Originally published on Remote OpenClaw.
Linode — now operating as Akamai Connected Cloud — has been a developer-favorite VPS provider for over two decades. The interface is clean, pricing is predictable, and the network performance is consistently solid. For OpenClaw operators who want a no-surprises hosting experience, Linode is a strong choice.
This guide covers deploying OpenClaw on Linode from scratch, including which plan to pick, Linode-specific firewall and backup configuration, and a complete production hardening workflow.
Marketplace
Free skills and AI personas for OpenClaw — browse the marketplace.
Join the Community
Join 1k+ OpenClaw operators sharing deployment guides, security configs, and workflow automations.
Why Choose Linode for OpenClaw?
Linode has several advantages for OpenClaw deployments:
- Simplicity: The Cloud Manager interface is one of the cleanest in the industry. No AWS-style maze of services — you create a server, and it works.
- Predictable pricing: Flat-rate monthly billing with generous transfer allowances. The 2GB plan includes 2TB of outbound transfer — more than enough for any OpenClaw use case.
- 11 global datacenters: Newark, Atlanta, Dallas, Fremont, Toronto, London, Frankfurt, Mumbai, Singapore, Sydney, and Tokyo. Pick the one closest to your AI provider.
- Akamai network backbone: Since the Akamai acquisition, Linode benefits from one of the largest CDN networks in the world for routing reliability.
- StackScripts: Linode's deployment scripting feature lets you automate OpenClaw installation for repeatable deployments.
"Linode's Cloud Manager is what cloud dashboards should look like — create a server, SSH in, deploy. No 47-step wizard required."
What Do You Need Before Starting?
- Linode account: Sign up at cloud.linode.com. Credit card or PayPal required. New accounts often get $100 in free credits.
- SSH key pair: Generate one if you do not have one:
ssh-keygen -t ed25519 -C "openclaw-linode" - AI provider API key: Anthropic or OpenAI with billing enabled
- Telegram bot token: From @botfather
- Your Telegram user ID: From @userinfobot
How Do You Create a Linode for OpenClaw?
In the Linode Cloud Manager:
- Click Create Linode
- Select Ubuntu 22.04 LTS as the distribution
- Choose your region — Newark (US East) for lowest latency to Anthropic/OpenAI APIs
- Select your plan:
- Nanode 1GB ($5/mo): 1 vCPU, 1GB RAM, 25GB SSD — works for light personal use
- Linode 2GB ($12/mo): 1 vCPU, 2GB RAM, 50GB SSD — recommended for production
- Set a root password (you will disable password auth later, but Linode requires one at creation)
- Add your SSH key under SSH Keys
- Click Create Linode
The Linode provisions in about 30-60 seconds. Your IP address appears on the Linode dashboard immediately.
Which plan should you pick? The Nanode 1GB is tempting at $5/mo, but OpenClaw with Node.js and a Telegram connection uses 300-500MB at baseline. That leaves only 500-700MB for the OS, memory spikes, and any additional tools. The 2GB plan at $12/mo is a much safer bet for production use.
How Do You Set Up the Server?
SSH into your new Linode:
ssh root@YOUR_LINODE_IP
Prepare the system:
# Update everything
apt update && apt upgrade -y
# Set the hostname
hostnamectl set-hostname openclaw-prod
# Create a dedicated user
adduser openclaw
usermod -aG sudo openclaw
# Copy SSH keys to the new user
mkdir -p /home/openclaw/.ssh
cp ~/.ssh/authorized_keys /home/openclaw/.ssh/
chown -R openclaw:openclaw /home/openclaw/.ssh
chmod 700 /home/openclaw/.ssh
chmod 600 /home/openclaw/.ssh/authorized_keys
# Switch to the new user
su - openclaw
Verify SSH access as the new user from a separate terminal: ssh openclaw@YOUR_LINODE_IP
How Do You Install Node.js on Linode?
Install Node.js LTS:
curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash -
sudo apt-get install -y nodejs
node --version # Should show v22.x.x
How Do You Install OpenClaw on Linode?
npm install -g openclaw
openclaw --version
openclaw onboard
The onboarding wizard guides you through AI provider selection, API key entry, messaging channel setup, and access control configuration. Have your Telegram bot token and user ID ready.
After onboarding, test the connection:
openclaw status
openclaw channels status
If both show connected, your agent is running. Now make it permanent.
Marketplace
Free skills and AI personas for OpenClaw — browse the marketplace.
Key numbers to know
How Do You Run OpenClaw 24/7 on Linode?
Create the systemd service:
sudo nano /etc/systemd/system/openclaw.service
[Unit]
Description=OpenClaw AI Agent
After=network.target
[Service]
Type=simple
User=openclaw
WorkingDirectory=/home/openclaw
ExecStart=/usr/bin/openclaw
Restart=always
RestartSec=10
StandardOutput=journal
StandardError=journal
[Install]
WantedBy=multi-user.target
sudo systemctl daemon-reload
sudo systemctl enable openclaw
sudo systemctl start openclaw
sudo systemctl status openclaw
On Linode, the systemd service integrates with their LISH (Linode Shell) console — if SSH is ever unreachable, you can check the service status from the Linode Cloud Manager via the LISH console tab.
How Do You Configure Linode Cloud Firewall for OpenClaw?
Linode Cloud Firewall is a free, network-level firewall managed through the Cloud Manager. It filters traffic before it reaches your Linode.
- In Cloud Manager, go to Firewalls in the left sidebar
- Click Create Firewall
- Name it (e.g., "openclaw-firewall")
- Add inbound rules:
- Accept SSH (TCP 22) from all IPv4/IPv6 (or restrict to your IP)
- Accept HTTPS (TCP 443) from all IPv4/IPv6 (only if using webhooks)
- Set default inbound policy to Drop
- Set default outbound policy to Accept (OpenClaw needs outbound for API calls)
- Under Linodes, add your OpenClaw server
- Save
Layer UFW on top for host-level protection:
sudo ufw allow ssh
sudo ufw allow 443/tcp
sudo ufw enable
sudo ufw status
"Linode Cloud Firewall is free and filters at the network edge. Pair it with UFW on the host for proper defense in depth."
How Do You Harden OpenClaw on Linode?
Disable root login and password auth:
sudo nano /etc/ssh/sshd_config
PermitRootLogin no
PasswordAuthentication no
sudo systemctl restart sshd
Install fail2ban:
sudo apt install fail2ban -y
sudo systemctl enable fail2ban
sudo systemctl start fail2ban
Keep OpenClaw updated:
npm update -g openclaw
sudo systemctl restart openclaw
Enable automatic security updates:
sudo apt install unattended-upgrades -y
sudo dpkg-reconfigure -plow unattended-upgrades
For the full security workflow, see the OpenClaw Security Hardening Checklist.
What Does It Cost to Run OpenClaw on Linode?
- Linode 2GB VPS: $12/mo (recommended) or Nanode 1GB at $5/mo (light use only)
- Automatic backups: $2.50/mo (Nanode) or $5/mo (2GB plan)
- Anthropic API (Claude Sonnet): $5-30/mo depending on usage
- Domain (optional): ~$10-15/year
Total for production OpenClaw on Linode: $17-47/mo with the 2GB plan and backups enabled.
Linode costs slightly more than Hetzner for equivalent specs, but the trade-off is a more polished management interface, better US datacenter coverage, and the Akamai network backbone.
How Do You Back Up OpenClaw on Linode?
Linode automatic backups:
Enable automatic backups in the Cloud Manager under your Linode's Backups tab. This gives you:
- Daily backup (retained for 2 days)
- Weekly backup (retained for 2 weeks)
- Bi-weekly backup (retained for 4 weeks)
- Manual snapshot slot (1 at a time, retained until you delete it)
Application-level backups:
mkdir -p ~/backups
# Automated daily backup via cron
crontab -e
# Add:
0 2 * * * tar -czvf /home/openclaw/backups/openclaw-$(date +\%Y\%m\%d).tar.gz /home/openclaw/.openclaw
0 3 * * * find /home/openclaw/backups -name "openclaw-*.tar.gz" -mtime +30 -delete
The Linode backups protect the whole server. The cron backup protects your agent's memory and configuration specifically — you can restore just the OpenClaw data without rebuilding the entire server.
What Does a Production-Ready Linode Deployment Look Like?
- Linode 2GB or higher with Ubuntu 22.04 LTS
- Dedicated non-root user running the OpenClaw process
- systemd service with Restart=always and RestartSec=10
- Linode Cloud Firewall with default inbound Drop policy
- UFW enabled as host-level second layer
- fail2ban active on SSH
- Root SSH disabled, password auth disabled
- Telegram bot restricted to your user ID
- Linode automatic backups enabled
- Daily cron backup of ~/.openclaw
Every item on that list takes minutes to set up. Skipping any of them means your deployment has an unnecessary gap.
Want to skip the setup? Marketplace personas come pre-configured with skills, memory, and daily schedules — deploy in 15 minutes on any VPS.
Top comments (0)