Europe 2026
Lobster Trap: OpenClaw in Containers from Local to K8s and Back — Sally Ann O'Malley, Red Hat
Overview
This talk demonstrates how to run OpenClaw, an open-source coding agent, within containers, from local development environments to Kubernetes clusters. The core thesis is that containerization provides a reproducible, secure, and portable way to deploy and manage AI workloads like OpenClaw, simplifying development, onboarding, and scaling.
Who should watch
- AI Engineers
- Product Managers
- Builders experimenting with AI agents
- Those looking to deploy AI workloads securely and at scale
- Developers interested in containerizing applications
Key takeaways
- Running AI agents like OpenClaw in containers offers benefits such as reproducibility, secret isolation, portability across infrastructure, and easier backup and recovery.
- Containers provide a natural sandbox, requiring explicit permissions for host access and preventing OS quirks or stale dependencies from affecting the agent's environment.
- Secrets management is crucial; tools like Podman secrets and Kubernetes secrets, combined with OpenClaw's secret reference feature, enhance security by avoiding direct exposure of API keys in logs.
- Containerization simplifies the setup of agent directories, including tools, skills, and MCP servers, ensuring everything is ready at startup.
- The talk advocates for a "develop locally, lift to Kubernetes" approach for AI workloads, mirroring standard application development practices.
- Nvidia is using OpenClaw instances running in Kubernetes for model evaluations, with approximately 10 engineers each managing their own instances.
- Containerized AI workloads enable teams to focus on more creative and complex tasks by automating tedious coding and repetitive processes.
- A vision for workplace AI deployment includes standardized, pre-configured OpenClaw environments for new hires, ensuring consistent tooling and approved access to company resources.
Notable quotes
Sally Ann OMalley: *Running in containers is reproducible, you can isolate your secrets, it's portable across infra.*
Sally Ann OMalley: *This is literally the definition of why you should run everything in containers.*
Sally Ann OMalley: *The same story holds for AI workloads or OpenClaw.*
Unofficial community note. Prefer the recording for nuance.