Red Hat’s OpenClaw maintainer just made enterprise Claw deployments a lot safer

On Tuesday, Red Hat principal software engineer Sally O’Malley released a new open source tool called Tank OS to make it easier to deploy and manage OpenClaw agents more safely. “This was a fun project that I put together on the weekend that I knew would be a really good fit for AI and where we’re going,” she told TechCrunch, adding that she wanted to give it “to the masses.” Tank OS is geared toward power users looking to run OpenClaw on their own computers and toward IT pros managing fleets of corporate OpenClaw agents. It makes OpenClaw safer and easier to maintain en masse. Countless people, companies, and startups are already inventing better ways to work with OpenClaw — the open source project that installs an AI agent on a local computer. There is also a growing number of startups building competing claw alternatives that they say are safer (like NanoClaw). What makes O’Malley’s project notable is that she is an OpenClaw maintainer. That means she’s among the select software engineers working with creator Peter Steinberger to decide which features and bugs get worked on. In her case, she focuses on making OpenClaw work better in enterprise use cases, and with Red Hat’s various flavors of the Linux operating system. (While Steinberger was hired by OpenAI, he still leads the independent open source OpenClaw project.) O’Malley joined OpenClaw because she sees it working to “enable everyone to run AI in a safe way, that’s open,” she said. But she got to thinking about what will happen when OpenClaw invades an enterprise and decided to build a tool for that eventuality. She began with an open source container tool called Podman, created by a colleague at Red Hat. Containers are a way to run apps separately from the underlying computer, with everything the app needs to run, bundled together. They can run a Linux app on a Windows or Mac machine, for instance. Techcrunch event Meet your next investor or portfolio startup at Disrupt Your next round. Your next hire. Your next breakout opportunity. Find it at TechCrunch Disrupt 2026, where 10,000+ founders, investors, and tech leaders gather for three days of 250+ tactical sessions, powerful introductions, and market-defining innovation. Register now to save up to $410. Meet your next investor or portfolio startup at Disrupt Your next round. Your next hire. Your next breakout opportunity. Find it at TechCrunch Disrupt 2026, where 10,000+ founders, investors, and tech leaders gather for three days of 250+ tactical sessions, powerful introductions, and market-defining innovation. Register now to save up to $410. San Francisco, CA | October 13-15, 2026 REGISTER NOW Podman is a particularly secure way to do this because it’s “rootless,” meaning it doesn’t give the containers any privileges from the underlying machine, Red Hat says. Tank OS loads OpenClaw onto Red Hat’s Fedora Linux OS in a Podman container and makes that container a bootable image, meaning it will run and launch OpenClaw when you start the computer. Her tool includes everything needed to make OpenClaw useful without human oversight, like state (the part that allows it to remember); the ability to store API keys (the credentials for accessing subscriptions and services); and other features. Users can run multiple Tank OS instances on a machine to do different tasks, never sharing passwords or credentials between them, and no OpenClaw instance can gain access to anything else running on the computer. While O’Malley knows that…

This excerpt is published under fair use for community discussion. Read the full article at TechCrunch.