Oracle Cloud

Oracle Cloud 문서는 OpenClaw 공식 문서(install/oracle)를 한국어로 정리한 가이드입니다. Host OpenClaw on Oracle Cloud's Always Free ARM tier 명령·설정 키·코드 예시는 공식 문서를 그대로 보존하며, 해석과 절차 안내는 한국어로 제공합니다. 최종 동작은 설치된 CLI 버전과 공식 원문을 확인하세요.

핵심 요약

Host OpenClaw on Oracle Cloud's Always Free ARM tier

한국어 가이드 범위: install/oracle 경로의 설정·명령·제약·예시를 학습용으로 재구성합니다.

문서 구성

공식 문서의 주요 섹션은 다음과 같습니다.

사전 요구사항
설정
Verify the security posture
Confirm no public ports are listening
Verify Tailscale SSH is active
Optional: disable sshd entirely once Tailscale SSH is confirmed working
ARM notes
Persistence and backups
Fallback: SSH tunnel
트러블슈팅
다음 단계
관련 문서

상세 내용

본문

Run a persistent OpenClaw Gateway on Oracle Cloud's Always Free ARM tier (up to 4 OCPU, 24 GB RAM, 200 GB storage) at no cost.

사전 요구사항

주요 항목:

Oracle Cloud account (signup) -- see community signup guide if you hit issues
Tailscale account (free at tailscale.com)
An SSH key pair
About 30 minutes

설정

Log into Oracle Cloud Console. 2. Navigate to Compute > Instances > Create Instance. 3. Configure:

주요 항목:

Name: openclaw
Image: Ubuntu 24.04 (aarch64)
Shape: VM.Standard.A1.Flex (Ampere ARM)
OCPUs: 2 (or up to 4)
Memory: 12 GB (or up to 24 GB)
Boot volume: 50 GB (up to 200 GB free)
SSH key: Add your public key

ssh ubuntu@YOUR_PUBLIC_IP

    sudo apt update && sudo apt upgrade -y
    sudo apt install -y build-essential

sudo hostnamectl set-hostname openclaw
    sudo passwd ubuntu
    sudo loginctl enable-linger ubuntu

curl -fsSL https://tailscale.com/install.sh | sh
    sudo tailscale up --ssh --hostname=openclaw

curl -fsSL https://openclaw.ai/install.sh | bash
    source ~/.bashrc

Verify the security posture

With the VCN locked down (only UDP 41641 open) and the Gateway bound to loopback, public traffic is blocked at the network edge and admin access is tailnet-only. That removes the need for several traditional VPS hardening steps:

주요 항목:

chmod 700 ~/.openclaw to restrict credential file permissions.
openclaw security audit for an OpenClaw-specific posture check.
Regular sudo apt update && sudo apt upgrade for OS patches.
Review devices in the Tailscale admin console periodically.

Traditional step	Needed?	Why
UFW firewall	No	The VCN blocks traffic before it reaches the instance.
fail2ban	No	Port 22 is blocked at the VCN; no brute-force surface.
sshd hardening	No	Tailscale SSH does not use sshd.
Disable root login	No	Tailscale authenticates by tailnet identity, not system users.
SSH key-only auth	No	Same -- tailnet identity replaces system SSH keys.
IPv6 hardening	Usually not	Depends on VCN/subnet settings; verify what is actually assigned/exposed.

Confirm no public ports are listening

sudo ss -tlnp | grep -v '127.0.0.1|::1'

Verify Tailscale SSH is active

tailscale status | grep -q 'offers: ssh' && echo "Tailscale SSH active"

Optional: disable sshd entirely once Tailscale SSH is confirmed working

sudo systemctl disable --now ssh


### ARM notes

The Always Free tier is ARM (`aarch64`). Most OpenClaw features work fine; a small number of native binaries need ARM builds:

> 위 내용은 공식 문서의 해당 섹션 요지입니다. 세부 플래그·기본값은 원문과 `--help`를 확인하세요.

주요 항목:

- Node.js, Telegram, WhatsApp (Baileys): pure JavaScript, no issues.
- Most npm packages with native code: pre-built `linux-arm64` artifacts available.
- Optional CLI helpers (e.g. Go/Rust binaries shipped by skills): check for an `aarch64` / `linux-arm64` release before installing.

### Persistence and backups

These survive reboots. To take a portable snapshot:

> 위 내용은 공식 문서의 해당 섹션 요지입니다. 세부 플래그·기본값은 원문과 `--help`를 확인하세요.

주요 항목:

- `~/.openclaw/` -- `openclaw.json`, per-agent `auth-profiles.json`, channel/provider state, and session data.
- `~/.openclaw/workspace/` -- the agent workspace (SOUL.md, memory, artifacts).

```bash
openclaw backup create

Fallback: SSH tunnel

If Tailscale Serve is not working, use an SSH tunnel from your local machine:

ssh -L 18789:127.0.0.1:18789 ubuntu@openclaw

트러블슈팅

Instance creation fails ("Out of capacity") -- Free tier ARM instances are popular. Try a different availability domain or retry during off-peak hours.

Tailscale will not connect -- Run sudo tailscale up --ssh --hostname=openclaw --reset to re-authenticate.

Gateway will not start -- Run openclaw doctor --non-interactive and check logs with journalctl --user -u openclaw-gateway.service -n 50.

ARM binary issues -- Most npm packages work on ARM64. For native binaries, look for linux-arm64 or aarch64 releases. Verify architecture with uname -m.

다음 단계

주요 항목:

Channels -- connect Telegram, WhatsApp, Discord, and more
Gateway configuration -- all config options
Updating -- keep OpenClaw up to date

실습 체크리스트

공식 문서와 로컬 버전을 대조합니다: https://docs.openclaw.ai/install/oracle
관련 CLI는 openclaw --help 및 하위 명령 --help로 옵션을 확인합니다.
설정 변경 시 openclaw config / openclaw doctor로 유효성을 검사합니다.
Gateway·채널·플러그인 변경 후에는 필요 시 Gateway를 재시작합니다.

자주 쓰는 명령·설정 예시

ssh ubuntu@YOUR_PUBLIC_IP

    sudo apt update && sudo apt upgrade -y
    sudo apt install -y build-essential

sudo hostnamectl set-hostname openclaw
    sudo passwd ubuntu
    sudo loginctl enable-linger ubuntu

curl -fsSL https://tailscale.com/install.sh | sh
    sudo tailscale up --ssh --hostname=openclaw

curl -fsSL https://openclaw.ai/install.sh | bash
    source ~/.bashrc

openclaw config set gateway.bind loopback
    openclaw config set gateway.auth.mode token
    openclaw doctor --generate-gateway-token
    openclaw config set gateway.tailscale.mode serve
    openclaw config set gateway.trustedProxies '["127.0.0.1"]'

    systemctl --user restart openclaw-gateway.service

openclaw --version
    systemctl --user status openclaw-gateway.service
    tailscale serve status
    curl http://localhost:18789

Oracle Cloud

핵심 요약

Host OpenClaw on Oracle Cloud's Always Free ARM tier

한국어 가이드 범위: install/oracle 경로의 설정·명령·제약·예시를 학습용으로 재구성합니다.

문서 구성

공식 문서의 주요 섹션은 다음과 같습니다.

사전 요구사항
설정
Verify the security posture
Confirm no public ports are listening
Verify Tailscale SSH is active
Optional: disable sshd entirely once Tailscale SSH is confirmed working
ARM notes
Persistence and backups
Fallback: SSH tunnel
트러블슈팅
다음 단계
관련 문서

상세 내용

본문

Run a persistent OpenClaw Gateway on Oracle Cloud's Always Free ARM tier (up to 4 OCPU, 24 GB RAM, 200 GB storage) at no cost.

사전 요구사항

주요 항목:

Oracle Cloud account (signup) -- see community signup guide if you hit issues
Tailscale account (free at tailscale.com)
An SSH key pair
About 30 minutes

설정

Log into Oracle Cloud Console. 2. Navigate to Compute > Instances > Create Instance. 3. Configure:

주요 항목:

Name: openclaw
Image: Ubuntu 24.04 (aarch64)
Shape: VM.Standard.A1.Flex (Ampere ARM)
OCPUs: 2 (or up to 4)
Memory: 12 GB (or up to 24 GB)
Boot volume: 50 GB (up to 200 GB free)
SSH key: Add your public key

ssh ubuntu@YOUR_PUBLIC_IP

    sudo apt update && sudo apt upgrade -y
    sudo apt install -y build-essential

sudo hostnamectl set-hostname openclaw
    sudo passwd ubuntu
    sudo loginctl enable-linger ubuntu

curl -fsSL https://tailscale.com/install.sh | sh
    sudo tailscale up --ssh --hostname=openclaw

curl -fsSL https://openclaw.ai/install.sh | bash
    source ~/.bashrc

Verify the security posture

주요 항목:

chmod 700 ~/.openclaw to restrict credential file permissions.
openclaw security audit for an OpenClaw-specific posture check.
Regular sudo apt update && sudo apt upgrade for OS patches.
Review devices in the Tailscale admin console periodically.

Traditional step	Needed?	Why
UFW firewall	No	The VCN blocks traffic before it reaches the instance.
fail2ban	No	Port 22 is blocked at the VCN; no brute-force surface.
sshd hardening	No	Tailscale SSH does not use sshd.
Disable root login	No	Tailscale authenticates by tailnet identity, not system users.
SSH key-only auth	No	Same -- tailnet identity replaces system SSH keys.
IPv6 hardening	Usually not	Depends on VCN/subnet settings; verify what is actually assigned/exposed.

Confirm no public ports are listening

sudo ss -tlnp | grep -v '127.0.0.1|::1'

Verify Tailscale SSH is active

tailscale status | grep -q 'offers: ssh' && echo "Tailscale SSH active"

Optional: disable sshd entirely once Tailscale SSH is confirmed working

sudo systemctl disable --now ssh


### ARM notes

The Always Free tier is ARM (`aarch64`). Most OpenClaw features work fine; a small number of native binaries need ARM builds:

> 위 내용은 공식 문서의 해당 섹션 요지입니다. 세부 플래그·기본값은 원문과 `--help`를 확인하세요.

주요 항목:

- Node.js, Telegram, WhatsApp (Baileys): pure JavaScript, no issues.
- Most npm packages with native code: pre-built `linux-arm64` artifacts available.
- Optional CLI helpers (e.g. Go/Rust binaries shipped by skills): check for an `aarch64` / `linux-arm64` release before installing.

### Persistence and backups

These survive reboots. To take a portable snapshot:

> 위 내용은 공식 문서의 해당 섹션 요지입니다. 세부 플래그·기본값은 원문과 `--help`를 확인하세요.

주요 항목:

- `~/.openclaw/` -- `openclaw.json`, per-agent `auth-profiles.json`, channel/provider state, and session data.
- `~/.openclaw/workspace/` -- the agent workspace (SOUL.md, memory, artifacts).

```bash
openclaw backup create

Fallback: SSH tunnel

If Tailscale Serve is not working, use an SSH tunnel from your local machine:

ssh -L 18789:127.0.0.1:18789 ubuntu@openclaw

트러블슈팅

Instance creation fails ("Out of capacity") -- Free tier ARM instances are popular. Try a different availability domain or retry during off-peak hours.

Tailscale will not connect -- Run sudo tailscale up --ssh --hostname=openclaw --reset to re-authenticate.

Gateway will not start -- Run openclaw doctor --non-interactive and check logs with journalctl --user -u openclaw-gateway.service -n 50.

ARM binary issues -- Most npm packages work on ARM64. For native binaries, look for linux-arm64 or aarch64 releases. Verify architecture with uname -m.

다음 단계

주요 항목:

Channels -- connect Telegram, WhatsApp, Discord, and more
Gateway configuration -- all config options
Updating -- keep OpenClaw up to date

실습 체크리스트

공식 문서와 로컬 버전을 대조합니다: https://docs.openclaw.ai/install/oracle
관련 CLI는 openclaw --help 및 하위 명령 --help로 옵션을 확인합니다.
설정 변경 시 openclaw config / openclaw doctor로 유효성을 검사합니다.
Gateway·채널·플러그인 변경 후에는 필요 시 Gateway를 재시작합니다.

자주 쓰는 명령·설정 예시

ssh ubuntu@YOUR_PUBLIC_IP

    sudo apt update && sudo apt upgrade -y
    sudo apt install -y build-essential

sudo hostnamectl set-hostname openclaw
    sudo passwd ubuntu
    sudo loginctl enable-linger ubuntu

curl -fsSL https://tailscale.com/install.sh | sh
    sudo tailscale up --ssh --hostname=openclaw

curl -fsSL https://openclaw.ai/install.sh | bash
    source ~/.bashrc

openclaw config set gateway.bind loopback
    openclaw config set gateway.auth.mode token
    openclaw doctor --generate-gateway-token
    openclaw config set gateway.tailscale.mode serve
    openclaw config set gateway.trustedProxies '["127.0.0.1"]'

    systemctl --user restart openclaw-gateway.service

openclaw --version
    systemctl --user status openclaw-gateway.service
    tailscale serve status
    curl http://localhost:18789

Oracle Cloud

핵심 요약

문서 구성

상세 내용

본문

사전 요구사항

설정

Verify the security posture

Confirm no public ports are listening

Verify Tailscale SSH is active

Optional: disable sshd entirely once Tailscale SSH is confirmed working

Fallback: SSH tunnel

트러블슈팅

다음 단계

관련 문서

실습 체크리스트

자주 쓰는 명령·설정 예시

관련 링크

관련 가이드

Oracle Cloud

핵심 요약

문서 구성

상세 내용

본문

사전 요구사항

설정

Verify the security posture

Confirm no public ports are listening

Verify Tailscale SSH is active

Optional: disable sshd entirely once Tailscale SSH is confirmed working

Fallback: SSH tunnel

트러블슈팅

다음 단계

관련 문서

실습 체크리스트

자주 쓰는 명령·설정 예시

관련 링크

관련 가이드