diff --git a/Dockerfile b/Dockerfile
index 30318e8b..62cc7587 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -191,8 +191,12 @@ RUN --mount=type=cache,id=openclaw-bookworm-apt-cache,target=/var/cache/apt,shar
     --mount=type=cache,id=openclaw-bookworm-apt-lists,target=/var/lib/apt,sharing=locked \
     apt-get update && \
     DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
-      ca-certificates curl git hostname lsof openssl procps python3 tini && \
+      ca-certificates chromium curl git hostname lsof openssl procps python3 tini && \
     update-ca-certificates
+# chromium (Debian's real package, not snap) added for the OpenClaw `browser`
+# plugin — it resolves a system Chrome/Chromium to drive via CDP, and the
+# node:*-slim base ships none. Its shared libs (libnss3, libgbm1, ...) come in
+# as chromium's Depends. Adolf fork addition (kb#64: authenticated web access).
 
 RUN chown node:node /app