Description

Description

PR #3001 (feat(onboard): use OpenShell Docker GPU sandboxes) introduces
a standalone Docker-driver gateway binary (openshell-gateway). On Ubuntu
22.04, the binary fails to start because it was linked against GLIBC 2.38
and 2.39, but Ubuntu 22.04 ships GLIBC 2.35.

Ubuntu 22.04 is the primary CI runner and a common deployment platform
for NemoClaw. The OpenShell support matrix docs list "Linux (Debian/Ubuntu)
x86_64" as Supported without specifying a minimum Ubuntu/GLIBC version.

Device:        Brev n2d-standard-4 (GCP)
OS:            Ubuntu 22.04 LTS (Kernel 6.8.0-1048-gcp)
Architecture:  x86_64
GLIBC:         2.35 (ldd --version)
Node.js:       v22.22.1
Docker:        Docker Engine 28.2.2
NemoClaw:      v0.1.0 (branch codex/openshell-docker-gpu-onboard)
OpenShell CLI: 0.0.36

1. Use a Ubuntu 22.04 machine (e.g. Brev instance)
2. Install NemoClaw from PR #3001 branch:
   NEMOCLAW_INSTALL_TAG=codex/openshell-docker-gpu-onboard \
   curl -fsSL https://www.nvidia.com/nemoclaw.sh | bash
3. Onboard triggers Docker-driver gateway start
4. Observe gateway log at ~/.local/state/nemoclaw/openshell-docker-gateway/openshell-gateway.log

Docker-driver gateway binary starts successfully on Ubuntu 22.04,
matching the "Linux (Debian/Ubuntu) x86_64 — Supported" entry in
the OpenShell support matrix.

NemoClaw onboard output:
  Starting OpenShell Docker-driver gateway...
  Gateway log: ~/.local/state/nemoclaw/openshell-docker-gateway/openshell-gateway.log
  ✓ Docker-driver gateway is healthy    ← false positive

Gateway log shows:
  /home/ubuntu/.local/bin/openshell-gateway: /lib/x86_64-linux-gnu/libc.so.6:
    version `GLIBC_2.38' not found (required by openshell-gateway)
  /home/ubuntu/.local/bin/openshell-gateway: /lib/x86_64-linux-gnu/libc.so.6:
    version `GLIBC_2.39' not found (required by openshell-gateway)

Step 4 (inference provider setup) then fails:
  Error: × transport error → Connection refused (os error 111)

Docker containers: (none running)
The gateway binary never actually started despite the "healthy" message.

Blocker for PR #3001 testing on Ubuntu 22.04. The Docker-driver gateway
cannot run on the most common NemoClaw deployment platform.

GLIBC version requirements:
  - GLIBC 2.38 → Ubuntu 23.10+ or Debian 13+
  - GLIBC 2.39 → Ubuntu 24.04+
  - Ubuntu 22.04 has GLIBC 2.35

The binary needs to be compiled against an older GLIBC (e.g. manylinux
or static linking) to support Ubuntu 22.04.

The onboard also reports "Docker-driver gateway is healthy" even though
the binary crashed on startup. The health check is a false positive —
it should verify the process is actually running.

Bug Details

[NVB#6150133]