root@iZf8ze93nwj9zdmrir3btyZ:~# curl -fsSL https://openclaw.ai/install.sh | bash

  🦞 OpenClaw Installer
  Gateway online—please keep hands, feet, and appendages inside the shell at all times.

✓ Detected: linux

Install plan
OS: linux
Install method: npm
Requested version: latest

[1/3] Preparing environment
· Node.js not found, installing it now
· Installing Node.js via NodeSource
· Installing Linux build tools (make/g++/cmake/python3)
✓ Build tools installed
✓ Node.js v22 installed
· Active Node.js: v22.22.1 (/usr/bin/node)
· Active npm: 10.9.4 (/usr/bin/npm)

[2/3] Installing OpenClaw
✓ Git already installed
· Installing OpenClaw v2026.3.2
! npm install failed for openclaw@latest
  Command: env SHARP_IGNORE_GLOBAL_LIBVIPS=1 npm --loglevel error --silent --no-fund --no-audit install -g openclaw@latest
  Installer log: /tmp/tmp.IWFlE4vreg
! npm install failed; showing last log lines
! npm install failed; retrying
✓ OpenClaw npm package installed
✓ OpenClaw installed

[3/3] Finalizing setup

🦞 OpenClaw installed successfully (2026.3.2)!
Home sweet home. Don't worry, I won't rearrange the furniture.

· Starting setup

🦞 OpenClaw 2026.3.2 (85377a2) — Open source means you can see exactly how I judge your config.

▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
██░▄▄▄░██░▄▄░██░▄▄▄██░▀██░██░▄▄▀██░████░▄▄▀██░███░██
██░███░██░▀▀░██░▄▄▄██░█░█░██░█████░████░▀▀░██░█░█░██
██░▀▀▀░██░█████░▀▀▀██░██▄░██░▀▀▄██░▀▀░█░██░██▄▀▄▀▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
                  🦞 OPENCLAW 🦞                    
 
┌  OpenClaw onboarding
│
◇  Security ─────────────────────────────────────────────────────────────────────────────────╮
│                                                                                            │
│  Security warning — please read.                                                           │
│                                                                                            │
│  OpenClaw is a hobby project and still in beta. Expect sharp edges.                        │
│  By default, OpenClaw is a personal agent: one trusted operator boundary.                  │
│  This bot can read files and run actions if tools are enabled.                             │
│  A bad prompt can trick it into doing unsafe things.                                       │
│                                                                                            │
│  OpenClaw is not a hostile multi-tenant boundary by default.                               │
│  If multiple users can message one tool-enabled agent, they share that delegated tool      │
│  authority.                                                                                │
│                                                                                            │
│  If you’re not comfortable with security hardening and access control, don’t run           │
│  OpenClaw.                                                                                 │
│  Ask someone experienced to help before enabling tools or exposing it to the internet.     │
│                                                                                            │
│  Recommended baseline:                                                                     │
│  - Pairing/allowlists + mention gating.                                                    │
│  - Multi-user/shared inbox: split trust boundaries (separate gateway/credentials, ideally  │
│    separate OS users/hosts).                                                               │
│  - Sandbox + least-privilege tools.                                                        │
│  - Shared inboxes: isolate DM sessions (`session.dmScope: per-channel-peer`) and keep      │
│    tool access minimal.                                                                    │
│  - Keep secrets out of the agent’s reachable filesystem.                                   │
│  - Use the strongest available model for any bot with tools or untrusted inboxes.          │
│                                                                                            │
│  Run regularly:                                                                            │
│  openclaw security audit --deep                                                            │
│  openclaw security audit --fix                                                             │
│                                                                                            │
│  Must read: https://docs.openclaw.ai/gateway/security                                      │
│                                                                                            │
├────────────────────────────────────────────────────────────────────────────────────────────╯
│
◇  I understand this is personal-by-default and shared/multi-user use requires lock-down. Continue?
│  Yes
│
◇  Onboarding mode
│  QuickStart
│
◇  QuickStart ─────────────────────────╮
│                                      │
│  Gateway port: 18789                 │
│  Gateway bind: Loopback (127.0.0.1)  │
│  Gateway auth: Token (default)       │
│  Tailscale exposure: Off             │
│  Direct to chat channels.            │
│                                      │
├──────────────────────────────────────╯
│
◇  Model/auth provider
│  Moonshot AI (Kimi K2.5)
│
◇  Moonshot AI (Kimi K2.5) auth method
│  Kimi API key (.cn)
│
◇  How do you want to provide this API key?
│  Paste API key now
│
◇  Enter Moonshot API key (.cn)
│  kimi的秘钥
│
◇  Model configured ────────────────────────╮
│                                           │
│  Default model set to moonshot/kimi-k2.5  │
│                                           │
├───────────────────────────────────────────╯
│
◇  Default model
│  Keep current (moonshot/kimi-k2.5)
│
◇  Channel status ────────────────────────────╮
│                                             │
│  Telegram: needs token                      │
│  WhatsApp (default): not linked             │
│  Discord: needs token                       │
│  Slack: needs tokens                        │
│  Signal: needs setup                        │
│  signal-cli: missing (signal-cli)           │
│  iMessage: needs setup                      │
│  imsg: missing (imsg)                       │
│  IRC: not configured                        │
│  Google Chat: not configured                │
│  Feishu: install plugin to enable           │
│  Google Chat: install plugin to enable      │
│  Nostr: install plugin to enable            │
│  Microsoft Teams: install plugin to enable  │
│  Mattermost: install plugin to enable       │
│  Nextcloud Talk: install plugin to enable   │
│  Matrix: install plugin to enable           │
│  BlueBubbles: install plugin to enable      │
│  LINE: install plugin to enable             │
│  Zalo: install plugin to enable             │
│  Zalo Personal: install plugin to enable    │
│  Synology Chat: install plugin to enable    │
│  Tlon: install plugin to enable             │
│                                             │
├─────────────────────────────────────────────╯
│
◇  How channels work ───────────────────────────────────────────────────────────────────────╮
│                                                                                           │
│  DM security: default is pairing; unknown DMs get a pairing code.                         │
│  Approve with: openclaw pairing approve <channel> <code>                                  │
│  Public DMs require dmPolicy="open" + allowFrom=["*"].                                    │
│  Multi-user DMs: run: openclaw config set session.dmScope "per-channel-peer" (or          │
│  "per-account-channel-peer" for multi-account channels) to isolate sessions.              │
│  Docs: channels/pairing              │
│                                                                                           │
│  Telegram: simplest way to get started — register a bot with @BotFather and get going.    │
│  WhatsApp: works with your own number; recommend a separate phone + eSIM.                 │
│  Discord: very well supported right now.                                                  │
│  IRC: classic IRC networks with DM/channel routing and pairing controls.                  │
│  Google Chat: Google Workspace Chat app with HTTP webhook.                                │
│  Slack: supported (Socket Mode).                                                          │
│  Signal: signal-cli linked device; more setup (David Reagans: "Hop on Discord.").         │
│  iMessage: this is still a work in progress.                                              │
│  Feishu: 飞书/Lark enterprise messaging with doc/wiki/drive tools.                        │
│  Nostr: Decentralized protocol; encrypted DMs via NIP-04.                                 │
│  Microsoft Teams: Bot Framework; enterprise support.                                      │
│  Mattermost: self-hosted Slack-style chat; install the plugin to enable.                  │
│  Nextcloud Talk: Self-hosted chat via Nextcloud Talk webhook bots.                        │
│  Matrix: open protocol; install the plugin to enable.                                     │
│  BlueBubbles: iMessage via the BlueBubbles mac app + REST API.                            │
│  LINE: LINE Messaging API bot for Japan/Taiwan/Thailand markets.                          │
│  Zalo: Vietnam-focused messaging platform with Bot API.                                   │
│  Zalo Personal: Zalo personal account via QR code login.                                  │
│  Synology Chat: Connect your Synology NAS Chat to OpenClaw with full agent capabilities.  │
│  Tlon: decentralized messaging on Urbit; install the plugin to enable.                    │
│                                                                                           │
├───────────────────────────────────────────────────────────────────────────────────────────╯
│
◇  Select channel (QuickStart)
│  Feishu/Lark (飞书)
│
◇  Install Feishu plugin?
│  Download from npm (@openclaw/feishu)
Downloading @openclaw/feishu…
Extracting /tmp/openclaw-npm-pack-daT1xb/openclaw-feishu-2026.3.2.tgz…
Plugin "feishu" has 1 suspicious code pattern(s). Run "openclaw security audit --deep" for details.
Installing to /root/.openclaw/extensions/feishu…
Installing plugin dependencies…
03:45:51 [plugins] plugins.allow is empty; discovered non-bundled plugins may auto-load: feishu (/root/.openclaw/extensions/feishu/index.ts). Set plugins.allow to explicit trusted ids.
│
◇  Feishu credentials ──────────────────────────────────────────────────────────────╮
│                                                                                   │
│  1) Go to Feishu Open Platform (open.feishu.cn)                                   │
│  2) Create a self-built app                                                       │
│  3) Get App ID and App Secret from Credentials page                               │
│  4) Enable required permissions: im:message, im:chat, contact:user.base:readonly  │
│  5) Publish the app or add it to a test group                                     │
│  Tip: you can also set FEISHU_APP_ID / FEISHU_APP_SECRET env vars.                │
│  Docs: feishu                 │
│                                                                                   │
├───────────────────────────────────────────────────────────────────────────────────╯
│
◇  How do you want to provide this App Secret?
│  Enter App Secret
│
◇  Enter Feishu App Secret
│  飞书的应用秘钥
│
◇  Enter Feishu App ID
│  飞书的appid
[info]: [ 'client ready' ]
│
◇  Feishu connection test ────────────────────────────╮
│                                                     │
│  Connection failed: API error: app do not have bot  │
│                                                     │
├─────────────────────────────────────────────────────╯
│
◇  Feishu connection mode
│  WebSocket (default)
│
◇  Which Feishu domain?
│  Feishu (feishu.cn) - China
│
◇  Group chat policy
│  Allowlist - only respond in specific groups
│
◇  Group chat allowlist (chat_ids)
│  飞书的群聊chatid
[info]: [ 'client ready' ]
│
◇  Selected channels ──────────────────────────────────────────╮
│                                                              │
│  Feishu — 飞书/Lark enterprise messaging. Docs:              │
│  feishu  │
│                                                              │
├──────────────────────────────────────────────────────────────╯
Config warnings:
- plugins.entries.feishu: plugin feishu: duplicate plugin id detected; later plugin may be overridden (/root/.openclaw/extensions/feishu/index.ts)
Updated ~/.openclaw/openclaw.json
Workspace OK: ~/.openclaw/workspace
Sessions OK: ~/.openclaw/agents/main/sessions
│
◇  Skills status ─────────────╮
│                             │
│  Eligible: 8                │
│  Missing requirements: 40   │
│  Unsupported on this OS: 7  │
│  Blocked by allowlist: 0    │
│                             │
├─────────────────────────────╯
│
◇  Configure skills now? (recommended)
│  Yes
│
◇  Install missing skill dependencies
│  🔐 1password, 📰 blogwatcher, 🫐 blucli, 📸 camsnap, 🧩 clawhub, 🎛️ eightctl, ♊️ gemini, 🍌 nano-banana-pro, 📄 nano-pdf, 𝕏 xurl
│
◇  Homebrew recommended ──────────────────────────────────────────────────────────╮
│                                                                                 │
│  Many skill dependencies are shipped via Homebrew.                              │
│  Without brew, you'll need to build from source or download releases manually.  │
│                                                                                 │
├─────────────────────────────────────────────────────────────────────────────────╯
│
◇  Show Homebrew install command?
│  Yes
│
◇  Homebrew install ─────────────────────────────────────────────────────╮
│                                                                        │
│  Run:                                                                  │
│  /bin/bash -c "$(curl -fsSL                                            │
│  https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"  │
│                                                                        │
├────────────────────────────────────────────────────────────────────────╯
│
◇  Preferred node manager for skill installs
│  npm
│
◇  Install failed: xurl — brew not installed — Homebrew is not installed. Install it from https://brew.sh or install "xdevplatform/tap/xurl" manually using your syst…
Tip: run `openclaw doctor` to review skills + requirements.
Docs: https://docs.openclaw.ai/skills
│
◇  Install failed: 1password — brew not installed — Homebrew is not installed. Install it from https://brew.sh or install "1password-cli" manually using your system packa…
Tip: run `openclaw doctor` to review skills + requirements.
Docs: https://docs.openclaw.ai/skills
│
◇  Install failed: blogwatcher (exit 1) — go: github.com/Hyaxia/blogwatcher/cmd/blogwatcher@latest: module github.com/Hyaxia/blogwatcher/cmd/blogwatcher: Get "https://proxy.golang.o…
go: github.com/Hyaxia/blogwatcher/cmd/blogwatcher@latest: module github.com/Hyaxia/blogwatcher/cmd/blogwatcher: Get "https://proxy.golang.org/github.com/%21hyaxia/blogwatcher/cmd/blogwatcher/@v/list": dial tcp 142.251.33.209:443: i/o timeout
Tip: run `openclaw doctor` to review skills + requirements.
Docs: https://docs.openclaw.ai/skills
│
◇  Install failed: blucli (exit 1) — go: github.com/steipete/blucli/cmd/blu@latest: module github.com/steipete/blucli/cmd/blu: Get "https://proxy.golang.org/github.com/steipete…
go: github.com/steipete/blucli/cmd/blu@latest: module github.com/steipete/blucli/cmd/blu: Get "https://proxy.golang.org/github.com/steipete/blucli/cmd/blu/@v/list": dial tcp 142.251.33.209:443: i/o timeout
Tip: run `openclaw doctor` to review skills + requirements.
Docs: https://docs.openclaw.ai/skills
│
◇  Install failed: camsnap — brew not installed — Homebrew is not installed. Install it from https://brew.sh or install "steipete/tap/camsnap" manually using your syste…
Tip: run `openclaw doctor` to review skills + requirements.
Docs: https://docs.openclaw.ai/skills
│
◇  Installed clawhub
│
◇  Install failed: eightctl (exit 1) — go: github.com/steipete/eightctl/cmd/eightctl@latest: module github.com/steipete/eightctl/cmd/eightctl: Get "https://proxy.golang.org/githu…
go: github.com/steipete/eightctl/cmd/eightctl@latest: module github.com/steipete/eightctl/cmd/eightctl: Get "https://proxy.golang.org/github.com/steipete/eightctl/cmd/eightctl/@v/list": dial tcp 142.250.73.145:443: i/o timeout
Tip: run `openclaw doctor` to review skills + requirements.
Docs: https://docs.openclaw.ai/skills
│
◇  Install failed: gemini — brew not installed — Homebrew is not installed. Install it from https://brew.sh or install "gemini-cli" manually using your system package …
Tip: run `openclaw doctor` to review skills + requirements.
Docs: https://docs.openclaw.ai/skills
│
◇  Install failed: nano-banana-pro — brew not installed — Homebrew is not installed. Install it from https://brew.sh or install "uv" manually using your system package manager …
Tip: run `openclaw doctor` to review skills + requirements.
Docs: https://docs.openclaw.ai/skills
│
◇  Install failed: nano-pdf — uv not installed — install manually: https://docs.astral.sh/uv/getting-started/installation/
Tip: run `openclaw doctor` to review skills + requirements.
Docs: https://docs.openclaw.ai/skills
│
◇  Set GOOGLE_PLACES_API_KEY for goplaces?
│  Yes
│
◇  Enter GOOGLE_PLACES_API_KEY
│  就看见阿斯蒂芬
│
◇  Set GEMINI_API_KEY for nano-banana-pro?
│  No
│
◇  Set NOTION_API_KEY for notion?
│  No
│
◇  Set OPENAI_API_KEY for openai-image-gen?
│  No
│
◇  Set OPENAI_API_KEY for openai-whisper-api?
│  No
│
◇  Set ELEVENLABS_API_KEY for sag?
│  No
│
◇  Hooks ──────────────────────────────────────────────────────────────────╮
│                                                                          │
│  Hooks let you automate actions when agent commands are issued.          │
│  Example: Save session context to memory when you issue /new or /reset.  │
│                                                                          │
│  Learn more: https://docs.openclaw.ai/automation/hooks                   │
│                                                                          │
├──────────────────────────────────────────────────────────────────────────╯
│
◇  Enable hooks?
│  Skip for now
Config warnings:
- plugins.entries.feishu: plugin feishu: duplicate plugin id detected; later plugin may be overridden (/root/.openclaw/extensions/feishu/index.ts)
Config overwrite: /root/.openclaw/openclaw.json (sha256 87af23a3ca281aa7a29095176e9e08a12c0c4a84ce39fbbd9ebb7c5bac976286 -> bbb1330527f6707d64290b8430af2ef9d34efe12916c7c0b2e0159a8344beabd, backup=/root/.openclaw/openclaw.json.bak)
│
◇  Systemd ────────────────────────────────────────────────────────────────────────────────╮
│                                                                                          │
│  Linux installs use a systemd user service by default. Without lingering, systemd stops  │
│  the user session on logout/idle and kills the Gateway.                                  │
│  Enabling lingering now (may require sudo; writes /var/lib/systemd/linger).              │
│                                                                                          │
├──────────────────────────────────────────────────────────────────────────────────────────╯
│
◇  Systemd ─────────────────────────────╮
│                                       │
│  Enabled systemd lingering for root.  │
│                                       │
├───────────────────────────────────────╯
│
◇  Gateway service runtime ────────────────────────────────────────────╮
│                                                                      │
│  QuickStart uses Node for the Gateway service (stable + supported).  │
│                                                                      │
├──────────────────────────────────────────────────────────────────────╯
Error: systemctl is-enabled unavailable: Command failed: systemctl --user is-enabled openclaw-gateway.service
启动openclaw
root@iZf8ze93nwj9zdmrir3btyZ:~# openclaw gateway
Config warnings:\n- plugins.entries.feishu: plugin feishu: duplicate plugin id detected; later plugin may be overridden (/root/.openclaw/extensions/feishu/index.ts)
Config warnings:\n- plugins.entries.feishu: plugin feishu: duplicate plugin id detected; later plugin may be overridden (/root/.openclaw/extensions/feishu/index.ts)

🦞 OpenClaw 2026.3.2 (85377a2) — I'll do the boring stuff while you dramatically stare at the logs like it's cinema.

│
◇  Config warnings ─────────────────────────────────────────────────────────────────────────╮
│                                                                                           │
│  - plugins.entries.feishu: plugin feishu: duplicate plugin id detected; later plugin may  │
│    be overridden (/root/.openclaw/extensions/feishu/index.ts)                             │
│                                                                                           │
├───────────────────────────────────────────────────────────────────────────────────────────╯
04:51:01 [gateway] [plugins] plugins.allow is empty; discovered non-bundled plugins may auto-load: feishu (/root/.openclaw/extensions/feishu/index.ts). Set plugins.allow to explicit trusted ids.
12:51:05 Config warnings:\n- plugins.entries.feishu: plugin feishu: duplicate plugin id detected; later plugin may be overridden (/root/.openclaw/extensions/feishu/index.ts)
04:51:08 [gateway] feishu_doc: Registered feishu_doc, feishu_app_scopes
04:51:08 [gateway] feishu_chat: Registered feishu_chat tool
04:51:08 [gateway] feishu_wiki: Registered feishu_wiki tool
04:51:08 [gateway] feishu_drive: Registered feishu_drive tool
04:51:08 [gateway] feishu_bitable: Registered bitable tools
04:51:08 [gateway] [plugins] duplicate plugin id detected; later plugin may be overridden (/root/.openclaw/extensions/feishu/index.ts) (plugin=feishu, source=/root/.openclaw/extensions/feishu/index.ts)
04:51:08 [canvas] host mounted at http://127.0.0.1:18789/__openclaw__/canvas/ (root /root/.openclaw/canvas)
04:51:08 [heartbeat] started
04:51:09 [health-monitor] started (interval: 300s, startup-grace: 60s, channel-connect-grace: 120s)
04:51:09 [gateway] agent model: moonshot/kimi-k2.5
04:51:09 [gateway] listening on ws://127.0.0.1:18789, ws://[::1]:18789 (PID 12228)
04:51:09 [gateway] log file: /tmp/openclaw/openclaw-2026-03-06.log
12:51:09 [info]: [ 'client ready' ]
04:51:09 [browser/server] Browser control listening on http://127.0.0.1:18791/ (auth=token)
04:51:09 [feishu] starting feishu[default] (mode: websocket)
04:51:09 [feishu] feishu[default]: bot open_id resolved: unknown
12:51:09 [info]: [ 'event-dispatch is ready' ]
04:51:09 [feishu] feishu[default]: starting WebSocket connection...
12:51:09 [info]: [
  '[ws]',
  'receive events or callbacks through persistent connection only available in self-build & Feishu app, Configured in:\n' +
    '        Developer Console(开发者后台) \n' +
    '          ->\n' +
    '        Events and Callbacks(事件与回调)\n' +
    '          -> \n' +
    '        Mode of event/callback subscription(订阅方式)\n' +
    '          -> \n' +
    '        Receive events/callbacks through persistent connection(使用 长连接 接收事件/回调)'
]
04:51:09 [feishu] feishu[default]: WebSocket client started
12:51:10 [info]: [ '[ws]', 'ws client ready' ]
04:53:07 [gateway] device pairing auto-approved device=ae266f0ea5a50303d8ce5803a817683ad1a9d21a19ff2fcf3ef813d66ee423e5 role=operator
04:53:11 [ws] ⇄ res ✓ config.get 3712ms conn=1f7b2902…e0b0 id=2067f344…5653
04:53:11 [ws] ⇄ res ✓ status 3732ms conn=1f7b2902…e0b0 id=8cbb8d87…cf29