From cfbf4d1fa4c06097b606331204d421df1bc2a4d3 Mon Sep 17 00:00:00 2001 From: Vincent Koc Date: Tue, 28 Apr 2026 02:39:32 -0700 Subject: [PATCH] docs: note default sandbox image fail-fast behavior For 47dc9f7fc0: docs/gateway/sandboxing.md now warns under "Build the default image" that OpenClaw no longer silently retags plain debian:bookworm-slim as openclaw-sandbox:bookworm-slim when the default image is missing. Sandbox runs fail with a build instruction so the python3 tooling required by sandbox write/edit helpers is preserved instead of being silently dropped. --- docs/gateway/sandboxing.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/gateway/sandboxing.md b/docs/gateway/sandboxing.md index cc2c24e0d57..a2a3567d88d 100644 --- a/docs/gateway/sandboxing.md +++ b/docs/gateway/sandboxing.md @@ -369,6 +369,8 @@ Default Docker image: `openclaw-sandbox:bookworm-slim` The default image does **not** include Node. If a skill needs Node (or other runtimes), either bake a custom image or install via `sandbox.docker.setupCommand` (requires network egress + writable root + root user). + OpenClaw does not silently substitute plain `debian:bookworm-slim` when `openclaw-sandbox:bookworm-slim` is missing. Sandbox runs that target the default image fail fast with a build instruction until you run `scripts/sandbox-setup.sh`, because the bundled image carries `python3` for sandbox write/edit helpers. + For a more functional sandbox image with common tooling (for example `curl`, `jq`, `nodejs`, `python3`, `git`):