Re: Docker — it can work, but the main gotchas are usually about where the auth/session state lives.

A couple practical tips that tend to unblock people:

• Make sure the container has a persistent volume for whatever directory Clawd/OpenClaw stores its auth/session tokens in (so you don’t “log in” on every restart).
• If the flow requires opening a browser/device auth, do that once on a machine with a browser, then copy the resulting token/session into the mounted volume (or pass via env vars if supported).

If you share which deployment you’re using (docker compose? remote gateway? headless VPS?) and which provider (Codex subscription vs API key), people can give a more exact recipe.