Linux install

Turn a VPS into an agent machine.

CARAPACE gives Linux, VPS, and Raspberry Pi installs the same phone control layer: secure pairing, runtime switching, projects, cron, agents, history, vision, voice, and a safer setup path that layers on top of OpenClaw instead of replacing it.

Recommended: paste-one-prompt setup
Linux / VPS / Raspberry Pi
terminal
curl -fsSL https://openclaw.ai/install.sh | bash
curl -fsSL https://carapace.info/install.sh | bash
# Optional Hermes addon
curl -fsSL https://carapace.info/install-hermes-agent.sh | bash
OpenClaw

Primary runtime and gateway.

CARAPACE

Tailscale route, QR, iPhone bridge.

Hermes

Optional companion runtime.

1

Install OpenClaw first

OpenClaw is the main gateway and operating layer. Install it before CARAPACE on Linux, VPS, or Raspberry Pi.

openclaw
curl -fsSL \
  https://openclaw.ai/install.sh | bash
2

Add CARAPACE

The CARAPACE installer layers mobile pairing, Tailscale Serve routes, project tracking, cron control, agent views, voice/TTS support, and iPhone-ready status endpoints on top of OpenClaw. Re-runs refresh the status server from the deployed CARAPACE site with a cache-buster.

carapace
curl -fsSL \
  https://carapace.info/install.sh | bash
3

Optional: add Hermes

Hermes is not bundled into the normal installer. Add it only if you want a second runtime on the same machine with separate history, projects, cron, agents, and token state.

hermes addon
curl -fsSL \
  https://carapace.info/install-hermes-agent.sh | bash
4

Pair with iPhone

The installer prints a QR. Install Tailscale on the iPhone, sign in to the same tailnet, open CARAPACE, then scan the QR. Combined OpenClaw and Hermes installs can appear as one machine with a runtime toggle.

5

What setup now changes

CARAPACE keeps Projects low-noise: it ensures the project-scan sentinel exists, but it does not automatically import old memory unless you ask. It also quiets legacy heartbeat files so routine background checks do not burn context every few minutes.

6

Fast checks

If pairing fails, confirm Tailscale is connected on both devices, the gateway is healthy, the iPhone has Tailscale DNS enabled, the QR was generated after the latest install rerun, and /diag reports a live gateway.