- 1
Install as the intended service user
Avoid creating config and workspace files as root unless root is the long-term owner.
curl -fsSL https://openclaw.ai/install.sh | bash - 2
Inspect version and config
Confirm supported Node/CLI and read-only health.
node -v openclaw --version openclaw doctor - 3
Install the user service
Run as the account that should own state and workspaces.
openclaw gateway install openclaw gateway status --json
Headless-server boundaries
- Enable user lingering only when the Gateway must survive logout.
- Do not publish an unauthenticated Gateway port to the internet.
- Back up state, workspace, auth profile data, and secret-provider material together.
- Use `openclaw gateway status --require-rpc` when monitoring must prove more than a listening process.
Primary sources
Verify against the owner.
Content snapshot follows official docs main at the recorded commit; the current package metadata reported 2026.8.1 when verified. Your installed release and live CLI schema remain authoritative.