A secure, isolated Firecracker microVM environment providing a robust Internal API for AI agents to manage files, execute commands, and run interactive terminals.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install oblien-runtime
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install oblien-runtime using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Oblien Workspace Runtime?
The Oblien Workspace Runtime is a high-performance environment designed specifically for the next generation of AI development tools. Unlike standard containers, it utilizes Firecracker microVM technology to provide each agent with its own Linux kernel, filesystem, and network interface, ensuring complete isolation and root access.
This runtime powers sophisticated Openclaw Skills by exposing an Internal API on port 9990. Through this interface, developers can programmatically interact with the VM to perform complex operations like real-time file watching, recursive code searching with ripgrep, and multiplexed terminal sessions over WebSockets, all while maintaining a secure, network-dark default posture.
Oblien Workspace Runtime Use Cases
- Creating secure sandboxes for AI coding agents to execute and test untrusted code.
- Building remote development environments that require persistent filesystems and full root access.
- Orchestrating multi-agent workflows where workspaces communicate over low-latency private links.
- Developing real-time coding assistants that need to watch for filesystem changes and provide instant feedback.
- Scaling CI/CD pipelines that require dedicated CPU and memory resources for every task.
How Oblien Workspace Runtime Works
- The environment is initialized as an isolated Firecracker microVM with a writable overlay filesystem.
- Developers enable the Internal API server via the Oblien SDK or REST API to receive a Gateway JWT.
- Requests are routed through the Oblien Gateway, which decodes the JWT to reach the specific VM instance.
- AI agents interact with the Internal API to read/write files, execute bash commands, or search code.
- Long-running tasks and terminal sessions use Server-Sent Events (SSE) or WebSockets for real-time bidirectional communication.
- The runtime manages task lifecycles, including process killing, stdin piping, and exit code tracking.
Oblien Workspace Runtime Setup
To begin using this runtime with your Openclaw Skills, you must first enable the internal server for your workspace. Use the following bash command to generate your access token:
curl -X POST "https://api.oblien.com/workspace/YOUR_WS_ID/internal-api-access/enable" \
-H "X-Client-ID: $OBLIEN_CLIENT_ID" \
-H "X-Client-Secret: $OBLIEN_CLIENT_SECRET"
Once enabled, you can connect using the Gateway JWT provided in the response. Ensure your workspace network has public_access set to true if connecting from an external application.
Oblien Workspace Runtime Data Schema & Taxonomy
The Oblien Workspace Runtime organizes data through a standard Linux filesystem structure with specialized API endpoints for metadata access:
| Feature | Data Format | Description |
|---|---|---|
| Filesystem | Absolute Paths | Root-level access (e.g., /root or /app) |
| Search Results | JSON / NDJSON | Grouped by file path with line numbers and match context |
| Exec Tasks | Task Object | Includes guest_pid, status, and base64-encoded stdout/stderr |
| Terminal | Binary Frames | Multiplexed I/O using [id_byte][data] format |
| Watcher | JSON Frames | Real-time events for create, write, remove, and rename operations |
Oblien Workspace Runtime Advanced Features
- Firecracker microVM isolation providing true kernel-level security for AI agents.
- Low-latency workspace-to-workspace communication via Private Links and raw connection tokens.
- Real-time filesystem synchronization using a high-performance recursive file watcher.
- Streaming command execution with SSE for monitoring long-running builds or tests.
- Multiplexed WebSocket protocol allowing multiple terminal and watcher sessions over a single connection.
- Atomic file writes and recursive directory deletions for reliable filesystem management.
SKILL.md
Loading
Related Openclaw Skills
Model Matrix
A weighted, policy-aware routing system for selecting the optimal AI model based on real-world performance, cost, and community sentiment.
Zettel Link
A semantic search and connection discovery tool for Obsidian vaults using local or cloud-based AI embeddings.
Weibo Timeline Monitor
Automates the monitoring and archiving of the Weibo Latest Posts timeline into organized, deduplicated Markdown files.
Claude Code Integration
A comprehensive integration for OpenClaw that brings Claude Code's advanced AI-assisted coding, documentation queries, and subagent management into your workflow.
Context Bridge
A sophisticated persistent memory layer that enables AI agents to resume complex projects with full context of past conversations and decisions.
Crypto Trading Assistant
A command-line powerhouse for real-time cryptocurrency market analysis, portfolio tracking, and automated price alerting.
Featured*
