8900 commited on
Update entrypoint.sh
Browse files- entrypoint.sh +37 -37
entrypoint.sh
CHANGED
|
@@ -10,68 +10,68 @@
|
|
| 10 |
|
| 11 |
# So setup only runs once per container lifetime.
|
| 12 |
|
| 13 |
-
SETUP_MARKER=
|
| 14 |
|
| 15 |
-
#
|
| 16 |
|
| 17 |
if mkdir -p /data/.openclaw 2>/dev/null; then
|
| 18 |
-
|
| 19 |
else
|
| 20 |
-
|
| 21 |
-
|
| 22 |
fi
|
| 23 |
-
echo
|
| 24 |
|
| 25 |
-
#
|
| 26 |
|
| 27 |
for VAR in $(env | cut -d= -f1); do
|
| 28 |
-
|
| 29 |
-
|
| 30 |
-
|
| 31 |
-
|
| 32 |
-
|
| 33 |
-
|
| 34 |
-
|
| 35 |
-
|
| 36 |
-
|
| 37 |
-
|
| 38 |
-
|
| 39 |
-
|
| 40 |
done
|
| 41 |
|
| 42 |
-
export HF_TOKEN=
|
| 43 |
|
| 44 |
-
#
|
| 45 |
|
| 46 |
# Gateway restart reuses /tmp, so marker survives -> setup skipped.
|
| 47 |
|
| 48 |
# Container restart wipes /tmp, marker gone -> setup runs once.
|
| 49 |
|
| 50 |
-
if [ ! -f
|
| 51 |
-
|
| 52 |
-
|
| 53 |
-
|
| 54 |
-
|
| 55 |
else
|
| 56 |
-
|
| 57 |
fi
|
| 58 |
|
| 59 |
-
#
|
| 60 |
|
| 61 |
if [ -f /app/security-check.sh ]; then
|
| 62 |
-
|
| 63 |
fi
|
| 64 |
|
| 65 |
-
#
|
| 66 |
|
| 67 |
if [ -f /app/hf-sync-manager.mjs ]; then
|
| 68 |
-
|
| 69 |
-
|
| 70 |
fi
|
| 71 |
|
| 72 |
-
echo
|
| 73 |
|
| 74 |
-
exec node /app/openclaw.mjs gateway
|
| 75 |
-
|
| 76 |
-
|
| 77 |
-
|
|
|
|
| 10 |
|
| 11 |
# So setup only runs once per container lifetime.
|
| 12 |
|
| 13 |
+
SETUP_MARKER=β/tmp/.openclaw-setup-doneβ
|
| 14 |
|
| 15 |
+
# ββ resolve writable home βββββββββββ
|
| 16 |
|
| 17 |
if mkdir -p /data/.openclaw 2>/dev/null; then
|
| 18 |
+
export OPENCLAW_HOME=/data
|
| 19 |
else
|
| 20 |
+
export OPENCLAW_HOME=/home/user
|
| 21 |
+
mkdir -p /home/user/.openclaw
|
| 22 |
fi
|
| 23 |
+
echo β[entrypoint] OPENCLAW_HOME=$OPENCLAW_HOMEβ
|
| 24 |
|
| 25 |
+
# ββ dynamic provider key export βββββββββ
|
| 26 |
|
| 27 |
for VAR in $(env | cut -d= -f1); do
|
| 28 |
+
case β$VARβ in
|
| 29 |
+
OPENCLAW_*|SPACE_*|SYSTEM_*|HF_*|NODE_*|npm_*) continue ;;
|
| 30 |
+
esac
|
| 31 |
+
case β$VARβ in
|
| 32 |
+
*_API_KEY|*_SECRET_KEY|*_ACCESS_TOKEN|*_BOT_TOKEN|*_AUTH_TOKEN|*_APP_KEY)
|
| 33 |
+
VAL=$(printenv β$VARβ 2>/dev/null || true)
|
| 34 |
+
if [ -n β$VALβ ]; then
|
| 35 |
+
export β$VARβ
|
| 36 |
+
echo β[entrypoint] exported: $VARβ
|
| 37 |
+
fi
|
| 38 |
+
;;
|
| 39 |
+
esac
|
| 40 |
done
|
| 41 |
|
| 42 |
+
export HF_TOKEN=β${HF_TOKEN:-}β
|
| 43 |
|
| 44 |
+
# ββ run setup only on first boot βββββββββββββ
|
| 45 |
|
| 46 |
# Gateway restart reuses /tmp, so marker survives -> setup skipped.
|
| 47 |
|
| 48 |
# Container restart wipes /tmp, marker gone -> setup runs once.
|
| 49 |
|
| 50 |
+
if [ ! -f β$SETUP_MARKERβ ]; then
|
| 51 |
+
echo β[entrypoint] First boot - running setupβ¦β
|
| 52 |
+
node /app/spaces/huggingface/setup-hf-config.mjs || true
|
| 53 |
+
touch β$SETUP_MARKERβ
|
| 54 |
+
echo β[entrypoint] Setup done (marker created)β
|
| 55 |
else
|
| 56 |
+
echo β[entrypoint] Gateway restart - setup skipped (settings preserved)β
|
| 57 |
fi
|
| 58 |
|
| 59 |
+
# ββ security audit (non-fatal) ββββββββββββββ
|
| 60 |
|
| 61 |
if [ -f /app/security-check.sh ]; then
|
| 62 |
+
sh /app/security-check.sh || true
|
| 63 |
fi
|
| 64 |
|
| 65 |
+
# ββ start sync manager in background βββββββββββ
|
| 66 |
|
| 67 |
if [ -f /app/hf-sync-manager.mjs ]; then
|
| 68 |
+
(node /app/hf-sync-manager.mjs &)
|
| 69 |
+
echo β[entrypoint] Sync manager startedβ
|
| 70 |
fi
|
| 71 |
|
| 72 |
+
echo β[entrypoint] Starting gatewayβ¦β
|
| 73 |
|
| 74 |
+
exec node /app/openclaw.mjs gateway
|
| 75 |
+
βallow-unconfigured
|
| 76 |
+
βbind lan
|
| 77 |
+
βport 7860
|