This repository supports two macOS deployment approaches for Clawdbot on Apple Silicon:
Maximum security with Lume hypervisor virtualization
- ✅ Full VM-level isolation (stronger than containers)
- ✅ Separate Apple ID support (burner accounts)
- ✅ Easy snapshot/rollback
- ✅ Defense-in-depth security hardening
- ✅ iMessage support
- 📁 Setup:
SETUP GUIDES/openclaw-vm-setup/toolkit - 📖 Guide: VM Security Hardening
Best for: Multi-tenant deployments, production environments, maximum isolation
Fastest setup, direct hardware access
- ✅ Zero virtualization overhead
- ✅ Full hardware acceleration
- ✅ Simpler troubleshooting
- ✅ iMessage support
- ✅ Direct system integration
⚠️ Shares host system resources- 📖 Guide: Native macOS Lockdown
Best for: Development, testing, single-user deployments, M1 Mac mini setups
- Hardware: Apple Silicon (M1/M2/M3/M4)
- OS: macOS Sequoia or later
- Network: Internet connection for initial setup
For other deployment options (Docker, cloud platforms, x86 hosts), see the main Clawdbot documentation.
Comprehensive documentation and automation toolkit for deploying Clawdbot - a Claude-powered messaging gateway - on macOS with both VM-isolated and native deployment options.
- Customer Setup Guide - Complete 1,000+ line guide covering installation, configuration, and customization
- Deployment Guide - 8 platform deployment options with step-by-step instructions
- Team Operations Guide - Multi-operator playbook for teams up to 10+ people
Located in /DOCUMENTATION/:
- Deployment Architecture Explained - Visual ASCII diagrams explaining deployment concepts
- SSH Tunnel Explained - How SSH tunnels provide secure remote access
- Tailscale Explained - Mesh VPN networking for always-on remote access
| Feature | VM-Isolated | Native macOS |
|---|---|---|
| Security | Maximum (VM isolation) | Host-level |
| Setup Time | 30-45 min | 10-15 min |
| iMessage | ✅ Yes | ✅ Yes |
| Performance | Good (virtualized) | Excellent (native) |
| Isolation | Full VM boundary | Process-level |
| Snapshots | ✅ Yes | ❌ No |
| Hardware Access | Limited | Full |
| Best For | Production, multi-tenant | Development, testing |
| Cost | $0 | $0 |
For non-macOS deployments, see the broader ecosystem:
| Platform | Cost | iMessage | Always-on | Best For |
|---|---|---|---|---|
| Docker Local | $0 | ❌ | Manual | Portable setup |
| Fly.io | $10-15/mo | ❌ | ✅ | Production |
| Hetzner VPS | $5/mo | ❌ | ✅ | Budget hosting |
| GCP Free Tier | $0-5/mo | ❌ | ✅ | Enterprise |
| DigitalOcean | $6/mo | ❌ | ✅ | Simple VPS |
For teams managing Clawdbot deployments, the Team Operations Guide covers:
- Team Structure - 4-tier role system (Owner → Operator → Moderator → Observer)
- Access Management - Credential tiers and permission matrices
- Onboarding/Offboarding - Checklists for team changes
- Daily Operations - Health checks and shift handoffs
- Incident Response - Severity levels S1-S4 with escalation paths
- Security Protocols - Access control and monitoring requirements
- Communication Standards - Channel structure and templates
- Navigate to deployment toolkit:
cd "SETUP GUIDES/openclaw-vm-setup" - Review the VM Security Hardening Guide
- Run the automated setup:
./setup.sh - Follow the Customer Setup Guide for Gateway configuration
- For teams, review the Team Operations Guide
- Navigate to deployment toolkit:
cd "SETUP GUIDES/openclaw-native-setup" - Review the Native macOS Lockdown Guide
- Follow security hardening steps
- Install Gateway directly on host
- Configure according to Customer Setup Guide
- Deployment Guide - Compare all platform options
- SSH Tunnel Explained - Remote access architecture
- Tailscale Explained - VPN mesh networking
Part of the Organized AI ecosystem.