{"id":130077,"date":"2026-09-14T10:57:47","date_gmt":"2026-09-14T03:57:47","guid":{"rendered":"https:\/\/tino.vn\/blog\/?p=130077"},"modified":"2026-09-14T11:06:46","modified_gmt":"2026-09-14T04:06:46","slug":"cach-ly-sandbox-cho-ai-agent-tren-vps","status":"publish","type":"post","link":"https:\/\/tino.vn\/blog\/cach-ly-sandbox-cho-ai-agent-tren-vps\/","title":{"rendered":"H\u01b0\u1edbng d\u1eabn c\u00e1ch ly Sandbox cho AI Agent tr\u00ean VPS\u00a0"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>M\u1ed9t AI Agent c\u00f3 kh\u1ea3 n\u0103ng \u0111\u1ecdc file, g\u1eedi tin nh\u1eafn, m\u1edf tr\u00ecnh duy\u1ec7t v\u00e0 t\u1ef1 th\u1ef1c thi l\u1ec7nh tr\u00ean m\u00e1y ch\u1ee7 nghe r\u1ea5t h\u1ea5p d\u1eabn, nh\u01b0ng c\u0169ng \u0111\u1ed3ng ngh\u0129a v\u1edbi m\u1ed9t r\u1ee7i ro b\u1ea3o m\u1eadt kh\u1ed5ng l\u1ed3 n\u1ebfu thi\u1ebfu l\u1edbp c\u00e1ch ly ph\u00f9 h\u1ee3p. Ch\u1ec9 m\u1ed9t y\u00eau c\u1ea7u sai, m\u1ed9t n\u1ed9i dung ch\u1ee9a prompt injection ho\u1eb7c m\u1ed9t Skill kh\u00f4ng an to\u00e0n c\u0169ng c\u00f3 th\u1ec3 khi\u1ebfn Agent th\u1ef1c hi\u1ec7n h\u00e0nh \u0111\u1ed9ng ngo\u00e0i mong mu\u1ed1n. C\u00f9ng T\u00ecm hi\u1ec3u ph\u01b0\u01a1ng ph\u00e1p c\u00e1ch ly Sandbox cho AI Agent tr\u00ean VPS qua b\u00e0i vi\u1ebft d\u01b0\u1edbi \u0111\u00e2y nh\u00e9!<\/strong><\/p>\n\n\n\n<h2 id=\"C\u00e1ch_ly_Sandbox_cho_AI_Agent_l\u00e0_g\u00ec?\"><strong>C\u00e1ch ly Sandbox cho AI Agent l\u00e0 g\u00ec?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Sandbox<\/strong> c\u00f3 th\u1ec3 hi\u1ec3u \u0111\u01a1n gi\u1ea3n l\u00e0 m\u1ed9t m\u00f4i tr\u01b0\u1eddng th\u1ef1c thi \u0111\u01b0\u1ee3c gi\u1edbi h\u1ea1n v\u00e0 t\u00e1ch bi\u1ec7t kh\u1ecfi ph\u1ea7n c\u00f2n l\u1ea1i c\u1ee7a m\u00e1y ch\u1ee7, t\u01b0\u01a1ng t\u1ef1 vi\u1ec7c cho tr\u1ebb nh\u1ecf ch\u01a1i trong m\u1ed9t h\u1ed9p c\u00e1t thay v\u00ec th\u1ea3 t\u1ef1 do kh\u1eafp c\u0103n nh\u00e0.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Thay v\u00ec cho AI Agent tr\u1ef1c ti\u1ebfp:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u0111\u1ecdc to\u00e0n b\u1ed9 file tr\u00ean VPS;<\/li>\n\n\n\n<li>ch\u1ea1y m\u1ecdi c\u00e2u l\u1ec7nh Linux;<\/li>\n\n\n\n<li>truy c\u1eadp th\u01b0 m\u1ee5c ch\u1ee9a SSH Key;<\/li>\n\n\n\n<li>s\u1eed d\u1ee5ng to\u00e0n b\u1ed9 CPU v\u00e0 RAM;<\/li>\n\n\n\n<li>k\u1ebft n\u1ed1i t\u1ef1 do t\u1edbi Internet;<\/li>\n\n\n\n<li>can thi\u1ec7p v\u00e0o c\u00e1c ti\u1ebfn tr\u00ecnh kh\u00e1c;<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">qu\u1ea3n tr\u1ecb vi\u00ean c\u00f3 th\u1ec3 \u0111\u01b0a nh\u1eefng ho\u1ea1t \u0111\u1ed9ng c\u00f3 r\u1ee7i ro cao v\u00e0o m\u1ed9t Sandbox ri\u00eang.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"700\" height=\"375\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-1.png\" alt=\"C\u00e1ch ly Sandbox cho AI Agent l\u00e0 g\u00ec?\" class=\"wp-image-130107\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-1.png 700w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-1-300x161.png 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><figcaption class=\"wp-element-caption\"><strong>C\u00e1ch ly Sandbox cho AI Agent l\u00e0 g\u00ec?<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">L\u00fac n\u00e0y, AI Agent v\u1eabn c\u00f3 m\u00f4i tr\u01b0\u1eddng \u0111\u1ec3 x\u1eed l\u00fd c\u00f4ng vi\u1ec7c, nh\u01b0ng ch\u1ec9 \u0111\u01b0\u1ee3c ti\u1ebfp c\u1eadn nh\u1eefng t\u00e0i nguy\u00ean \u0111\u00e3 \u0111\u01b0\u1ee3c c\u1ea5p ph\u00e9p.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ed d\u1ee5, OpenClaw c\u1ea7n \u0111\u1ecdc m\u1ed9t t\u00e0i li\u1ec7u v\u00e0 t\u1ea1o file k\u1ebft qu\u1ea3. B\u1ea1n c\u00f3 th\u1ec3 ch\u1ec9 c\u1ea5p cho Agent m\u1ed9t workspace c\u1ee5 th\u1ec3 thay v\u00ec cho ph\u00e9p truy c\u1eadp \/root, \/etc, SSH Key v\u00e0 to\u00e0n b\u1ed9 d\u1eef li\u1ec7u tr\u00ean VPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u00e2y ch\u00ednh l\u00e0 nguy\u00ean t\u1eafc <strong>least privilege \u2013 quy\u1ec1n t\u1ed1i thi\u1ec3u<\/strong>: AI Agent ch\u1ec9 nh\u1eadn nh\u1eefng quy\u1ec1n th\u1ef1c s\u1ef1 c\u1ea7n \u0111\u1ec3 ho\u00e0n th\u00e0nh t\u00e1c v\u1ee5.<\/p>\n\n\n\n<h3 id=\"Sandbox_ho\u1ea1t_\u0111\u1ed9ng_nh\u01b0_th\u1ebf_n\u00e0o?\"><strong>Sandbox ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o?<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00f3 th\u1ec3 h\u00ecnh dung VPS l\u00e0 m\u1ed9t ng\u00f4i nh\u00e0 v\u00e0 AI Agent l\u00e0 m\u1ed9t nh\u00e2n vi\u00ean \u0111\u01b0\u1ee3c thu\u00ea \u0111\u1ec3 th\u1ef1c hi\u1ec7n c\u00f4ng vi\u1ec7c. N\u1ebfu trao to\u00e0n b\u1ed9 ch\u00eca kh\u00f3a, nh\u00e2n vi\u00ean c\u00f3 th\u1ec3 v\u00e0o b\u1ea5t k\u1ef3 ph\u00f2ng n\u00e0o.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sandbox gi\u1ed1ng nh\u01b0 vi\u1ec7c chu\u1ea9n b\u1ecb m\u1ed9t ph\u00f2ng l\u00e0m vi\u1ec7c ri\u00eang. Trong ph\u00f2ng ch\u1ec9 c\u00f3 nh\u1eefng t\u00e0i li\u1ec7u, c\u00f4ng c\u1ee5 v\u00e0 thi\u1ebft b\u1ecb c\u1ea7n thi\u1ebft. C\u00e1c khu v\u1ef1c quan tr\u1ecdng kh\u00e1c v\u1eabn b\u1ecb kh\u00f3a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u1edbi AI Agent tr\u00ean VPS, Sandbox th\u01b0\u1eddng gi\u1edbi h\u1ea1n 4 nh\u00f3m ch\u00ednh:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>H\u1ec7 th\u1ed1ng file:<\/strong> Agent ch\u1ec9 \u0111\u1ecdc ho\u1eb7c ghi trong nh\u1eefng th\u01b0 m\u1ee5c \u0111\u01b0\u1ee3c c\u1ea5p quy\u1ec1n.<\/li>\n\n\n\n<li><strong>Ti\u1ebfn tr\u00ecnh:<\/strong> C\u00e1c c\u00e2u l\u1ec7nh \u0111\u01b0\u1ee3c ch\u1ea1y b\u00ean trong m\u00f4i tr\u01b0\u1eddng c\u00e1ch ly thay v\u00ec tr\u1ef1c ti\u1ebfp tr\u00ean h\u1ec7 \u0111i\u1ec1u h\u00e0nh VPS.<\/li>\n\n\n\n<li><strong>M\u1ea1ng:<\/strong> C\u00f3 th\u1ec3 ch\u1eb7n ho\u00e0n to\u00e0n Internet ho\u1eb7c ch\u1ec9 m\u1edf khi th\u1ef1c s\u1ef1 c\u1ea7n.<\/li>\n\n\n\n<li><strong>T\u00e0i nguy\u00ean:<\/strong> CPU, RAM, s\u1ed1 l\u01b0\u1ee3ng process v\u00e0 nh\u1eefng t\u00e0i nguy\u00ean kh\u00e1c c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c gi\u1edbi h\u1ea1n.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Docker l\u00e0 m\u1ed9t trong nh\u1eefng c\u00f4ng ngh\u1ec7 ph\u1ed5 bi\u1ebfn \u0111\u1ec3 t\u1ea1o l\u1edbp c\u00e1ch ly d\u1ea1ng n\u00e0y tr\u00ean Linux.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"700\" height=\"375\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-2.png\" alt=\"Sandbox ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o?\" class=\"wp-image-130108\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-2.png 700w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-2-300x161.png 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><figcaption class=\"wp-element-caption\"><strong><strong>Sandbox ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o?<\/strong><\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<h3 id=\"Sandbox_kh\u00e1c_g\u00ec_v\u1edbi_Docker?\"><strong>Sandbox kh\u00e1c g\u00ec v\u1edbi Docker?<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Hai kh\u00e1i ni\u1ec7m n\u00e0y kh\u00e1 d\u1ec5 nh\u1ea7m.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>H\u00ecnh th\u1ee9c<\/th><th>M\u1ee5c \u0111\u00edch<\/th><\/tr><tr><td>Ch\u1ea1y OpenClaw Gateway trong Docker<\/td><td>C\u00e1ch ly \u1ee9ng d\u1ee5ng OpenClaw kh\u1ecfi h\u1ec7 \u0111i\u1ec1u h\u00e0nh VPS<\/td><\/tr><tr><td>OpenClaw Tool Sandbox<\/td><td>C\u00e1ch ly c\u00e1c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a Agent nh\u01b0 <code>exec<\/code>, \u0111\u1ecdc file, ghi file v\u00e0 process<\/td><\/tr><tr><td>K\u1ebft h\u1ee3p c\u1ea3 hai<\/td><td>T\u1ea1o th\u00eam nhi\u1ec1u l\u1edbp b\u1ea3o v\u1ec7<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Theo t\u00e0i li\u1ec7u OpenClaw hi\u1ec7n t\u1ea1i, <strong>container h\u00f3a to\u00e0n b\u1ed9 Gateway v\u00e0 b\u1eadt sandbox cho c\u00f4ng c\u1ee5 l\u00e0 hai l\u1edbp c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng song song<\/strong>. Sandbox c\u00f4ng c\u1ee5 kh\u00f4ng b\u1eaft bu\u1ed9c Gateway ph\u1ea3i ch\u1ea1y trong container.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ec v\u1eady, c\u00e2u tr\u1ea3 l\u1eddi cho c\u00e2u h\u1ecfi:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u201cT\u00f4i \u0111\u00e3 ch\u1ea1y OpenClaw b\u1eb1ng Docker th\u00ec c\u00f3 c\u1ea7n Sandbox n\u1eefa kh\u00f4ng?\u201d<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">l\u00e0 <strong>v\u1eabn n\u00ean c\u00e2n nh\u1eafc b\u1eadt sandbox<\/strong>, \u0111\u1eb7c bi\u1ec7t khi Agent \u0111\u01b0\u1ee3c ph\u00e9p ch\u1ea1y shell, x\u1eed l\u00fd file, s\u1eed d\u1ee5ng tr\u00ecnh duy\u1ec7t ho\u1eb7c ti\u1ebfp nh\u1eadn n\u1ed9i dung t\u1eeb ng\u01b0\u1eddi d\u00f9ng b\u00ean ngo\u00e0i.<\/p>\n\n\n\n<h2 id=\"H\u01b0\u1edbng_d\u1eabn_c\u00e1ch_ly_Sandbox_cho_AI_Agent_tr\u00ean_VPS\"><strong>H\u01b0\u1edbng d\u1eabn c\u00e1ch ly Sandbox cho AI Agent tr\u00ean VPS<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Ph\u1ea7n d\u01b0\u1edbi \u0111\u00e2y minh h\u1ecda m\u1ed9t c\u1ea5u h\u00ecnh \u01b0u ti\u00ean an to\u00e0n cho ng\u01b0\u1eddi \u0111ang ch\u1ea1y <a href=\"https:\/\/tino.vn\/blog\/openclaw-la-gi\/\" target=\"_blank\" data-type=\"post\" data-id=\"123105\" rel=\"noreferrer noopener\">OpenClaw<\/a> tr\u00ean VPS Linux.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>L\u01b0u \u00fd:<\/strong> H\u00e3y sao l\u01b0u file c\u1ea5u h\u00ecnh OpenClaw tr\u01b0\u1edbc khi ch\u1ec9nh s\u1eeda. C\u1ea5u h\u00ecnh th\u1ef1c t\u1ebf c\u00f3 th\u1ec3 c\u1ea7n thay \u0111\u1ed5i t\u00f9y theo Agent, Skill v\u00e0 c\u00f4ng c\u1ee5 \u0111ang s\u1eed d\u1ee5ng.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_1:_Ki\u1ec3m_tra_OpenClaw_tr\u00ean_VPS\"><strong>B\u01b0\u1edbc 1: Ki\u1ec3m tra OpenClaw tr\u00ean VPS<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Tr\u01b0\u1edbc ti\u00ean, <a href=\"https:\/\/tino.vn\/blog\/docs\/su-dung-phan-mem-xshell-ket-noi-ssh-toi-vps\/\" target=\"_blank\" data-type=\"ht_kb\" data-id=\"123793\" rel=\"noreferrer noopener\">SSH v\u00e0o VPS b\u1eb1ng Xshell<\/a>, Terminal ho\u1eb7c c\u00f4ng c\u1ee5 SSH \u0111ang s\u1eed d\u1ee5ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ki\u1ec3m tra OpenClaw:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw --version<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu h\u1ec7 th\u1ed1ng tr\u1ea3 v\u1ec1 phi\u00ean b\u1ea3n OpenClaw, b\u1ea1n c\u00f3 th\u1ec3 ti\u1ebfp t\u1ee5c.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ti\u1ebfp theo, ki\u1ec3m tra file c\u1ea5u h\u00ecnh OpenClaw \u0111ang s\u1eed d\u1ee5ng:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw config file<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Th\u00f4ng th\u01b0\u1eddng, file c\u1ea5u h\u00ecnh n\u1eb1m t\u1ea1i:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>~\/.openclaw\/openclaw.json<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"738\" height=\"356\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_1-5.png\" alt=\"Ki\u1ec3m tra OpenClaw tr\u00ean VPS\" class=\"wp-image-130093\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_1-5.png 738w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_1-5-300x145.png 300w\" sizes=\"(max-width: 738px) 100vw, 738px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra OpenClaw tr\u00ean VPS<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Tuy nhi\u00ean, n\u00ean s\u1eed d\u1ee5ng openclaw config file \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh ch\u00ednh x\u00e1c \u0111\u01b0\u1eddng d\u1eabn thay v\u00ec t\u1ef1 gi\u1ea3 \u0111\u1ecbnh v\u1ecb tr\u00ed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OpenClaw hi\u1ec7n h\u1ed7 tr\u1ee3 c\u00e1c l\u1ec7nh config get, config set, config patch v\u00e0 config validate, v\u00ec v\u1eady ph\u1ea7n h\u01b0\u1edbng d\u1eabn b\u00ean d\u01b0\u1edbi kh\u00f4ng y\u00eau c\u1ea7u ch\u1ec9nh s\u1eeda tr\u1ef1c ti\u1ebfp file JSON b\u1eb1ng nano.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_2:_Ki\u1ec3m_tra_Docker_tr\u00ean_VPS\"><strong>B\u01b0\u1edbc 2: Ki\u1ec3m tra Docker tr\u00ean VPS<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Sandbox Docker c\u1ea7n Docker Engine \u0111\u1ec3 t\u1ea1o c\u00e1c container c\u00e1ch ly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ki\u1ec3m tra b\u1eb1ng:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker --version<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Sau \u0111\u00f3 nh\u1eadp l\u1ec7nh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker info<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu hai l\u1ec7nh ho\u1ea1t \u0111\u1ed9ng b\u00ecnh th\u01b0\u1eddng, chuy\u1ec3n sang <strong>B\u01b0\u1edbc 3<\/strong>.<\/p>\n\n\n\n<h4 id=\"N\u1ebfu_VPS_ch\u01b0a_c\u00f3_Docker\"><strong>N\u1ebfu VPS ch\u01b0a c\u00f3 Docker<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ea7u ti\u00ean ki\u1ec3m tra h\u1ec7 \u0111i\u1ec1u h\u00e0nh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat \/etc\/os-release<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"852\" height=\"297\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_2-3.png\" alt=\"Ki\u1ec3m tra Docker tr\u00ean VPS\" class=\"wp-image-130094\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_2-3.png 852w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_2-3-300x105.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_2-3-766x267.png 766w\" sizes=\"(max-width: 852px) 100vw, 852px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra Docker tr\u00ean VPS<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu VPS \u0111ang s\u1eed d\u1ee5ng Ubuntu, c\u00f3 th\u1ec3 c\u00e0i Docker Engine t\u1eeb repository ch\u00ednh th\u1ee9c c\u1ee7a Docker.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng v\u00e0 c\u00e0i c\u00e1c g\u00f3i c\u1ea7n thi\u1ebft:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update\n\nsudo apt install -y ca-certificates curl<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"855\" height=\"413\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_3-4.png\" alt=\"Ki\u1ec3m tra Docker tr\u00ean VPS\" class=\"wp-image-130095\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_3-4.png 855w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_3-4-300x145.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_3-4-766x370.png 766w\" sizes=\"(max-width: 855px) 100vw, 855px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra Docker tr\u00ean VPS<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">T\u1ea1o th\u01b0 m\u1ee5c ch\u1ee9a kh\u00f3a:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo install -m 0755 -d \/etc\/apt\/keyrings<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">T\u1ea3i kh\u00f3a ch\u00ednh th\u1ee9c c\u1ee7a Docker:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo curl -fsSL https:\/\/download.docker.com\/linux\/ubuntu\/gpg \\\n\n-o \/etc\/apt\/keyrings\/docker.asc<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">C\u1ea5p quy\u1ec1n \u0111\u1ecdc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo chmod a+r \/etc\/apt\/keyrings\/docker.asc<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Th\u00eam Docker repository:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo tee \/etc\/apt\/sources.list.d\/docker.sources &lt;&lt;EOF\n\nTypes: deb\n\nURIs: https:\/\/download.docker.com\/linux\/ubuntu\n\nSuites: $(. \/etc\/os-release &amp;&amp; echo \"${UBUNTU_CODENAME:-$VERSION_CODENAME}\")\n\nComponents: stable\n\nArchitectures: $(dpkg --print-architecture)\n\nSigned-By: \/etc\/apt\/keyrings\/docker.asc\n\nEOF<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">C\u1eadp nh\u1eadt repository:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e0i Docker:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"305\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-4-1024x305.png\" alt=\"Ki\u1ec3m tra Docker tr\u00ean VPS\" class=\"wp-image-130096\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-4-1024x305.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-4-300x89.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-4-766x228.png 766w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-4-1536x457.jpg 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-4.png 1825w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra Docker tr\u00ean VPS<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Ki\u1ec3m tra Docker:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl status docker<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"254\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_5-4-1024x254.png\" alt=\"Ki\u1ec3m tra Docker tr\u00ean VPS\" class=\"wp-image-130097\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_5-4-1024x254.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_5-4-300x74.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_5-4-766x190.png 766w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_5-4-1536x381.jpg 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_5-4.png 1887w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra Docker tr\u00ean VPS<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Sau \u0111\u00f3 th\u1eed ch\u1ea1y container:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo docker run hello-world<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu xu\u1ea5t hi\u1ec7n th\u00f4ng b\u00e1o Hello from Docker!, Docker \u0111\u00e3 ho\u1ea1t \u0111\u1ed9ng.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_3:_T\u1ea1o_Docker_image_d\u00e0nh_cho_OpenClaw_Sandbox\"><strong>B\u01b0\u1edbc 3: T\u1ea1o Docker image d\u00e0nh cho OpenClaw Sandbox<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">OpenClaw c\u1ea7n m\u1ed9t Docker image \u0111\u1ec3 t\u1ea1o m\u00f4i tr\u01b0\u1eddng ch\u1ea1y c\u00e1ch ly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi Docker \u0111\u00e3 ho\u1ea1t \u0111\u1ed9ng, OpenClaw c\u1ea7n m\u1ed9t Docker image ri\u00eang \u0111\u1ec3 t\u1ea1o m\u00f4i tr\u01b0\u1eddng sandbox. Image m\u1eb7c \u0111\u1ecbnh hi\u1ec7n t\u1ea1i c\u00f3 t\u00ean:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw-sandbox:bookworm-slim<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">OpenClaw kh\u00f4ng t\u1ef1 chuy\u1ec3n sang m\u1ed9t Debian image kh\u00e1c n\u1ebfu image n\u00e0y ch\u01b0a t\u1ed3n t\u1ea1i. V\u00ec v\u1eady, b\u1ea1n c\u1ea7n t\u1ea1o image tr\u01b0\u1edbc khi b\u1eadt sandbox.<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_3.1:_Ki\u1ec3m_tra_image_\u0111\u00e3_t\u1ed3n_t\u1ea1i_ch\u01b0a\"><strong>B\u01b0\u1edbc 3.1: Ki\u1ec3m tra image \u0111\u00e3 t\u1ed3n t\u1ea1i ch\u01b0a<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker images | grep openclaw-sandbox<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu xu\u1ea5t hi\u1ec7n d\u00f2ng t\u01b0\u01a1ng t\u1ef1:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw-sandbox \u00a0 bookworm-slim \u00a0 \u2026<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">image \u0111\u00e3 c\u00f3 s\u1eb5n v\u00e0 b\u1ea1n c\u00f3 th\u1ec3 chuy\u1ec3n sang <strong>B\u01b0\u1edbc 4: B\u1eadt Sandbox cho OpenClaw<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu l\u1ec7nh kh\u00f4ng hi\u1ec3n th\u1ecb k\u1ebft qu\u1ea3, h\u00e3y ti\u1ebfp t\u1ee5c t\u1ea1o image.<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_3.2:_T\u1ea1o_Dockerfile_cho_sandbox\"><strong>B\u01b0\u1edbc 3.2: T\u1ea1o Dockerfile cho sandbox<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 tr\u00e1nh l\u1ed7i khi copy m\u1ed9t kh\u1ed1i l\u1ec7nh nhi\u1ec1u d\u00f2ng v\u00e0o Xshell, h\u00e3y s\u1eed d\u1ee5ng l\u1ec7nh d\u01b0\u1edbi \u0111\u00e2y.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Copy nguy\u00ean l\u1ec7nh v\u00e0 d\u00e1n v\u00e0o VPS:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>printf '%s\\n' 'FROM debian:bookworm-slim' 'ENV DEBIAN_FRONTEND=noninteractive' 'RUN apt-get update &amp;&amp; apt-get install -y --no-install-recommends bash ca-certificates curl git jq python3 ripgrep &amp;&amp; rm -rf \/var\/lib\/apt\/lists\/*' 'RUN useradd --create-home --shell \/bin\/bash sandbox' 'USER sandbox' 'WORKDIR \/home\/sandbox' 'CMD &#91;\"sleep\", \"infinity\"]' > \/tmp\/openclaw-sandbox.Dockerfile<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi ch\u1ea1y xong, VPS s\u1ebd quay tr\u1edf l\u1ea1i d\u1ea5u nh\u1eafc l\u1ec7nh, v\u00ed d\u1ee5: <strong>root@server:~#<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">L\u1ec7nh tr\u00ean s\u1ebd t\u1ea1o file:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/tmp\/openclaw-sandbox.Dockerfile<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ed9i dung Dockerfile t\u01b0\u01a1ng \u0111\u01b0\u01a1ng image m\u1eb7c \u0111\u1ecbnh m\u00e0 OpenClaw h\u01b0\u1edbng d\u1eabn cho b\u1ea3n c\u00e0i \u0111\u1eb7t npm.<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_3.3:_Ki\u1ec3m_tra_Dockerfile_v\u1eeba_t\u1ea1o\"><strong>B\u01b0\u1edbc 3.3: Ki\u1ec3m tra Dockerfile v\u1eeba t\u1ea1o<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat \/tmp\/openclaw-sandbox.Dockerfile<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">K\u1ebft qu\u1ea3 c\u1ea7n c\u00f3 d\u1ea1ng:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>FROM debian:bookworm-slim\n\nENV DEBIAN_FRONTEND=noninteractive\n\nRUN apt-get update &amp;&amp; apt-get install -y --no-install-recommends bash ca-certificates curl git jq python3 ripgrep &amp;&amp; rm -rf \/var\/lib\/apt\/lists\/*\n\nRUN useradd --create-home --shell \/bin\/bash sandbox\n\nUSER sandbox\n\nWORKDIR \/home\/sandbox\n\nCMD &#91;\"sleep\", \"infinity\"]<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"916\" height=\"422\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-3.png\" alt=\"Ki\u1ec3m tra Dockerfile v\u1eeba t\u1ea1o\" class=\"wp-image-130098\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-3.png 916w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-3-300x138.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-3-766x353.png 766w\" sizes=\"(max-width: 916px) 100vw, 916px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra Dockerfile v\u1eeba t\u1ea1o<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu n\u1ed9i dung t\u01b0\u01a1ng t\u1ef1 nh\u01b0 tr\u00ean, Dockerfile \u0111\u00e3 \u0111\u01b0\u1ee3c t\u1ea1o th\u00e0nh c\u00f4ng.<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_3.4:_Build_image_OpenClaw_Sandbox\"><strong>B\u01b0\u1edbc 3.4: Build image OpenClaw Sandbox<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ti\u1ebfp t\u1ee5c ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker build -t openclaw-sandbox:bookworm-slim -f \/tmp\/openclaw-sandbox.Dockerfile \/tmp<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"243\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-4-1024x243.png\" alt=\"Build image OpenClaw Sandbox\" class=\"wp-image-130099\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-4-1024x243.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-4-300x71.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-4-768x182.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-4-1536x364.jpg 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-4.png 1886w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>Build image OpenClaw Sandbox<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Docker s\u1ebd l\u1ea7n l\u01b0\u1ee3t t\u1ea3i Debian, c\u00e0i c\u00e1c c\u00f4ng c\u1ee5 c\u1ea7n thi\u1ebft nh\u01b0 bash, curl, git, jq, python3, ripgrep, sau \u0111\u00f3 t\u1ea1o image sandbox.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Qu\u00e1 tr\u00ecnh n\u00e0y c\u00f3 th\u1ec3 m\u1ea5t m\u1ed9t v\u00e0i ph\u00fat t\u00f9y t\u1ed1c \u0111\u1ed9 m\u1ea1ng v\u00e0 c\u1ea5u h\u00ecnh VPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Khi th\u00e0nh c\u00f4ng, cu\u1ed1i k\u1ebft qu\u1ea3 th\u01b0\u1eddng s\u1ebd xu\u1ea5t hi\u1ec7n th\u00f4ng tin t\u01b0\u01a1ng t\u1ef1:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>=> exporting to image\n\n=> naming to docker.io\/library\/openclaw-sandbox:bookworm-slim<\/code><\/pre>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_3.5:_Ki\u1ec3m_tra_image_sau_khi_build\"><strong>B\u01b0\u1edbc 3.5: Ki\u1ec3m tra image sau khi build<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y l\u1ea1i:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker images | grep openclaw-sandbox<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu th\u00e0nh c\u00f4ng, b\u1ea1n s\u1ebd th\u1ea5y t\u01b0\u01a1ng t\u1ef1:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw-sandbox \u00a0 bookworm-slim \u00a0 xxxxxxxxxxxx \u00a0 \u2026<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"792\" height=\"72\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_8-3.png\" alt=\" Ki\u1ec3m tra image sau khi build\" class=\"wp-image-130100\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_8-3.png 792w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_8-3-300x27.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_8-3-759x69.png 759w\" sizes=\"(max-width: 792px) 100vw, 792px\" \/><figcaption class=\"wp-element-caption\"><strong> Ki\u1ec3m tra image sau khi build<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<h3 id=\"B\u01b0\u1edbc_4:_B\u1eadt_Sandbox_cho_OpenClaw\"><strong>B\u01b0\u1edbc 4: B\u1eadt Sandbox cho OpenClaw<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u00e2y ch\u00ednh l\u00e0 thao t\u00e1c <strong>b\u1eadt Sandbox th\u1ef1c t\u1ebf<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OpenClaw m\u1eb7c \u0111\u1ecbnh \u0111\u1ec3:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sandbox.mode = off<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ec v\u1eady, Sandbox s\u1ebd ch\u01b0a \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng n\u1ebfu b\u1ea1n ch\u01b0a thay \u0111\u1ed5i c\u1ea5u h\u00ecnh.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 h\u1ea1n ch\u1ebf vi\u1ec7c ch\u1ec9nh s\u1eeda tr\u1ef1c ti\u1ebfp file openclaw.json, ch\u00fang ta s\u1ebd t\u1ea1o m\u1ed9t file c\u1ea5u h\u00ecnh b\u1ed5 sung r\u1ed3i gh\u00e9p v\u00e0o c\u1ea5u h\u00ecnh hi\u1ec7n t\u1ea1i.<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_4.1:_T\u1ea1o_file_c\u1ea5u_h\u00ecnh_sandbox\"><strong>B\u01b0\u1edbc 4.1: T\u1ea1o file c\u1ea5u h\u00ecnh sandbox<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat > ~\/openclaw-sandbox.patch.json5 &lt;&lt;'EOF'\n\n{\n\n\u00a0\u00a0agents: {\n\n\u00a0\u00a0\u00a0\u00a0defaults: {\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0sandbox: {\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0mode: \"all\",\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0backend: \"docker\",\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0scope: \"session\",\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0workspaceAccess: \"ro\",\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0docker: {\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0image: \"openclaw-sandbox:bookworm-slim\",\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0readOnlyRoot: true,\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0tmpfs: &#91;\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\"\/tmp\",\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\"\/var\/tmp\",\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\"\/run\"\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0],\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0network: \"none\",\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0capDrop: &#91;\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\"ALL\"\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0],\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0pidsLimit: 256,\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0memory: \"1g\",\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0memorySwap: \"2g\",\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0cpus: 1\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0}\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0}\n\n\u00a0\u00a0\u00a0\u00a0}\n\n\u00a0\u00a0}\n\n}\n\nEOF<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"994\" height=\"619\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_9-1.png\" alt=\"T\u1ea1o file c\u1ea5u h\u00ecnh sandbox\" class=\"wp-image-130101\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_9-1.png 994w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_9-1-300x187.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_9-1-768x478.png 768w\" sizes=\"(max-width: 994px) 100vw, 994px\" \/><figcaption class=\"wp-element-caption\"><strong>T\u1ea1o file c\u1ea5u h\u00ecnh sandbox<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">L\u1ec7nh tr\u00ean s\u1ebd t\u1ea1o file: <strong>~\/openclaw-sandbox.patch.json5<\/strong> m\u00e0 kh\u00f4ng c\u1ea7n d\u00f9ng <strong>nano<\/strong>.<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_4.2:_Ki\u1ec3m_tra_n\u1ed9i_dung_v\u1eeba_t\u1ea1o\"><strong>B\u01b0\u1edbc 4.2: Ki\u1ec3m tra n\u1ed9i dung v\u1eeba t\u1ea1o<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat ~\/openclaw-sandbox.patch.json5<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu to\u00e0n b\u1ed9 c\u1ea5u h\u00ecnh xu\u1ea5t hi\u1ec7n \u0111\u1ea7y \u0111\u1ee7, ti\u1ebfp t\u1ee5c b\u01b0\u1edbc ti\u1ebfp theo.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_5:_Ki\u1ec3m_tra_c\u1ea5u_h\u00ecnh_tr\u01b0\u1edbc_khi_\u00e1p_d\u1ee5ng\"><strong>B\u01b0\u1edbc 5: Ki\u1ec3m tra c\u1ea5u h\u00ecnh tr\u01b0\u1edbc khi \u00e1p d\u1ee5ng<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Kh\u00f4ng n\u00ean \u00e1p d\u1ee5ng ngay.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OpenClaw h\u1ed7 tr\u1ee3 ch\u1ebf \u0111\u1ed9 <strong>&#8211;dry-run<\/strong>, gi\u00fap ki\u1ec3m tra patch tr\u01b0\u1edbc m\u00e0 ch\u01b0a thay \u0111\u1ed5i c\u1ea5u h\u00ecnh \u0111ang s\u1eed d\u1ee5ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw config patch --file ~\/openclaw-sandbox.patch.json5 --dry-run<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"890\" height=\"160\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_10.png\" alt=\"Ki\u1ec3m tra c\u1ea5u h\u00ecnh tr\u01b0\u1edbc khi \u00e1p d\u1ee5ng\" class=\"wp-image-130102\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_10.png 890w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_10-300x54.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_10-768x138.png 768w\" sizes=\"(max-width: 890px) 100vw, 890px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra c\u1ea5u h\u00ecnh tr\u01b0\u1edbc khi \u00e1p d\u1ee5ng<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<ul class=\"wp-block-list\">\n<li>N\u1ebfu xu\u1ea5t hi\u1ec7n th\u00f4ng b\u00e1o th\u00e0nh c\u00f4ng v\u00e0 kh\u00f4ng b\u00e1o l\u1ed7i schema, c\u1ea5u h\u00ecnh c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c \u00e1p d\u1ee5ng.<\/li>\n\n\n\n<li>N\u1ebfu xu\u1ea5t hi\u1ec7n l\u1ed7i, d\u1eebng t\u1ea1i \u0111\u00e2y v\u00e0 ki\u1ec3m tra n\u1ed9i dung file tr\u01b0\u1edbc khi ti\u1ebfp t\u1ee5c.<\/li>\n<\/ul>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_6:_\u00c1p_d\u1ee5ng_c\u1ea5u_h\u00ecnh_Sandbox\"><strong>B\u01b0\u1edbc 6: \u00c1p d\u1ee5ng c\u1ea5u h\u00ecnh Sandbox<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Khi dry-run kh\u00f4ng c\u00f2n l\u1ed7i, ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw config patch --file ~\/openclaw-sandbox.patch.json5<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">L\u1ec7nh <strong>config patch<\/strong> s\u1ebd <strong>merge c\u1ea5u h\u00ecnh Sandbox v\u00e0o c\u1ea5u h\u00ecnh OpenClaw hi\u1ec7n c\u00f3<\/strong>, thay v\u00ec thay to\u00e0n b\u1ed9 file c\u1ea5u h\u00ecnh. V\u00ec v\u1eady, c\u00e1c ph\u1ea7n kh\u00e1c nh\u01b0 model, API key, Telegram, Discord ho\u1eb7c c\u1ea5u h\u00ecnh Agent v\u1eabn \u0111\u01b0\u1ee3c gi\u1eef l\u1ea1i n\u1ebfu kh\u00f4ng tr\u00f9ng v\u1edbi c\u00e1c tr\u01b0\u1eddng \u0111ang patch.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi \u00e1p d\u1ee5ng, ki\u1ec3m tra:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw config get agents.defaults.sandbox<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">B\u1ea1n n\u00ean th\u1ea5y c\u00e1c gi\u00e1 tr\u1ecb nh\u01b0:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>mode: all\n\nbackend: docker\n\nscope: session\n\nworkspaceAccess: ro\n\n\u2026.<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"1009\" height=\"618\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_11-1.png\" alt=\"\u00c1p d\u1ee5ng c\u1ea5u h\u00ecnh Sandbox\" class=\"wp-image-130103\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_11-1.png 1009w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_11-1-300x184.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_11-1-767x470.png 767w\" sizes=\"(max-width: 1009px) 100vw, 1009px\" \/><figcaption class=\"wp-element-caption\"><strong>\u00c1p d\u1ee5ng c\u1ea5u h\u00ecnh Sandbox<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Ti\u1ebfp t\u1ee5c ki\u1ec3m tra to\u00e0n b\u1ed9 c\u1ea5u h\u00ecnh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw config validate<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu kh\u00f4ng c\u00f3 l\u1ed7i, Sandbox \u0111\u00e3 \u0111\u01b0\u1ee3c b\u1eadt trong c\u1ea5u h\u00ecnh.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Trong v\u00ed d\u1ee5 tr\u00ean:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>mode: &#8220;all&#8221;:<\/strong> T\u1ea5t c\u1ea3 session c\u1ee7a Agent s\u1ebd \u0111\u01b0\u1ee3c \u0111\u01b0a v\u00e0o sandbox.<\/li>\n\n\n\n<li><strong>backend: &#8220;docker&#8221;:<\/strong> OpenClaw s\u1eed d\u1ee5ng Docker l\u00e0m m\u00f4i tr\u01b0\u1eddng c\u00e1ch ly.<\/li>\n\n\n\n<li><strong>scope: &#8220;session&#8221;:<\/strong> M\u1ed7i session c\u00f3 ph\u1ea1m vi Sandbox ri\u00eang. \u0110\u00e2y l\u00e0 l\u1ef1a ch\u1ecdn c\u00e1ch ly ch\u1eb7t h\u01a1n so v\u1edbi d\u00f9ng chung m\u1ed9t m\u00f4i tr\u01b0\u1eddng cho nhi\u1ec1u phi\u00ean.<\/li>\n\n\n\n<li><strong>workspaceAccess: &#8220;ro&#8221;:<\/strong> Workspace ch\u00ednh c\u1ee7a Agent ch\u1ec9 \u0111\u01b0\u1ee3c mount theo quy\u1ec1n \u0111\u1ecdc.<\/li>\n\n\n\n<li><strong>network: &#8220;none&#8221;:<\/strong> Container Sandbox kh\u00f4ng \u0111\u01b0\u1ee3c k\u1ebft n\u1ed1i ra Internet.<\/li>\n\n\n\n<li><strong>readOnlyRoot: true:<\/strong> Filesystem g\u1ed1c c\u1ee7a container \u1edf tr\u1ea1ng th\u00e1i ch\u1ec9 \u0111\u1ecdc.<\/li>\n\n\n\n<li><strong>capDrop: [&#8220;ALL&#8221;]:<\/strong> C\u00e1c Linux capability b\u1ed5 sung b\u1ecb lo\u1ea1i b\u1ecf.<\/li>\n\n\n\n<li><strong>memory: &#8220;1g&#8221;, cpus: 1, pidsLimit: 256:<\/strong> Container ch\u1ec9 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng l\u01b0\u1ee3ng RAM, CPU v\u00e0 s\u1ed1 ti\u1ebfn tr\u00ecnh trong gi\u1edbi h\u1ea1n \u0111\u00e3 \u0111\u1eb7t.<\/li>\n<\/ul>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_7:_T\u1ea1o_l\u1ea1i_Sandbox_theo_c\u1ea5u_h\u00ecnh_m\u1edbi_(n\u1ebfu_tr\u01b0\u1edbc_\u0111\u00e2y_t\u1eebng_t\u1ea1o)\"><strong>B\u01b0\u1edbc 7: T\u1ea1o l\u1ea1i Sandbox theo c\u1ea5u h\u00ecnh m\u1edbi (n\u1ebfu tr\u01b0\u1edbc \u0111\u00e2y t\u1eebng t\u1ea1o)<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu OpenClaw t\u1eebng t\u1ea1o Sandbox tr\u01b0\u1edbc \u0111\u00e2y, c\u00e1c container c\u0169 c\u00f3 th\u1ec3 v\u1eabn gi\u1eef c\u1ea5u h\u00ecnh c\u0169.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw sandbox recreate --all<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu h\u1ec7 th\u1ed1ng y\u00eau c\u1ea7u x\u00e1c nh\u1eadn, ch\u1ecdn \u0111\u1ed3ng \u00fd.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Mu\u1ed1n b\u1ecf qua c\u00e2u h\u1ecfi x\u00e1c nh\u1eadn:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw sandbox recreate --all --force<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">OpenClaw s\u1ebd x\u00f3a c\u00e1c runtime Sandbox c\u0169. Runtime m\u1edbi s\u1ebd \u0111\u01b0\u1ee3c t\u1ea1o t\u1ef1 \u0111\u1ed9ng v\u00e0o l\u1ea7n ti\u1ebfp theo Agent c\u1ea7n s\u1eed d\u1ee5ng sandbox.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu \u0111\u00e2y l\u00e0 l\u1ea7n \u0111\u1ea7u b\u1eadt Sandbox v\u00e0 ch\u01b0a c\u00f3 container n\u00e0o, vi\u1ec7c kh\u00f4ng th\u1ea5y container ngay t\u1ea1i b\u01b0\u1edbc n\u00e0y l\u00e0 b\u00ecnh th\u01b0\u1eddng.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_8:_G\u1eedi_m\u1ed9t_y\u00eau_c\u1ea7u_cho_OpenClaw_\u0111\u1ec3_t\u1ea1o_Sandbox\"><strong>B\u01b0\u1edbc 8: G\u1eedi m\u1ed9t y\u00eau c\u1ea7u cho OpenClaw \u0111\u1ec3 t\u1ea1o Sandbox<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi b\u1eadt c\u1ea5u h\u00ecnh, h\u00e3y quay l\u1ea1i OpenClaw v\u00e0 g\u1eedi m\u1ed9t y\u00eau c\u1ea7u c\u00f3 s\u1eed d\u1ee5ng c\u00f4ng c\u1ee5.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ed d\u1ee5:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><em>H\u00e3y ki\u1ec3m tra c\u00e1c file trong workspace hi\u1ec7n t\u1ea1i.<\/em><\/strong><\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"547\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_12-1-1024x547.jpg\" alt=\"G\u1eedi m\u1ed9t y\u00eau c\u1ea7u cho OpenClaw \u0111\u1ec3 t\u1ea1o Sandbox\" class=\"wp-image-130104\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_12-1-1024x547.jpg 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_12-1-300x160.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_12-1-766x409.jpg 766w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_12-1.png 1081w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>G\u1eedi m\u1ed9t y\u00eau c\u1ea7u cho OpenClaw \u0111\u1ec3 t\u1ea1o Sandbox<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Ho\u1eb7c y\u00eau c\u1ea7u Agent th\u1ef1c hi\u1ec7n m\u1ed9t t\u00e1c v\u1ee5 c\u1ea7n \u0111\u1ecdc file hay ch\u1ea1y c\u00f4ng c\u1ee5.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Khi Agent c\u1ea7n s\u1eed d\u1ee5ng tool, OpenClaw s\u1ebd t\u1ef1 t\u1ea1o container Sandbox theo scope \u0111\u00e3 c\u1ea5u h\u00ecnh.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_9:_Ki\u1ec3m_tra_Sandbox_\u0111\u00e3_\u0111\u01b0\u1ee3c_t\u1ea1o_hay_ch\u01b0a\"><strong>B\u01b0\u1edbc 9: Ki\u1ec3m tra Sandbox \u0111\u00e3 \u0111\u01b0\u1ee3c t\u1ea1o hay ch\u01b0a<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw sandbox list<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu sandbox \u0111ang ho\u1ea1t \u0111\u1ed9ng, danh s\u00e1ch runtime s\u1ebd xu\u1ea5t hi\u1ec7n.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"321\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_13-1-1024x321.png\" alt=\"Ki\u1ec3m tra Sandbox \u0111\u00e3 \u0111\u01b0\u1ee3c t\u1ea1o hay ch\u01b0a\" class=\"wp-image-130105\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_13-1-1024x321.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_13-1-300x94.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_13-1-766x240.png 766w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_13-1.png 1184w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra Sandbox \u0111\u00e3 \u0111\u01b0\u1ee3c t\u1ea1o hay ch\u01b0a<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">B\u1ea1n c\u0169ng c\u00f3 th\u1ec3 ki\u1ec3m tra tr\u1ef1c ti\u1ebfp Docker:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker ps --filter \"name=openclaw-sbx-\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">OpenClaw m\u1eb7c \u0111\u1ecbnh s\u1eed d\u1ee5ng prefix:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw-sbx-<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">cho Docker Sandbox Container.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_10:_Ki\u1ec3m_tra_OpenClaw_c\u00f3_th\u1ef1c_s\u1ef1_s\u1eed_d\u1ee5ng_Sandbox_hay_kh\u00f4ng\"><strong>B\u01b0\u1edbc 10: Ki\u1ec3m tra OpenClaw c\u00f3 th\u1ef1c s\u1ef1 s\u1eed d\u1ee5ng Sandbox hay kh\u00f4ng<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u00e2y l\u00e0 b\u01b0\u1edbc r\u1ea5t n\u00ean th\u1ef1c hi\u1ec7n.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw sandbox explain<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">OpenClaw s\u1ebd hi\u1ec3n th\u1ecb c\u00e1c th\u00f4ng tin nh\u01b0:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Sandbox mode<\/li>\n\n\n\n<li>Sandbox backend<\/li>\n\n\n\n<li>Sandbox scope<\/li>\n\n\n\n<li>Workspace access<\/li>\n\n\n\n<li>Docker mounts<\/li>\n\n\n\n<li>Tool policy<\/li>\n\n\n\n<li>B\u1ea1n c\u1ea7n ki\u1ec3m tra c\u00e1c gi\u00e1 tr\u1ecb ch\u00ednh:<\/li>\n\n\n\n<li>mode = all<\/li>\n\n\n\n<li>backend = docker<\/li>\n\n\n\n<li>scope = session<\/li>\n\n\n\n<li>workspaceAccess = ro<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"410\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_14-1-1024x410.png\" alt=\"Ki\u1ec3m tra OpenClaw c\u00f3 th\u1ef1c s\u1ef1 s\u1eed d\u1ee5ng Sandbox hay kh\u00f4ng\" class=\"wp-image-130106\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_14-1-1024x410.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_14-1-300x120.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_14-1-767x307.png 767w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_14-1-1536x615.jpg 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_14-1.png 1896w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra OpenClaw c\u00f3 th\u1ef1c s\u1ef1 s\u1eed d\u1ee5ng Sandbox hay kh\u00f4ng<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">L\u1ec7nh <strong>sandbox explain<\/strong> \u0111\u01b0\u1ee3c OpenClaw cung c\u1ea5p ri\u00eang \u0111\u1ec3 ki\u1ec3m tra c\u1ea5u h\u00ecnh sandbox th\u1ef1c t\u1ebf \u0111ang c\u00f3 hi\u1ec7u l\u1ef1c, thay v\u00ec ch\u1ec9 nh\u00ecn v\u00e0o file c\u1ea5u h\u00ecnh.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_11:_Ki\u1ec3m_tra_Agent_c\u00f3_b\u1ecb_gi\u1edbi_h\u1ea1n_quy\u1ec1n_hay_ch\u01b0a\"><strong>B\u01b0\u1edbc 11: Ki\u1ec3m tra Agent c\u00f3 b\u1ecb gi\u1edbi h\u1ea1n quy\u1ec1n hay ch\u01b0a<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi Sandbox ho\u1ea1t \u0111\u1ed9ng, c\u00f3 th\u1ec3 th\u1eed m\u1ed9t v\u00e0i t\u00e1c v\u1ee5 \u0111\u01a1n gi\u1ea3n.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ed d\u1ee5 y\u00eau c\u1ea7u Agent \u0111\u1ecdc file trong workspace. Sau \u0111\u00f3 th\u1eed y\u00eau c\u1ea7u Agent ghi v\u00e0o workspace ch\u00ednh.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>V\u1edbi workspaceAccess: &#8220;ro&#8221;:<\/strong> Agent kh\u00f4ng n\u00ean \u0111\u01b0\u1ee3c ph\u00e9p ch\u1ec9nh s\u1eeda tr\u1ef1c ti\u1ebfp workspace ch\u00ednh.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ti\u1ebfp t\u1ee5c ki\u1ec3m tra Internet b\u1eb1ng m\u1ed9t t\u00e1c v\u1ee5 c\u1ea7n truy c\u1eadp m\u1ea1ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>V\u1edbi network: &#8220;none&#8221;: <\/strong>C\u00e1c ti\u1ebfn tr\u00ecnh b\u00ean trong Docker Sandbox s\u1ebd kh\u00f4ng c\u00f3 outbound network.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_12:_Ch\u1ea1y_ki\u1ec3m_tra_b\u1ea3o_m\u1eadt_OpenClaw\"><strong>B\u01b0\u1edbc 12: Ch\u1ea1y ki\u1ec3m tra b\u1ea3o m\u1eadt OpenClaw<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi ho\u00e0n th\u00e0nh, ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw security audit<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00f3 th\u1ec3 ki\u1ec3m tra s\u00e2u h\u01a1n:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw security audit --deep<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">OpenClaw khuy\u1ebfn ngh\u1ecb ch\u1ea1y security audit sau khi thay \u0111\u1ed5i c\u1ea5u h\u00ecnh ho\u1eb7c tr\u01b0\u1edbc khi m\u1edf th\u00eam b\u1ec1 m\u1eb7t truy c\u1eadp m\u1ea1ng. Ch\u1ebf \u0111\u1ed9 <strong>&#8211;deep<\/strong> b\u1ed5 sung ki\u1ec3m tra Gateway tr\u1ef1c ti\u1ebfp c\u00f9ng c\u00e1c ki\u1ec3m tra Plugin v\u00e0 Skill li\u00ean quan.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cu\u1ed1i c\u00f9ng ki\u1ec3m tra l\u1ea1i sandbox:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw sandbox explain<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">v\u00e0:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openclaw sandbox list<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu c\u00e1c th\u00f4ng tin \u0111\u1ec1u \u0111\u00fang, qu\u00e1 tr\u00ecnh <strong>c\u00e1ch ly Sandbox cho OpenClaw tr\u00ean VPS<\/strong> \u0111\u00e3 ho\u00e0n t\u1ea5t.<\/p>\n\n\n\n<h2 id=\"Nh\u1eefng_sai_l\u1ea7m_th\u01b0\u1eddng_g\u1eb7p_khi_c\u00e1ch_ly_Sandbox_cho_AI_Agent_tr\u00ean_VPS\"><strong>Nh\u1eefng sai l\u1ea7m th\u01b0\u1eddng g\u1eb7p khi c\u00e1ch ly Sandbox cho AI Agent tr\u00ean VPS<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Khi thi\u1ebft l\u1eadp sandbox cho OpenClaw ho\u1eb7c c\u00e1c AI Agent t\u01b0\u01a1ng t\u1ef1, b\u1ea1n n\u00ean tr\u00e1nh m\u1ed9t s\u1ed1 l\u1ed7i sau:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Ch\u1ec9 ch\u1ea1y Docker r\u1ed3i cho r\u1eb1ng \u0111\u00e3 an to\u00e0n:<\/strong> Docker gi\u00fap c\u00e1ch ly \u1ee9ng d\u1ee5ng, nh\u01b0ng v\u1eabn c\u1ea7n k\u1ebft h\u1ee3p Tool Policy, firewall, quy\u1ec1n file v\u00e0 sandbox.<\/li>\n\n\n\n<li><strong>C\u1ea5p quy\u1ec1n \u0111\u1ecdc\/ghi qu\u00e1 r\u1ed9ng:<\/strong> Kh\u00f4ng n\u00ean cho Agent truy c\u1eadp to\u00e0n b\u1ed9 <strong>\/root<\/strong>, <strong>\/home<\/strong> ho\u1eb7c c\u00e1c th\u01b0 m\u1ee5c h\u1ec7 th\u1ed1ng.<\/li>\n\n\n\n<li><strong>Cho ph\u00e9p ghi workspace khi kh\u00f4ng c\u1ea7n thi\u1ebft:<\/strong> N\u1ebfu Agent ch\u1ec9 c\u1ea7n \u0111\u1ecdc d\u1eef li\u1ec7u, n\u00ean s\u1eed d\u1ee5ng <strong>workspaceAccess: &#8220;ro&#8221;<\/strong>.<\/li>\n\n\n\n<li><strong>M\u1edf Internet cho m\u1ecdi Agent:<\/strong> N\u1ebfu t\u00e1c v\u1ee5 kh\u00f4ng c\u1ea7n truy c\u1eadp b\u00ean ngo\u00e0i, n\u00ean gi\u1eef <strong>network: &#8220;none&#8221;<\/strong>.<\/li>\n\n\n\n<li><strong>Kh\u00f4ng gi\u1edbi h\u1ea1n CPU v\u00e0 RAM:<\/strong> M\u1ed9t t\u00e1c v\u1ee5 l\u1ed7i c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng qu\u00e1 nhi\u1ec1u t\u00e0i nguy\u00ean VPS.<\/li>\n\n\n\n<li><strong>C\u1ea5p qu\u00e1 nhi\u1ec1u c\u00f4ng c\u1ee5:<\/strong> Agent kh\u00f4ng c\u1ea7n ch\u1ea1y l\u1ec7nh th\u00ec kh\u00f4ng n\u00ean c\u1ea5p quy\u1ec1n <strong>exec<\/strong>.<\/li>\n\n\n\n<li><strong>L\u01b0u API Key ho\u1eb7c SSH Key trong workspace:<\/strong> Th\u00f4ng tin nh\u1ea1y c\u1ea3m n\u00ean \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd ri\u00eang.<\/li>\n\n\n\n<li><strong>Mount Docker socket v\u00e0o sandbox:<\/strong> \u0110\u00e2y l\u00e0 c\u1ea5u h\u00ecnh c\u00f3 r\u1ee7i ro cao v\u00ec Agent c\u00f3 th\u1ec3 ti\u1ebfp c\u1eadn Docker tr\u00ean m\u00e1y ch\u1ee7.<\/li>\n\n\n\n<li><strong>Thay \u0111\u1ed5i c\u1ea5u h\u00ecnh nh\u01b0ng kh\u00f4ng t\u1ea1o l\u1ea1i sandbox:<\/strong> Container c\u0169 c\u00f3 th\u1ec3 ti\u1ebfp t\u1ee5c s\u1eed d\u1ee5ng thi\u1ebft l\u1eadp tr\u01b0\u1edbc \u0111\u00f3.<\/li>\n\n\n\n<li><strong>Kh\u00f4ng ki\u1ec3m tra sau khi c\u1ea5u h\u00ecnh:<\/strong> N\u00ean d\u00f9ng <strong>openclaw sandbox explain<\/strong> v\u00e0 <strong>openclaw security audit &#8211;deep<\/strong> \u0111\u1ec3 x\u00e1c nh\u1eadn.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"700\" height=\"375\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-3.png\" alt=\"Nh\u1eefng sai l\u1ea7m th\u01b0\u1eddng g\u1eb7p khi c\u00e1ch ly Sandbox cho AI Agent tr\u00ean VPS\" class=\"wp-image-130109\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-3.png 700w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-3-300x161.png 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><figcaption class=\"wp-element-caption\"><strong>Nh\u1eefng sai l\u1ea7m th\u01b0\u1eddng g\u1eb7p khi c\u00e1ch ly Sandbox cho AI Agent tr\u00ean VPS<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<h2 id=\"Sandbox_c\u00f3_b\u1ea3o_v\u1ec7_AI_Agent_tuy\u1ec7t_\u0111\u1ed1i_kh\u00f4ng?\"><strong>Sandbox c\u00f3 b\u1ea3o v\u1ec7 AI Agent tuy\u1ec7t \u0111\u1ed1i kh\u00f4ng?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Kh\u00f4ng. Sandbox ch\u1ec9 l\u00e0 <strong>m\u1ed9t l\u1edbp b\u1ea3o m\u1eadt<\/strong> trong to\u00e0n b\u1ed9 h\u1ec7 th\u1ed1ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 b\u1ea3o v\u1ec7 AI Agent tr\u00ean VPS t\u1ed1t h\u01a1n, n\u00ean k\u1ebft h\u1ee3p:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>X\u00e1c th\u1ef1c OpenClaw Gateway.<\/li>\n\n\n\n<li>Gi\u1edbi h\u1ea1n ng\u01b0\u1eddi \u0111\u01b0\u1ee3c ph\u00e9p nh\u1eafn tin v\u1edbi Agent.<\/li>\n\n\n\n<li>Ch\u1ec9 c\u1ea5p c\u00e1c c\u00f4ng c\u1ee5 th\u1ef1c s\u1ef1 c\u1ea7n thi\u1ebft.<\/li>\n\n\n\n<li>S\u1eed d\u1ee5ng Sandbox cho c\u00e1c thao t\u00e1c c\u00f3 r\u1ee7i ro.<\/li>\n\n\n\n<li>Gi\u1edbi h\u1ea1n quy\u1ec1n \u0111\u1ecdc v\u00e0 ghi file.<\/li>\n\n\n\n<li>Gi\u1edbi h\u1ea1n k\u1ebft n\u1ed1i Internet.<\/li>\n\n\n\n<li>Gi\u1edbi h\u1ea1n CPU, RAM v\u00e0 s\u1ed1 ti\u1ebfn tr\u00ecnh.<\/li>\n\n\n\n<li>Kh\u00f4ng l\u01b0u credential \u1edf v\u1ecb tr\u00ed Agent c\u00f3 th\u1ec3 \u0111\u1ecdc d\u1ec5 d\u00e0ng.<\/li>\n\n\n\n<li>C\u1eadp nh\u1eadt OpenClaw v\u00e0 Docker th\u01b0\u1eddng xuy\u00ean.<\/li>\n\n\n\n<li>Ki\u1ec3m tra log v\u00e0 ch\u1ea1y security audit \u0111\u1ecbnh k\u1ef3.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00f3 th\u1ec3 hi\u1ec3u \u0111\u01a1n gi\u1ea3n: <strong>Sandbox gi\u00fap gi\u1ea3m ph\u1ea1m vi thi\u1ec7t h\u1ea1i n\u1ebfu AI Agent th\u1ef1c hi\u1ec7n sai h\u00e0nh \u0111\u1ed9ng, nh\u01b0ng kh\u00f4ng th\u1ec3 thay th\u1ebf to\u00e0n b\u1ed9 c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt kh\u00e1c.<\/strong><\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"700\" height=\"375\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-4.png\" alt=\"Sandbox c\u00f3 b\u1ea3o v\u1ec7 AI Agent tuy\u1ec7t \u0111\u1ed1i kh\u00f4ng?\" class=\"wp-image-130110\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-4.png 700w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-4-300x161.png 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><figcaption class=\"wp-element-caption\"><strong>Sandbox c\u00f3 b\u1ea3o v\u1ec7 AI Agent tuy\u1ec7t \u0111\u1ed1i kh\u00f4ng?<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<h2 id=\"Kinh_nghi\u1ec7m_b\u1ea3o_m\u1eadt_AI_Agent_tr\u00ean_VPS\"><strong>Kinh nghi\u1ec7m b\u1ea3o m\u1eadt AI Agent tr\u00ean VPS<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Khi tri\u1ec3n khai OpenClaw tr\u00ean VPS, b\u1ea1n c\u00f3 th\u1ec3 \u00e1p d\u1ee5ng c\u00e1c nguy\u00ean t\u1eafc sau:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>B\u1eaft \u0111\u1ea7u v\u1edbi quy\u1ec1n th\u1ea5p nh\u1ea5t r\u1ed3i m\u1edf th\u00eam khi c\u1ea7n.<\/li>\n\n\n\n<li>\u01afu ti\u00ean <strong>workspaceAccess: &#8220;none&#8221;<\/strong> n\u1ebfu Agent kh\u00f4ng c\u1ea7n workspace ch\u00ednh.<\/li>\n\n\n\n<li>S\u1eed d\u1ee5ng <strong>workspaceAccess: &#8220;ro&#8221;<\/strong> n\u1ebfu Agent ch\u1ec9 c\u1ea7n \u0111\u1ecdc.<\/li>\n\n\n\n<li>Ch\u1ec9 d\u00f9ng <strong>workspaceAccess: &#8220;rw&#8221;<\/strong> khi Agent th\u1ef1c s\u1ef1 c\u1ea7n ch\u1ec9nh s\u1eeda file.<\/li>\n\n\n\n<li>Gi\u1eef <strong>network: &#8220;none&#8221;<\/strong> n\u1ebfu t\u00e1c v\u1ee5 kh\u00f4ng y\u00eau c\u1ea7u Internet.<\/li>\n\n\n\n<li>S\u1eed d\u1ee5ng <strong>scope: &#8220;agent&#8221;<\/strong> ho\u1eb7c <strong>&#8220;session&#8221;<\/strong> thay v\u00ec chia s\u1ebb Sandbox gi\u1eefa nhi\u1ec1u phi\u00ean.<\/li>\n\n\n\n<li>Kh\u00f4ng c\u1ea5p <strong>exec<\/strong> n\u1ebfu Agent kh\u00f4ng c\u1ea7n ch\u1ea1y l\u1ec7nh Linux.<\/li>\n\n\n\n<li>Kh\u00f4ng cho Agent ti\u1ebfp c\u1eadn SSH Key ho\u1eb7c file <strong>.env<\/strong>.<\/li>\n\n\n\n<li>\u0110\u1eb7t gi\u1edbi h\u1ea1n CPU, RAM v\u00e0 process cho container.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"700\" height=\"375\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-5.png\" alt=\"Kinh nghi\u1ec7m b\u1ea3o m\u1eadt AI Agent tr\u00ean VPS\" class=\"wp-image-130111\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-5.png 700w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/cach-ly-sandbox-cho-ai-agent-tren-vps-5-300x161.png 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><figcaption class=\"wp-element-caption\"><strong>Kinh nghi\u1ec7m b\u1ea3o m\u1eadt AI Agent tr\u00ean VPS<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<h2 id=\"Khi_n\u00e0o_n\u00ean_b\u1eadt_Sandbox_cho_OpenClaw?\"><strong>Khi n\u00e0o n\u00ean b\u1eadt Sandbox cho OpenClaw?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">B\u1ea1n n\u00ean c\u00e2n nh\u1eafc b\u1eadt Sandbox n\u1ebfu OpenClaw \u0111\u01b0\u1ee3c c\u1ea5p c\u00e1c kh\u1ea3 n\u0103ng nh\u01b0:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Ch\u1ea1y c\u00e2u l\u1ec7nh Linux.<\/li>\n\n\n\n<li>\u0110\u1ecdc file tr\u00ean VPS.<\/li>\n\n\n\n<li>Ch\u1ec9nh s\u1eeda ho\u1eb7c t\u1ea1o file.<\/li>\n\n\n\n<li>Vi\u1ebft v\u00e0 ch\u1ea1y code.<\/li>\n\n\n\n<li>S\u1eed d\u1ee5ng tr\u00ecnh duy\u1ec7t.<\/li>\n\n\n\n<li>Truy c\u1eadp website ho\u1eb7c API b\u00ean ngo\u00e0i.<\/li>\n\n\n\n<li>S\u1eed d\u1ee5ng Skill ho\u1eb7c Plugin.<\/li>\n\n\n\n<li>X\u1eed l\u00fd file do ng\u01b0\u1eddi d\u00f9ng g\u1eedi.<\/li>\n\n\n\n<li>Ph\u1ee5c v\u1ee5 nhi\u1ec1u ng\u01b0\u1eddi d\u00f9ng.<\/li>\n\n\n\n<li>Ch\u1ea1y t\u1ef1 \u0111\u1ed9ng 24\/7.<\/li>\n\n\n\n<li>Th\u1ef1c hi\u1ec7n t\u00e1c v\u1ee5 m\u00e0 kh\u00f4ng c\u1ea7n x\u00e1c nh\u1eadn t\u1eebng b\u01b0\u1edbc.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu OpenClaw ch\u1ec9 d\u00f9ng \u0111\u1ec3 tr\u00f2 chuy\u1ec7n \u0111\u01a1n gi\u1ea3n v\u00e0 kh\u00f4ng \u0111\u01b0\u1ee3c c\u1ea5p c\u00e1c c\u00f4ng c\u1ee5 c\u00f3 quy\u1ec1n t\u00e1c \u0111\u1ed9ng \u0111\u1ebfn h\u1ec7 th\u1ed1ng, nhu c\u1ea7u Sandbox s\u1ebd th\u1ea5p h\u01a1n.<\/p>\n\n\n\n<h2 id=\"K\u1ebft_lu\u1eadn\"><strong>K\u1ebft lu\u1eadn<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1ch ly Sandbox kh\u00f4ng ph\u1ea3i l\u00e0 m\u1ed9t t\u00f9y ch\u1ecdn n\u00e2ng cao d\u00e0nh ri\u00eang cho \u0111\u1ed9i ng\u0169 k\u1ef9 thu\u1eadt, m\u00e0 l\u00e0 \u0111i\u1ec1u ki\u1ec7n b\u1eaft bu\u1ed9c \u0111\u1ec3 b\u1ea5t k\u1ef3 AI Agent n\u00e0o c\u00f3 th\u1ec3 ho\u1ea1t \u0111\u1ed9ng an to\u00e0n tr\u00ean VPS. H\u00e3y b\u1eaft \u0111\u1ea7u t\u1eeb m\u1ed9t c\u1ea5u h\u00ecnh Sandbox t\u1ed1i gi\u1ea3n, r\u1ed3i m\u1edf r\u1ed9ng quy\u1ec1n d\u1ea7n theo nhu c\u1ea7u th\u1ef1c t\u1ebf thay v\u00ec c\u1ea5p quy\u1ec1n to\u00e0n b\u1ed9 ngay t\u1eeb \u0111\u1ea7u.\u00a0<\/p>\n\n\n\n<h2 id=\"Nh\u1eefng_c\u00e2u_h\u1ecfi_th\u01b0\u1eddng_g\u1eb7p\"><strong>Nh\u1eefng c\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p<\/strong><\/h2>\n\n\n\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"L\u00e0m_sao_ki\u1ec3m_tra_Sandbox_\u0111ang_\u00e1p_d\u1ee5ng_\u0111\u00fang_ch\u00ednh_s\u00e1ch_b\u1ea3o_m\u1eadt_\u0111\u00e3_c\u1ea5u_h\u00ecnh?\u00a0\">L\u00e0m sao ki\u1ec3m tra Sandbox \u0111ang \u00e1p d\u1ee5ng \u0111\u00fang ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt \u0111\u00e3 c\u1ea5u h\u00ecnh?\u00a0<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">D\u00f9ng l\u1ec7nh <code>openclaw sandbox explain<\/code> \u0111\u1ec3 xem chi ti\u1ebft ph\u1ea1m vi c\u00e1ch ly, quy\u1ec1n truy c\u1eadp workspace v\u00e0 ch\u00ednh s\u00e1ch c\u00f4ng c\u1ee5 \u0111ang c\u00f3 hi\u1ec7u l\u1ef1c cho t\u1eebng agent. Sau m\u1ed7i l\u1ea7n \u0111\u1ed5i c\u1ea5u h\u00ecnh, c\u1ea7n ch\u1ea1y <code>openclaw sandbox recreate --all<\/code> v\u00ec thay \u0111\u1ed5i kh\u00f4ng t\u1ef1 \u00e1p d\u1ee5ng l\u00ean container \u0111ang ch\u1ea1y.\u00a0<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"N\u00ean_ch\u1ecdn_backend_Sandbox_n\u00e0o_cho_OpenClaw:_Docker,_SSH_hay_OpenShell?\u00a0\">N\u00ean ch\u1ecdn backend Sandbox n\u00e0o cho OpenClaw: Docker, SSH hay OpenShell?\u00a0<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">V\u1edbi c\u00e1 nh\u00e2n v\u00e0 nh\u00f3m nh\u1ecf tri\u1ec3n khai tr\u00ean m\u1ed9t VPS duy nh\u1ea5t, Docker l\u00e0 l\u1ef1a ch\u1ecdn d\u1ec5 c\u00e0i \u0111\u1eb7t v\u00e0 duy tr\u00ec nh\u1ea5t. SSH ph\u00f9 h\u1ee3p khi mu\u1ed1n t\u00e1ch agent sang m\u1ed9t m\u00e1y ch\u1ee7 v\u1eadt l\u00fd kh\u00e1c, c\u00f2n <a href=\"https:\/\/open-shell.github.io\/Open-Shell-Menu\/\" target=\"_blank\" data-type=\"link\" data-id=\"https:\/\/open-shell.github.io\/Open-Shell-Menu\/\" rel=\"noreferrer noopener nofollow\">OpenShell<\/a> ph\u00f9 h\u1ee3p m\u00f4i tr\u01b0\u1eddng doanh nghi\u1ec7p c\u1ea7n \u00e1p ch\u00ednh s\u00e1ch runtime chi ti\u1ebft theo chu\u1ea9n tu\u00e2n th\u1ee7.\u00a0<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"Sandbox_c\u00f3_ng\u0103n_ch\u1eb7n_ho\u00e0n_to\u00e0n_t\u1ea5n_c\u00f4ng_prompt_injection_kh\u00f4ng?\u00a0\">Sandbox c\u00f3 ng\u0103n ch\u1eb7n ho\u00e0n to\u00e0n t\u1ea5n c\u00f4ng prompt injection kh\u00f4ng?\u00a0<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">Sandbox kh\u00f4ng lo\u1ea1i b\u1ecf ho\u00e0n to\u00e0n nguy c\u01a1 prompt injection, v\u00ec cu\u1ed9c t\u1ea5n c\u00f4ng d\u1ea1ng n\u00e0y nh\u1eafm v\u00e0o c\u00e1ch m\u00f4 h\u00ecnh ng\u00f4n ng\u1eef hi\u1ec3u v\u0103n b\u1ea3n \u0111\u1ea7u v\u00e0o. Tuy nhi\u00ean, Sandbox gi\u1edbi h\u1ea1n h\u1eadu qu\u1ea3 n\u1ebfu t\u1ea5n c\u00f4ng th\u00e0nh c\u00f4ng, b\u1eb1ng c\u00e1ch ng\u0103n l\u1ec7nh \u0111\u1ed9c h\u1ea1i v\u01b0\u1ee3t ra kh\u1ecfi m\u00f4i tr\u01b0\u1eddng c\u00e1ch ly \u0111\u1ec3 \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn to\u00e0n b\u1ed9 VPS.\u00a0<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"OpenClaw_Sandbox_c\u00f3_\u0111\u01b0\u1ee3c_b\u1eadt_m\u1eb7c_\u0111\u1ecbnh_kh\u00f4ng?\">OpenClaw Sandbox c\u00f3 \u0111\u01b0\u1ee3c b\u1eadt m\u1eb7c \u0111\u1ecbnh kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">Kh\u00f4ng. Theo t\u00e0i li\u1ec7u OpenClaw hi\u1ec7n t\u1ea1i, <code>agents.defaults.sandbox.mode<\/code> m\u1eb7c \u0111\u1ecbnh l\u00e0 <code>off<\/code>. Qu\u1ea3n tr\u1ecb vi\u00ean c\u1ea7n b\u1eadt Sandbox n\u1ebfu mu\u1ed1n \u00e1p d\u1ee5ng r\u1ed9ng cho Agent.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"OpenClaw_Sandbox_c\u00f3_Internet_kh\u00f4ng?\">OpenClaw Sandbox c\u00f3 Internet kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">Docker Sandbox m\u1eb7c \u0111\u1ecbnh s\u1eed d\u1ee5ng <code>network: \"none\"<\/code>, t\u1ee9c kh\u00f4ng c\u00f3 outbound network. N\u1ebfu c\u00f4ng vi\u1ec7c c\u1ea7n Internet, qu\u1ea3n tr\u1ecb vi\u00ean c\u00f3 th\u1ec3 chuy\u1ec3n sang <code>bridge<\/code> ho\u1eb7c network ph\u00f9 h\u1ee3p sau khi c\u00e2n nh\u1eafc r\u1ee7i ro.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\n<script type=\"application\/ld+json\">\n\t{\n\t\t\"@context\": \"https:\/\/schema.org\",\n\t\t\"@type\": \"FAQPage\",\n\t\t\"mainEntity\": [\n\t\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"L\u00e0m sao ki\u1ec3m tra Sandbox \u0111ang \u00e1p d\u1ee5ng \u0111\u00fang ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt \u0111\u00e3 c\u1ea5u h\u00ecnh?\u00a0\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>D\u00f9ng l\u1ec7nh openclaw sandbox explain \u0111\u1ec3 xem chi ti\u1ebft ph\u1ea1m vi c\u00e1ch ly, quy\u1ec1n truy c\u1eadp workspace v\u00e0 ch\u00ednh s\u00e1ch c\u00f4ng c\u1ee5 \u0111ang c\u00f3 hi\u1ec7u l\u1ef1c cho t\u1eebng agent. Sau m\u1ed7i l\u1ea7n \u0111\u1ed5i c\u1ea5u h\u00ecnh, c\u1ea7n ch\u1ea1y openclaw sandbox recreate --all v\u00ec thay \u0111\u1ed5i kh\u00f4ng t\u1ef1 \u00e1p d\u1ee5ng l\u00ean container \u0111ang ch\u1ea1y.\u00a0<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"N\u00ean ch\u1ecdn backend Sandbox n\u00e0o cho OpenClaw: Docker, SSH hay OpenShell?\u00a0\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>V\u1edbi c\u00e1 nh\u00e2n v\u00e0 nh\u00f3m nh\u1ecf tri\u1ec3n khai tr\u00ean m\u1ed9t VPS duy nh\u1ea5t, Docker l\u00e0 l\u1ef1a ch\u1ecdn d\u1ec5 c\u00e0i \u0111\u1eb7t v\u00e0 duy tr\u00ec nh\u1ea5t. SSH ph\u00f9 h\u1ee3p khi mu\u1ed1n t\u00e1ch agent sang m\u1ed9t m\u00e1y ch\u1ee7 v\u1eadt l\u00fd kh\u00e1c, c\u00f2n <a>OpenShell<\/a> ph\u00f9 h\u1ee3p m\u00f4i tr\u01b0\u1eddng doanh nghi\u1ec7p c\u1ea7n \u00e1p ch\u00ednh s\u00e1ch runtime chi ti\u1ebft theo chu\u1ea9n tu\u00e2n th\u1ee7.\u00a0<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"Sandbox c\u00f3 ng\u0103n ch\u1eb7n ho\u00e0n to\u00e0n t\u1ea5n c\u00f4ng prompt injection kh\u00f4ng?\u00a0\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>Sandbox kh\u00f4ng lo\u1ea1i b\u1ecf ho\u00e0n to\u00e0n nguy c\u01a1 prompt injection, v\u00ec cu\u1ed9c t\u1ea5n c\u00f4ng d\u1ea1ng n\u00e0y nh\u1eafm v\u00e0o c\u00e1ch m\u00f4 h\u00ecnh ng\u00f4n ng\u1eef hi\u1ec3u v\u0103n b\u1ea3n \u0111\u1ea7u v\u00e0o. Tuy nhi\u00ean, Sandbox gi\u1edbi h\u1ea1n h\u1eadu qu\u1ea3 n\u1ebfu t\u1ea5n c\u00f4ng th\u00e0nh c\u00f4ng, b\u1eb1ng c\u00e1ch ng\u0103n l\u1ec7nh \u0111\u1ed9c h\u1ea1i v\u01b0\u1ee3t ra kh\u1ecfi m\u00f4i tr\u01b0\u1eddng c\u00e1ch ly \u0111\u1ec3 \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn to\u00e0n b\u1ed9 VPS.\u00a0<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"OpenClaw Sandbox c\u00f3 \u0111\u01b0\u1ee3c b\u1eadt m\u1eb7c \u0111\u1ecbnh kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>Kh\u00f4ng. Theo t\u00e0i li\u1ec7u OpenClaw hi\u1ec7n t\u1ea1i, agents.defaults.sandbox.mode m\u1eb7c \u0111\u1ecbnh l\u00e0 off. Qu\u1ea3n tr\u1ecb vi\u00ean c\u1ea7n b\u1eadt Sandbox n\u1ebfu mu\u1ed1n \u00e1p d\u1ee5ng r\u1ed9ng cho Agent.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"OpenClaw Sandbox c\u00f3 Internet kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>Docker Sandbox m\u1eb7c \u0111\u1ecbnh s\u1eed d\u1ee5ng network: \\\"none\\\", t\u1ee9c kh\u00f4ng c\u00f3 outbound network. N\u1ebfu c\u00f4ng vi\u1ec7c c\u1ea7n Internet, qu\u1ea3n tr\u1ecb vi\u00ean c\u00f3 th\u1ec3 chuy\u1ec3n sang bridge ho\u1eb7c network ph\u00f9 h\u1ee3p sau khi c\u00e2n nh\u1eafc r\u1ee7i ro.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t\t\t\t]\n\t}\n<\/script>\n","protected":false},"excerpt":{"rendered":"<p>M\u1ed9t AI Agent c\u00f3 kh\u1ea3 n\u0103ng \u0111\u1ecdc file, g\u1eedi tin nh\u1eafn, m\u1edf tr\u00ecnh duy\u1ec7t v\u00e0 t\u1ef1 th\u1ef1c thi l\u1ec7nh tr\u00ean m\u00e1y ch\u1ee7 nghe r\u1ea5t h\u1ea5p d\u1eabn, nh\u01b0ng c\u0169ng \u0111\u1ed3ng ngh\u0129a v\u1edbi m\u1ed9t r\u1ee7i ro b\u1ea3o m\u1eadt kh\u1ed5ng l\u1ed3 n\u1ebfu thi\u1ebfu l\u1edbp c\u00e1ch ly ph\u00f9 h\u1ee3p. Ch\u1ec9 m\u1ed9t y\u00eau c\u1ea7u sai, m\u1ed9t n\u1ed9i dung ch\u1ee9a prompt [&hellip;]<\/p>\n","protected":false},"author":23,"featured_media":130112,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7396],"tags":[7709],"class_list":["post-130077","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-automation","tag-cach-ly-sandbox"],"_links":{"self":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/130077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/comments?post=130077"}],"version-history":[{"count":4,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/130077\/revisions"}],"predecessor-version":[{"id":130115,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/130077\/revisions\/130115"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media\/130112"}],"wp:attachment":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media?parent=130077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/categories?post=130077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/tags?post=130077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}