Description

When sandbox is up and running we fail to upgrade Openclaw to the latest version. This occured in a VM running Ubuntu 22.04.5
On a jetson device the upgrade works correctly and openclaw updates.

UFW is not active
Openshell policies in place:

Reproduction Steps

1. Setup a nemoclaw sandbox
2. Enter sandbox and run openclaw status
3. Status should return Openclaw 2026.3.11

4. Status will inform Openclaw 2026.3.24 is available and to run update

5. Update timesout after 1200s then switches to trying without dependencies and will timeout after 1200s

Environment

PRETTY_NAME="Ubuntu 22.04.5 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.5 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=jammy

{
npm: '11.11.0',
node: '24.14.1',
acorn: '8.15.0',
ada: '3.4.2',
amaro: '1.1.7',
ares: '1.34.6',
brotli: '1.2.0',
cldr: '48.0',
icu: '78.2',
llhttp: '9.3.0',
merve: '1.0.0',
modules: '137',
napi: '10',
nbytes: '0.1.1',
ncrypto: '0.0.1',
nghttp2: '1.68.0',
openssl: '3.5.5',
simdjson: '4.2.4',
simdutf: '6.4.0',
sqlite: '3.51.2',
tz: '2025c',
undici: '7.24.4',
unicode: '17.0',
uv: '1.51.0',
uvwasi: '0.0.23',
v8: '13.6.233.17-node.44',
zlib: '1.3.1-e00f703',
zstd: '1.5.7'
}

Client: Docker Engine - Community
Version: 29.3.1
Context: default
Debug Mode: false
Plugins:
buildx: Docker Buildx (Docker Inc.)
Version: v0.31.1
Path: /usr/libexec/docker/cli-plugins/docker-buildx
compose: Docker Compose (Docker Inc.)
Version: v5.1.1
Path: /usr/libexec/docker/cli-plugins/docker-compose

Server:
Containers: 1
Running: 1
Paused: 0
Stopped: 0
Images: 65
Server Version: 29.3.1
Storage Driver: overlayfs
driver-type: io.containerd.snapshotter.v1
Logging Driver: json-file
Cgroup Driver: systemd
Cgroup Version: 2

Debug Output

Logs

Checklist

• I confirmed this bug is reproducible
• I searched existing issues and this is not a duplicate