Ansible

Ansible 문서는 OpenClaw 공식 문서(install/ansible)를 한국어로 정리한 가이드입니다. Automated, hardened OpenClaw installation with Ansible, Tailscale VPN, and firewall isolation 명령·설정 키·코드 예시는 공식 문서를 그대로 보존하며, 해석과 절차 안내는 한국어로 제공합니다. 최종 동작은 설치된 CLI 버전과 공식 원문을 확인하세요.

핵심 요약

Automated, hardened OpenClaw installation with Ansible, Tailscale VPN, and firewall isolation

한국어 가이드 범위: install/ansible 경로의 설정·명령·제약·예시를 학습용으로 재구성합니다.

문서 구성

공식 문서의 주요 섹션은 다음과 같습니다.

사전 요구사항
What you get
빠른 시작
What gets installed
Post-install setup
Quick commands
Check service status
View live logs
Restart gateway
Channel login (run as openclaw user)
Security architecture
Manual installation
Updating
트러블슈팅
Advanced configuration
관련 문서

상세 내용

본문

Deploy OpenClaw to production servers with openclaw-ansible, an automated installer with a security-first architecture.

사전 요구사항

Requirement	Details
OS	Debian 11+ or Ubuntu 20.04+
Access	Root or sudo privileges
Network	Internet connection for package installation
Ansible	2.14+ (installed automatically by the quick-start script)

What you get

주요 항목:

Firewall-first security: UFW + Docker isolation (only SSH + Tailscale reachable)
Tailscale VPN for remote access without exposing services publicly
Docker for isolated sandbox containers with localhost-only bindings
Systemd integration with hardening, auto-starting on boot
One-command setup

빠른 시작

curl -fsSL https://raw.githubusercontent.com/openclaw/openclaw-ansible/main/install.sh | bash

What gets installed

Tailscale (mesh VPN for secure remote access) 2. UFW firewall (SSH + Tailscale ports only) 3. Docker CE + Compose V2 (default agent sandbox backend) 4. Node.js and pnpm (OpenClaw requires Node 22.22.3+, 24.15+, or 25.9+; Node 24 is recommended) 5. OpenClaw, installed host-based, not containerized 6. A systemd service with security hardening

Post-install setup

The post-install script guides you through configuring OpenClaw.

sudo -i -u openclaw

openclaw channels login --channel <name>

sudo systemctl status openclaw
    sudo journalctl -u openclaw -f

Quick commands


### Check service status

sudo systemctl status openclaw

### View live logs

sudo journalctl -u openclaw -f

### Restart gateway

sudo systemctl restart openclaw

### Channel login (run as openclaw user)

sudo -i -u openclaw openclaw channels login --channel ```

> 위 내용은 공식 문서의 해당 섹션 요지입니다. 세부 플래그·기본값은 원문과 `--help`를 확인하세요.

### Security architecture

1. Firewall (UFW): only SSH (22) and Tailscale (41641/udp) exposed publicly 2. VPN (Tailscale): gateway reachable only via the VPN mesh 3. Docker isolation: `DOCKER-USER` iptables chain prevents external port exposure 4. Systemd hardening: `NoNewPrivileges`, `PrivateTmp`, unprivileged user

> 위 내용은 공식 문서의 해당 섹션 요지입니다. 세부 플래그·기본값은 원문과 `--help`를 확인하세요.

```bash
nmap -p- YOUR_SERVER_IP

Manual installation

Or run the playbook directly and then run the setup script manually:

sudo apt update && sudo apt install -y ansible git

git clone https://github.com/openclaw/openclaw-ansible.git
    cd openclaw-ansible

ansible-galaxy collection install -r requirements.yml

./run-playbook.sh

Updating

The Ansible installer sets up OpenClaw for manual updates; see Updating for the standard flow.

cd openclaw-ansible
./run-playbook.sh

트러블슈팅

Make sure you are running as the openclaw user:

주요 항목:

Connect via Tailscale VPN first; the gateway is only reachable that way by design.
SSH (port 22) is always allowed.

# Check logs
    sudo journalctl -u openclaw -n 100

    # Verify permissions
    sudo ls -la /opt/openclaw

    # Test manual start
    sudo -i -u openclaw
    cd ~/openclaw
    openclaw gateway run

# Verify Docker is running
    sudo systemctl status docker

    # Check sandbox image
    sudo docker images | grep openclaw-sandbox

    # Build the sandbox image if missing (requires a source checkout)
    cd /opt/openclaw/openclaw
    sudo -u openclaw ./scripts/sandbox-setup.sh
    # For npm installs without a source checkout, see
    # https://docs.openclaw.ai/gateway/sandboxing#images-and-setup

sudo -i -u openclaw
    openclaw channels login --channel <name>

Advanced configuration

For detailed security architecture and troubleshooting, see the openclaw-ansible repo:

주요 항목:

Security Architecture
Technical Details
Troubleshooting Guide

실습 체크리스트

공식 문서와 로컬 버전을 대조합니다: https://docs.openclaw.ai/install/ansible
관련 CLI는 openclaw --help 및 하위 명령 --help로 옵션을 확인합니다.
설정 변경 시 openclaw config / openclaw doctor로 유효성을 검사합니다.
Gateway·채널·플러그인 변경 후에는 필요 시 Gateway를 재시작합니다.

자주 쓰는 명령·설정 예시

curl -fsSL https://raw.githubusercontent.com/openclaw/openclaw-ansible/main/install.sh | bash

sudo -i -u openclaw

openclaw channels login --channel <name>

sudo systemctl status openclaw
    sudo journalctl -u openclaw -f

# Check service status
sudo systemctl status openclaw

# View live logs
sudo journalctl -u openclaw -f

# Restart gateway
sudo systemctl restart openclaw

# Channel login (run as openclaw user)
sudo -i -u openclaw
openclaw channels login --channel <name>

nmap -p- YOUR_SERVER_IP

Ansible

핵심 요약

Automated, hardened OpenClaw installation with Ansible, Tailscale VPN, and firewall isolation

한국어 가이드 범위: install/ansible 경로의 설정·명령·제약·예시를 학습용으로 재구성합니다.

문서 구성

공식 문서의 주요 섹션은 다음과 같습니다.

사전 요구사항
What you get
빠른 시작
What gets installed
Post-install setup
Quick commands
Check service status
View live logs
Restart gateway
Channel login (run as openclaw user)
Security architecture
Manual installation
Updating
트러블슈팅
Advanced configuration
관련 문서

상세 내용

본문

Deploy OpenClaw to production servers with openclaw-ansible, an automated installer with a security-first architecture.

사전 요구사항

Requirement	Details
OS	Debian 11+ or Ubuntu 20.04+
Access	Root or sudo privileges
Network	Internet connection for package installation
Ansible	2.14+ (installed automatically by the quick-start script)

What you get

주요 항목:

Firewall-first security: UFW + Docker isolation (only SSH + Tailscale reachable)
Tailscale VPN for remote access without exposing services publicly
Docker for isolated sandbox containers with localhost-only bindings
Systemd integration with hardening, auto-starting on boot
One-command setup

빠른 시작

curl -fsSL https://raw.githubusercontent.com/openclaw/openclaw-ansible/main/install.sh | bash

What gets installed

Tailscale (mesh VPN for secure remote access) 2. UFW firewall (SSH + Tailscale ports only) 3. Docker CE + Compose V2 (default agent sandbox backend) 4. Node.js and pnpm (OpenClaw requires Node 22.22.3+, 24.15+, or 25.9+; Node 24 is recommended) 5. OpenClaw, installed host-based, not containerized 6. A systemd service with security hardening

Post-install setup

The post-install script guides you through configuring OpenClaw.

sudo -i -u openclaw

openclaw channels login --channel <name>

sudo systemctl status openclaw
    sudo journalctl -u openclaw -f

Quick commands


### Check service status

sudo systemctl status openclaw

### View live logs

sudo journalctl -u openclaw -f

### Restart gateway

sudo systemctl restart openclaw

### Channel login (run as openclaw user)

sudo -i -u openclaw openclaw channels login --channel ```

> 위 내용은 공식 문서의 해당 섹션 요지입니다. 세부 플래그·기본값은 원문과 `--help`를 확인하세요.

### Security architecture

1. Firewall (UFW): only SSH (22) and Tailscale (41641/udp) exposed publicly 2. VPN (Tailscale): gateway reachable only via the VPN mesh 3. Docker isolation: `DOCKER-USER` iptables chain prevents external port exposure 4. Systemd hardening: `NoNewPrivileges`, `PrivateTmp`, unprivileged user

> 위 내용은 공식 문서의 해당 섹션 요지입니다. 세부 플래그·기본값은 원문과 `--help`를 확인하세요.

```bash
nmap -p- YOUR_SERVER_IP

Manual installation

Or run the playbook directly and then run the setup script manually:

sudo apt update && sudo apt install -y ansible git

git clone https://github.com/openclaw/openclaw-ansible.git
    cd openclaw-ansible

ansible-galaxy collection install -r requirements.yml

./run-playbook.sh

Updating

The Ansible installer sets up OpenClaw for manual updates; see Updating for the standard flow.

cd openclaw-ansible
./run-playbook.sh

트러블슈팅

Make sure you are running as the openclaw user:

주요 항목:

Connect via Tailscale VPN first; the gateway is only reachable that way by design.
SSH (port 22) is always allowed.

# Check logs
    sudo journalctl -u openclaw -n 100

    # Verify permissions
    sudo ls -la /opt/openclaw

    # Test manual start
    sudo -i -u openclaw
    cd ~/openclaw
    openclaw gateway run

# Verify Docker is running
    sudo systemctl status docker

    # Check sandbox image
    sudo docker images | grep openclaw-sandbox

    # Build the sandbox image if missing (requires a source checkout)
    cd /opt/openclaw/openclaw
    sudo -u openclaw ./scripts/sandbox-setup.sh
    # For npm installs without a source checkout, see
    # https://docs.openclaw.ai/gateway/sandboxing#images-and-setup

sudo -i -u openclaw
    openclaw channels login --channel <name>

Advanced configuration

For detailed security architecture and troubleshooting, see the openclaw-ansible repo:

주요 항목:

Security Architecture
Technical Details
Troubleshooting Guide

실습 체크리스트

공식 문서와 로컬 버전을 대조합니다: https://docs.openclaw.ai/install/ansible
관련 CLI는 openclaw --help 및 하위 명령 --help로 옵션을 확인합니다.
설정 변경 시 openclaw config / openclaw doctor로 유효성을 검사합니다.
Gateway·채널·플러그인 변경 후에는 필요 시 Gateway를 재시작합니다.

자주 쓰는 명령·설정 예시

curl -fsSL https://raw.githubusercontent.com/openclaw/openclaw-ansible/main/install.sh | bash

sudo -i -u openclaw

openclaw channels login --channel <name>

sudo systemctl status openclaw
    sudo journalctl -u openclaw -f

# Check service status
sudo systemctl status openclaw

# View live logs
sudo journalctl -u openclaw -f

# Restart gateway
sudo systemctl restart openclaw

# Channel login (run as openclaw user)
sudo -i -u openclaw
openclaw channels login --channel <name>

nmap -p- YOUR_SERVER_IP

Ansible

핵심 요약

문서 구성

상세 내용

본문

사전 요구사항

What you get

빠른 시작

What gets installed

Post-install setup

Quick commands

Manual installation

Updating

트러블슈팅

Advanced configuration

관련 문서

실습 체크리스트

자주 쓰는 명령·설정 예시

관련 링크

관련 가이드

Ansible

핵심 요약

문서 구성

상세 내용

본문

사전 요구사항

What you get

빠른 시작

What gets installed

Post-install setup

Quick commands

Manual installation

Updating

트러블슈팅

Advanced configuration

관련 문서

실습 체크리스트

자주 쓰는 명령·설정 예시

관련 링크

관련 가이드