Update Dockerfile

Dockerfile

@@ -1,33 +1,44 @@
-FROM node:22
+FROM node:22-bookworm
 
-# 系统依赖
-RUN apt-get update && apt-get install -y git curl && rm -rf /var/lib/apt/lists/*
+ARG OPENCLAW_REPO=https://github.com/Josephrp/openclaw.git
+ARG OPENCLAW_REF=hf-spaces
 
-# 安装 Bun
-RUN curl -fsSL https://bun.sh/install | bash
+# 系统依赖 + Bun
+RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends git ca-certificates && \
+    apt-get clean && rm -rf /var/lib/apt/lists/* && \
+    curl -fsSL https://bun.sh/install | bash
 ENV PATH="/root/.bun/bin:${PATH}"
-
-WORKDIR /app
-
-# 克隆 OpenClaw
-RUN git clone https://github.com/Josephrp/openclaw.git .
-
-# 启用 pnpm
 RUN corepack enable
 
-# 安装依赖并 build（只在镜像构建阶段）
-RUN pnpm install
-RUN pnpm build
-RUN pnpm ui:build
+WORKDIR /app
 
-# 复制生产级配置脚本
-COPY setup-hf-config.mjs /setup-hf-config.mjs
+# Clone OpenClaw + build backend + UI
+RUN git clone --depth 1 --branch "${OPENCLAW_REF}" "${OPENCLAW_REPO}" . && \
+    pnpm install --frozen-lockfile && \
+    pnpm build && \
+    pnpm ui:build
 
+ENV NODE_ENV=production
+ENV OPENCLAW_PREFER_PNPM=1
 EXPOSE 7860
 
-# 启动命令，修复 bind 问题 + 配置覆盖 + 允许未配置
-CMD node /setup-hf-config.mjs && \
-    node openclaw.mjs gateway \
-    --allow-unconfigured \
-    --bind lan \
-    --port 7860
+# Copy our production setup
+COPY setup-hf-config.mjs /app/setup-hf-config.mjs
+
+# Entrypoint: setup config + start gateway
+RUN printf '%s\n' \
+    '#!/bin/sh' \
+    'set -e' \
+    'if mkdir -p /data/.openclaw 2>/dev/null; then' \
+    '  export OPENCLAW_HOME=/data' \
+    'else' \
+    '  export OPENCLAW_HOME=/home/user' \
+    '  mkdir -p /home/user/.openclaw' \
+    'fi' \
+    'node /app/setup-hf-config.mjs' \
+    'exec node /app/openclaw.mjs gateway --allow-unconfigured --bind lan --port 7860 "$@"' \
+    > /app/entrypoint.sh && chmod +x /app/entrypoint.sh
+
+RUN chown -R node:node /app && mkdir -p /home/user && chown -R node:node /home/user
+USER node
+ENTRYPOINT ["/app/entrypoint.sh"]