/alibabacloud-openclaw-ecs-dingtalk

name: alibabacloud-openclaw-ecs-dingtalk
description: |
  Deploy OpenClaw AI agent platform on Alibaba Cloud ECS and integrate with DingTalk bot. OpenClaw (formerly Clawdbot/Moltbot, 中文名"龙虾") is an open-source AI assistant and automation platform supporting natural language-driven task automation with multi-channel chat integration. This Skill covers the full workflow from ECS instance creation, public network configuration, base environment setup, one-click OpenClaw deployment to DingTalk bot verification. End users can chat with the AI assistant by @mentioning the bot in a DingTalk group.
  Triggers: "OpenClaw", "龙虾", "Clawdbot", "Moltbot", "DingTalk bot", "DingTalk AI", "deploy OpenClaw on ECS", "AI agent platform", "DingTalk integration", "openclaw dingtalk", "openclaw deploy", "DingTalk AI employee", "Alibaba Cloud OpenClaw", "Bailian + DingTalk", "DingTalk group AI", "DingTalk smart assistant", "部署龙虾", "龙虾机器人", "龙虾钉钉"

Deploy OpenClaw on ECS with DingTalk Integration

Deploy OpenClaw AI agent platform on an Alibaba Cloud ECS instance with one click, configure Alibaba Cloud Bailian LLM, and connect to a DingTalk group via a DingTalk bot, enabling users to chat with AI directly in DingTalk.

> Source: This Skill is based on Alibaba Cloud official documentation and OpenClaw open-source project documentation. See reference links at the end. > > Version: This Skill is written for OpenClaw March 2026 release and the `@dingtalk-real-ai/dingtalk-connector` plugin, verified on 2026-03-11.

Parameter Collection

Before execution, prompt the user to provide all required parameters in a single message. Do not proceed until all required parameters are received and confirmed.

Input Validation

Validate all user inputs before use to prevent command injection. Reject inputs containing shell special characters (`;`, `|`, `&`, `$`, `\`, `'`, `"`, backticks, parentheses, brackets, newlines). Parameters must match expected formats:

• `region`: `cn-[a-z]+`, `ap-[a-z]+`, `us-[a-z]+` etc.
• `instance_type`: `ecs.[a-z0-9]+.[a-z0-9]+`
• `vpc_id/vswitch_id/security_group_id`: `vpc-/vsw-/sg-[a-z0-9]+`
• `dingtalk_client_id`: `ding[a-z0-9]+`
• `dingtalk_client_secret`: 16-64 alphanumeric chars

When passing parameters to Cloud Assistant `RunCommand`, use base64 encoding for sensitive values.

ECS Instance Parameters

| Parameter | Required | Description | Example | |-----------|----------|-------------|---------| | `region` | Yes | Deployment region | `cn-hangzhou` | | `instance_type` | No | ECS instance type (default: `ecs.c6.large`, 2 vCPU 4 GB) | `ecs.c6.large` | | `image_id` | No | OS image (default: Ubuntu 22.04) | Auto-selected | | `vpc_id` | No | Existing VPC ID (auto-created if not provided) | `vpc-xxx` | | `vswitch_id` | No | Existing VSwitch ID (auto-created if not provided) | `vsw-xxx` | | `security_group_id` | No | Existing Security Group ID (auto-created if not provided) | `sg-xxx` |

OpenClaw and Bailian Parameters

The Bailian API Key (`bailian_api_key`) is **automatically obtained via CLI** during deployment (see Step 2). No manual console operation is needed. The Skill uses `aliyun modelstudio` commands (ListWorkspaces + CreateApiKey) to retrieve or create an API Key programmatically.

> Prerequisites: The user's Alibaba Cloud account must have the Bailian (Model Studio) service activated. If not activated, guide the user to visit [Bailian Console](https://bailian.console.aliyun.com/) to activate it first.

DingTalk Integration Parameters

| Parameter | Required | Description | Example | |-----------|----------|-------------|---------| | `dingtalk_client_id` | Yes | DingTalk app Client ID | `dingxxxxxx` | | `dingtalk_client_secret` | Yes | DingTalk app Client Secret | `xxxxxxxxxxxxx` |

> If the user has not created a DingTalk app, guide them to refer to the [DingTalk App Setup Guide](references/dingtalk-setup-guide.md) to create an app, configure the bot, add permissions, publish the app, and obtain credentials.

Execution Constraints

• **Sensitive information masking**: Mask middle portion of passwords, keys, tokens, IPs, instance IDs (e.g., `ak****3d`, `i-bp1****7f2z`)
• **Input validation**: Reject shell special characters (`;`, `|`, `&`, `$`, backticks, etc.). Use parameterized API calls
• **Command injection prevention**: Encode sensitive values for Cloud Assistant RunCommand using base64
• **Network timeout**: All curl/wget operations must include `--connect-timeout` and `--max-time` parameters
• Execute steps in order; verify success after each step; inform user of current step
• If any step fails, ask user for confirmation before continuing
• Cloud Assistant `RunCommand` results: poll `DescribeInvocations` every 15+ seconds
• **Destructive operations**: Confirm with user and verify resource state before deletion

---

Step 1: Create ECS Instance

1.1 Verify Alibaba Cloud Account

aliyun sts GetCallerIdentity \
  --user-agent AlibabaCloud-Agent-Skills

1.2 Check Zone Availability

Query which availability zones have stock for the target instance type to avoid creating resources in an unavailable zone:

aliyun ecs DescribeAvailableResource \
  --RegionId ${region} \
  --DestinationResource InstanceType \
  --InstanceChargeType PostPaid \
  --InstanceType ${instance_type} \
  --user-agent AlibabaCloud-Agent-Skills

Select a zone where `StatusCategory` is `WithStock` from the result, record as `${zone_id}`.

1.3 Create VPC and VSwitch (if not provided by user)

# Create VPC
aliyun vpc CreateVpc \
  --RegionId ${region} \
  --VpcName openclaw-vpc \
  --CidrBlock 172.16.0.0/16 \
  --user-agent AlibabaCloud-Agent-Skills

# Create VSwitch (use the zone with stock found in the previous step)
aliyun vpc CreateVSwitch \
  --RegionId ${region} \
  --VpcId ${vpc_id} \
  --VSwitchName openclaw-vswitch \
  --CidrBlock 172.16.0.0/24 \
  --ZoneId ${zone_id} \
  --user-agent AlibabaCloud-Agent-Skills

1.4 Create Secur