I built myself a docker container for openclaw which has an X server inside with VNC access. Openclaw only has access to a single folder on my machine that is shared with the container.

I'm currently using this for social media research via browser automation, running as a daily cron job.

Given I have VNC access and the browser is not in headless mode I can solve captchas myself as the agent runs into them.

Apart from a known issue with the openclaw browser which the agent itself was made aware of so it could work around it, this has been working well so far.

I'm thinking of open sourcing this container at some point...