Comment by the_real_cher

what about just using an unprivileged container and mounting a host folder to run open claw?