From 64bbabea78bf834bc5315b1d8ea967a065ab0da7 Mon Sep 17 00:00:00 2001
From: Joe Crypto <joecrypto300@gmail.com>
Date: Thu, 29 Jan 2026 00:19:55 +0000
Subject: [PATCH] docs: add CLAWDBOT_DOCKER_OFFICIAL_REPO documentation and
 setup plumbing

---
 docker-setup.sh        |  5 ++++-
 docs/install/docker.md | 23 +++++++++++++++++++++++
 2 files changed, 27 insertions(+), 1 deletion(-)

diff --git a/docker-setup.sh b/docker-setup.sh
index 0f7571e96..1f61e74c4 100755
--- a/docker-setup.sh
+++ b/docker-setup.sh
@@ -31,6 +31,7 @@ export CLAWDBOT_BRIDGE_PORT="${CLAWDBOT_BRIDGE_PORT:-18790}"
 export CLAWDBOT_GATEWAY_BIND="${CLAWDBOT_GATEWAY_BIND:-lan}"
 export CLAWDBOT_IMAGE="$IMAGE_NAME"
 export CLAWDBOT_DOCKER_APT_PACKAGES="${CLAWDBOT_DOCKER_APT_PACKAGES:-}"
+export CLAWDBOT_DOCKER_OFFICIAL_REPO="${CLAWDBOT_DOCKER_OFFICIAL_REPO:-}"
 
 if [[ -z "${CLAWDBOT_GATEWAY_TOKEN:-}" ]]; then
   if command -v openssl >/dev/null 2>&1; then
@@ -163,11 +164,13 @@ upsert_env "$ENV_FILE" \
   CLAWDBOT_IMAGE \
   CLAWDBOT_EXTRA_MOUNTS \
   CLAWDBOT_HOME_VOLUME \
-  CLAWDBOT_DOCKER_APT_PACKAGES
+  CLAWDBOT_DOCKER_APT_PACKAGES \
+  CLAWDBOT_DOCKER_OFFICIAL_REPO
 
 echo "==> Building Docker image: $IMAGE_NAME"
 docker build \
   --build-arg "CLAWDBOT_DOCKER_APT_PACKAGES=${CLAWDBOT_DOCKER_APT_PACKAGES}" \
+  --build-arg "CLAWDBOT_DOCKER_OFFICIAL_REPO=${CLAWDBOT_DOCKER_OFFICIAL_REPO}" \
   -t "$IMAGE_NAME" \
   -f "$ROOT_DIR/Dockerfile" \
   "$ROOT_DIR"
diff --git a/docs/install/docker.md b/docs/install/docker.md
index 8ca80e53b..59f33904f 100644
--- a/docs/install/docker.md
+++ b/docs/install/docker.md
@@ -45,6 +45,7 @@ This script:
 
 Optional env vars:
 - `CLAWDBOT_DOCKER_APT_PACKAGES` — install extra apt packages during build
+- `CLAWDBOT_DOCKER_OFFICIAL_REPO` — add Docker's official APT repository to the image
 - `CLAWDBOT_EXTRA_MOUNTS` — add extra host bind mounts
 - `CLAWDBOT_HOME_VOLUME` — persist `/home/node` in a named volume
 
@@ -133,6 +134,28 @@ Notes:
 - If you change `CLAWDBOT_DOCKER_APT_PACKAGES`, rerun `docker-setup.sh` to rebuild
   the image.
 
+### Add Docker official APT repository (optional)
+
+If you need Docker CLI tools (e.g. `docker-ce-cli`) inside the image, set
+`CLAWDBOT_DOCKER_OFFICIAL_REPO` before running `docker-setup.sh`. This
+configures Docker's official APT repository with GPG key verification during
+the image build, so packages from it can be installed via
+`CLAWDBOT_DOCKER_APT_PACKAGES`.
+
+Example:
+
+```bash
+export CLAWDBOT_DOCKER_OFFICIAL_REPO=1
+export CLAWDBOT_DOCKER_APT_PACKAGES="docker-ce-cli"
+./docker-setup.sh
+```
+
+Notes:
+- Set to any non-empty value to enable (e.g. `1`).
+- The repository is added before `CLAWDBOT_DOCKER_APT_PACKAGES` runs, so Docker
+  packages are available for installation in the same build.
+- If you change this value, rerun `docker-setup.sh` to rebuild the image.
+
 ### Faster rebuilds (recommended)
 
 To speed up rebuilds, order your Dockerfile so dependency layers are cached.