If I ask any agent to create a Cron job on a DGX Spark, it throws a 1006 Gateway error and the agent is not able to create the cron job.
Also, other tool calls don't seem to work too, exec tool stopped working for example since I upgraded to nemoclaw v0.0.55 (Tool exec not found).
admin@spark-fce0:~$ nemoclaw debug --quick
[debug] Collecting diagnostics for sandbox 'my-assistant'...
[debug] Quick mode: true
═══ System ═══
Mon Jun 1 21:08:22 CEST 2026
Linux spark-fce0 6.17.0-1014-nvidia #14-Ubuntu SMP PREEMPT_DYNAMIC Tue Mar 17 19:01:40 UTC 2026 aarch64 aarch64 aarch64 GNU/Linux
21:08:22 up 14 days, 5:18, 7 users, load average: 0.11, 0.25, 0.33
total used free shared buff/cache available
Mem: 122543 114046 4877 575 5913 8496
Swap: 16383 7538 8845
═══ Processes ═══
PID PPID CMD %MEM %CPU
1137434 1001037 node /home/admin/.nvm/versi 0.0 91.6
122786 122703 VLLM::EngineCore 0.6 8.8
1128428 1127911 openclaw 0.2 1.8
122703 122696 /usr/bin/python3 /usr/local 0.6 0.2
1002300 122276 strace -p 204 -e trace=writ 0.0 0.2
1086003 1084515 /home/admin/.vscode-server/ 0.4 0.1
1136125 1002477 node /home/admin/.nvm/versi 0.0 0.1
1127740 1127716 /opt/openshell/bin/openshel 0.0 0.1
1122992 1 /home/admin/.local/bin/open 0.0 0.1
2273 1 /usr/bin/dockerd -H fd:// - 0.0 0.1
1084515 1084511 /home/admin/.vscode-server/ 0.1 0.1
2112 1 /usr/bin/containerd 0.0 0.0
1084464 1084446 /home/admin/.vscode-server/ 0.0 0.0
1083894 1 sshfs -F /tmp/nemoclaw-sshf 0.0 0.0
7785 1 cloudflared tunnel --url ht 0.0 0.0
1118565 2 [kworker/u81:3-events_unbou 0.0 0.0
1128833 1 /home/admin/.local/bin/open 0.0 0.0
149 2 [kcompactd0] 0.0 0.0
1136533 1136511 /home/admin/.local/bin/open 0.0 0.0
1136511 1136125 ssh -o ProxyCommand=/home/a 0.0 0.0
15 2 [rcu_preempt] 0.0 0.0
1127716 1 /usr/bin/containerd-shim-ru 0.0 0.0
1086015 1084515 /home/admin/.vscode-server/ 0.0 0.0
1002273 1001952 docker exec -it vllm_node s 0.0 0.0
1002476 1002308 sshd: admin@pts/3 0.0 0.0
1 0 /sbin/init splash 0.0 0.0
2774 2721 /usr/bin/gnome-shell 0.0 0.0
1114748 2 [kworker/u81:1-iou_exit] 0.0 0.0
1084437 1084237 sshd: admin@notty 0.0 0.0
═══ GPU ═══
Mon Jun 1 21:08:22 2026
+-----------------------------------------------------------------------------------------+
| NVIDIA-SMI 580.126.09 Driver Version: 580.126.09 CUDA Version: 13.0 |
+-----------------------------------------+------------------------+----------------------+
| GPU Name Persistence-M | Bus-Id Disp.A | Volatile Uncorr. ECC |
| Fan Temp Perf Pwr:Usage/Cap | Memory-Usage | GPU-Util Compute M. |
| | | MIG M. |
|=========================================+========================+======================|
| 0 NVIDIA GB10 On | 0000000F:01:00.0 Off | N/A |
| N/A 47C P0 11W / N/A | Not Supported | 0% Default |
| | | N/A |
+-----------------------------------------+------------------------+----------------------+
+-----------------------------------------------------------------------------------------+
| Processes: |
| GPU GI CI PID Type Process name GPU Memory |
| ID ID Usage |
|=========================================================================================|
| 0 N/A N/A 2634 G /usr/lib/xorg/Xorg 18MiB |
| 0 N/A N/A 2774 G /usr/bin/gnome-shell 6MiB |
| 0 N/A N/A 122786 C VLLM::EngineCore 10422... |
+-----------------------------------------------------------------------------------------+
═══ Docker ═══
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
9b8ed719cfb3 openshell/sandbox-from:1780339726 "/opt/openshell/bin/…" 18 minutes ago Up 18 minutes (unhealthy) openshell-my-assistant-d4453844-d30a-4f84-bb15-3870a83f5521
b6d807c3fee5 vllm-node-dflash "/opt/nvidia/nvidia_…" 12 days ago Up 12 days vllm_node
2b0ab309fe50 cd921b4da1a4 "docker-entrypoint.s…" 3 weeks ago Created vigorous_hodgkin
CONTAINER ID NAME CPU % MEM USAGE / LIMIT MEM % NET I/O BLOCK I/O PIDS
9b8ed719cfb3 openshell-my-assistant-d4453844-d30a-4f84-bb15-3870a83f5521 2.70% 374.1MiB / 89GiB 0.41% 1.43MB / 4.5MB 17.5MB / 17.9MB 43
b6d807c3fee5 vllm_node 3.15% 2.261GiB / 119.7GiB 1.89% 0B / 0B 3.23GB / 10.2GB 229
═══ OpenShell ═══
Server Status
Gateway: nemoclaw
Server: http://127.0.0.1:8080
Status: Connected
Version: 0.0.44
NAME CREATED PHASE
my-assistant 2026-06-01 18:49:23 Ready
Sandbox:
Id: d4453844-d30a-4f84-bb15-3870a83f5521
Name: my-assistant
Phase: Ready
Resource version: 39
Policy source: sandbox
Revision: 17
Policy:
version: 1
filesystem_policy:
include_workdir: true
read_only:
- /usr
- /lib
- /dev/urandom
- /app
- /etc
- /var/log
- /run/nvidia-persistenced
read_write:
- /tmp
- /dev/null
- /sandbox/.openclaw
- /sandbox/.nemoclaw
- /home/linuxbrew
- /proc
- /sandbox
- /dev/nvidiactl
- /dev/nvidia-uvm
- /dev/nvidia-uvm-tools
- /dev/nvidia-modeset
- /dev/nvidia0
landlock:
compatibility: best_effort
process:
run_as_user: sandbox
run_as_group: sandbox
network_policies:
atlassian:
name: atlassian
endpoints:
- host: '*.atlassian.net'
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
- host: auth.atlassian.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
- host: api.atlassian.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
binaries:
- path: /usr/local/bin/node
- path: /usr/bin/node
brave:
name: brave
endpoints:
- host: api.search.brave.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
binaries:
- path: /usr/local/bin/node
- path: /usr/bin/node
- path: /usr/bin/curl
brew:
name: brew
endpoints:
- host: formulae.brew.sh
port: 443
tls: skip
access: full
- host: github.com
port: 443
tls: skip
access: full
- host: ghcr.io
port: 443
tls: skip
access: full
- host: pkg-containers.githubusercontent.com
port: 443
tls: skip
access: full
- host: objects.githubusercontent.com
port: 443
tls: skip
access: full
- host: raw.githubusercontent.com
port: 443
tls: skip
access: full
binaries:
- path: /usr/bin/curl
- path: /usr/bin/git
- path: /usr/local/bin/brew
- path: /home/linuxbrew/.linuxbrew/bin/brew
- path: /home/linuxbrew/.linuxbrew/bin/*
- path: /home/linuxbrew/.linuxbrew/Homebrew/bin/*
clawhub:
name: clawhub
endpoints:
- host: clawhub.ai
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
binaries:
- path: /usr/local/bin/openclaw
- path: /usr/local/bin/node
discord:
name: discord
endpoints:
- host: discord.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
- allow:
method: PUT
path: /**
- allow:
method: PATCH
path: /**
- allow:
method: DELETE
path: /api/v*/channels/*/messages/*
- allow:
method: DELETE
path: /api/v*/channels/*/messages/*/reactions/*/*
- host: gateway.discord.gg
port: 443
protocol: websocket
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: WEBSOCKET_TEXT
path: /**
websocket_credential_rewrite: true
- host: '*.discord.gg'
port: 443
protocol: websocket
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: WEBSOCKET_TEXT
path: /**
websocket_credential_rewrite: true
- host: cdn.discordapp.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- host: media.discordapp.net
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
binaries:
- path: /usr/local/bin/node
- path: /usr/bin/node
github:
name: github
endpoints:
- host: github.com
port: 443
access: full
- host: api.github.com
port: 443
access: full
binaries:
- path: /usr/bin/git
huggingface:
name: huggingface
endpoints:
- host: huggingface.co
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- host: cdn-lfs.huggingface.co
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- host: router.huggingface.co
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
binaries:
- path: /usr/local/bin/python3
- path: /usr/local/bin/node
local_inference:
name: local_inference
endpoints:
- host: host.openshell.internal
port: 11434
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
allowed_ips:
- '10.0.0.0/8'
- '172.16.0.0/12'
- '192.168.0.0/16'
- host: host.openshell.internal
port: 11435
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
allowed_ips:
- '10.0.0.0/8'
- '172.16.0.0/12'
- '192.168.0.0/16'
- host: host.openshell.internal
port: 8000
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
allowed_ips:
- '10.0.0.0/8'
- '172.16.0.0/12'
- '192.168.0.0/16'
binaries:
- path: /usr/local/bin/openclaw
- path: /usr/local/bin/node
- path: /usr/bin/node
- path: /usr/bin/curl
- path: /usr/bin/python3
managed_inference:
name: managed_inference
endpoints:
- host: inference.local
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
binaries:
- path: /usr/local/bin/openclaw
- path: /usr/local/bin/node
- path: /usr/bin/node
- path: /usr/bin/curl
- path: /usr/bin/python3
npm_registry:
name: npm_registry
endpoints:
- host: registry.npmjs.org
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
binaries:
- path: /usr/local/bin/openclaw
npm_yarn:
name: npm_yarn
endpoints:
- host: registry.npmjs.org
port: 443
tls: skip
access: full
- host: registry.yarnpkg.com
port: 443
tls: skip
access: full
binaries:
- path: /usr/local/bin/npm*
- path: /usr/local/bin/npx*
- path: /usr/local/bin/node*
- path: /usr/local/bin/yarn*
- path: /usr/bin/npm*
- path: /usr/bin/node*
nvidia:
name: nvidia
endpoints:
- host: integrate.api.nvidia.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: POST
path: /v1/chat/completions
- allow:
method: POST
path: /v1/completions
- allow:
method: POST
path: /v1/embeddings
- allow:
method: GET
path: /v1/models
- allow:
method: GET
path: /v1/models/**
- host: inference-api.nvidia.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: POST
path: /v1/chat/completions
- allow:
method: POST
path: /v1/completions
- allow:
method: POST
path: /v1/embeddings
- allow:
method: GET
path: /v1/models
- allow:
method: GET
path: /v1/models/**
binaries:
- path: /usr/local/bin/openclaw
openclaw-pricing:
name: openclaw-pricing
endpoints:
- host: raw.githubusercontent.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /BerriAI/litellm/main/model_prices_and_context_window.json
- host: openrouter.ai
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /api/v1/models
binaries:
- path: /usr/local/bin/node
- path: /usr/bin/node
openclaw_api:
name: openclaw_api
endpoints:
- host: openclaw.ai
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
binaries:
- path: /usr/local/bin/openclaw
- path: /usr/local/bin/node
openclaw_docs:
name: openclaw_docs
endpoints:
- host: docs.openclaw.ai
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
binaries:
- path: /usr/local/bin/openclaw
outlook_graph:
name: outlook_graph
endpoints:
- host: graph.microsoft.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
- allow:
method: PATCH
path: /**
- host: login.microsoftonline.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
- host: outlook.office365.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
- host: outlook.office.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
binaries:
- path: /usr/local/bin/node
pypi:
name: pypi
endpoints:
- host: pypi.org
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: HEAD
path: /**
- host: files.pythonhosted.org
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: HEAD
path: /**
binaries:
- path: /usr/bin/python3*
- path: /usr/bin/pip*
- path: /usr/local/bin/python3*
- path: /usr/local/bin/pip*
- path: /sandbox/.venv/bin/python*
- path: /sandbox/.venv/bin/pip*
- path: /sandbox/.uv/python/**/python*
- path: /sandbox/.local/bin/pip*
slack:
name: slack
endpoints:
- host: slack.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
request_body_credential_rewrite: true
- host: api.slack.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
request_body_credential_rewrite: true
- host: hooks.slack.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
request_body_credential_rewrite: true
- host: wss-primary.slack.com
port: 443
protocol: websocket
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: WEBSOCKET_TEXT
path: /**
websocket_credential_rewrite: true
- host: wss-backup.slack.com
port: 443
protocol: websocket
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: WEBSOCKET_TEXT
path: /**
websocket_credential_rewrite: true
binaries:
- path: /usr/local/bin/node
- path: /usr/bin/node
telegram_bot:
name: telegram_bot
endpoints:
- host: api.telegram.org
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /bot<REDACTED>/**
- allow:
method: POST
path: /bot<REDACTED>/**
- allow:
method: GET
path: /file/bot<REDACTED>/**
binaries:
- path: /usr/local/bin/node
- path: /usr/bin/node
whatsapp:
name: whatsapp
endpoints:
- host: web.whatsapp.com
port: 443
tls: skip
access: full
- host: '*.web.whatsapp.com'
port: 443
tls: skip
access: full
- host: whatsapp.net
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
- host: '*.whatsapp.net'
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /**
- allow:
method: POST
path: /**
- host: raw.githubusercontent.com
port: 443
protocol: rest
enforcement: enforce
rules:
- allow:
method: GET
path: /WhiskeySockets/Baileys/master/src/Defaults/index.ts
binaries:
- path: /usr/local/bin/node
- path: /usr/bin/node
[1780340097.434] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(3)
[1780340097.435] [sandbox] [WARN ] [openshell_sandbox::ssh] channel_eof on unknown channel ChannelId(3)
[1780340097.486] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=24d1a327-3988-4484-8930-aa9f87643f8b, target=unix:/run/openshell/ssh.sock)]
[1780340097.486] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780340097.531] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780340097.531] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780340097.550] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340097.550] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=GET path=/v1/models protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340097.635] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=24d1a327-3988-4484-8930-aa9f87643f8b, target=unix:/run/openshell/ssh.sock)]
[1780340097.717] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=70d85daa-fd4c-4b50-9f74-e897ab8f2a6f, target=unix:/run/openshell/ssh.sock)]
[1780340097.717] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780340097.858] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780340097.962] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780340097.806] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780340097.806] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780340097.852] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=70d85daa-fd4c-4b50-9f74-e897ab8f2a6f, target=unix:/run/openshell/ssh.sock)]
[1780340097.858] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=fb782188-c5f2-4698-a0a4-12f758c5d8aa, target=unix:/run/openshell/ssh.sock)]
[1780340097.858] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780340097.906] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780340097.906] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780340097.954] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=fb782188-c5f2-4698-a0a4-12f758c5d8aa, target=unix:/run/openshell/ssh.sock)]
[1780340097.962] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=6d351055-9695-43a0-9163-8261445cc19c, target=unix:/run/openshell/ssh.sock)]
[1780340097.962] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780340098.010] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780340098.010] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780340098.058] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=6d351055-9695-43a0-9163-8261445cc19c, target=unix:/run/openshell/ssh.sock)]
[1780340285.660] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340285.660] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340310.871] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780340310.979] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780340311.083] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780340310.871] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=20843a87-8104-48d7-9579-98509455301f, target=unix:/run/openshell/ssh.sock)]
[1780340310.871] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780340310.923] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780340310.923] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780340310.972] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=20843a87-8104-48d7-9579-98509455301f, target=unix:/run/openshell/ssh.sock)]
[1780340310.979] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=72f30883-7279-4b61-a29a-b3e817c1ac8c, target=unix:/run/openshell/ssh.sock)]
[1780340310.979] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780340311.028] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780340311.028] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780340311.076] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=72f30883-7279-4b61-a29a-b3e817c1ac8c, target=unix:/run/openshell/ssh.sock)]
[1780340311.083] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=c2e7fa62-c878-4917-b80c-bca8c51b0d63, target=unix:/run/openshell/ssh.sock)]
[1780340311.083] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780340311.132] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780340311.132] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780340311.183] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=c2e7fa62-c878-4917-b80c-bca8c51b0d63, target=unix:/run/openshell/ssh.sock)]
[1780340315.654] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(4)
[1780340316.013] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(4)
[1780340316.056] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(4)
[1780340316.057] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(5)
[1780340316.057] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340316.121] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340316.125] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(4)
[1780340316.144] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340316.150] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(7)
[1780340316.156] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(8)
[1780340316.161] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(4)
[1780340316.169] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340316.202] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340316.202] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(9)
[1780340317.788] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(8)
[1780340323.945] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340324.274] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340324.311] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340324.311] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340324.318] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340324.365] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340324.598] [sandbox] [WARN ] [openshell_sandbox::ssh] channel_eof on unknown channel ChannelId(4)
[1780340324.598] [sandbox] [WARN ] [openshell_sandbox::ssh] channel_eof on unknown channel ChannelId(5)
[1780340324.598] [sandbox] [WARN ] [openshell_sandbox::ssh] channel_eof on unknown channel ChannelId(7)
[1780340324.598] [sandbox] [WARN ] [openshell_sandbox::ssh] channel_eof on unknown channel ChannelId(9)
[1780340324.598] [sandbox] [WARN ] [openshell_sandbox::ssh] channel_eof on unknown channel ChannelId(8)
[1780340338.804] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340338.934] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340338.934] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340340.882] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340340.975] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340340.975] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340341.136] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340344.120] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340344.223] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340344.223] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340348.356] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340348.475] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340348.475] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340349.948] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(10)
[1780340359.152] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340359.163] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340366.169] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340372.179] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340372.430] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340372.467] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340372.467] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340372.494] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340372.552] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340382.249] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340382.394] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340382.394] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340385.914] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340385.965] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340385.965] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340391.139] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340394.054] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340394.077] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340394.077] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340405.170] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340405.356] [gateway] [INFO ] [openshell_server::grpc::policy] SubmitPolicyAnalysis: persisted draft chunks
[1780340405.267] [sandbox] [OCSF ] [ocsf] NET:OPEN [MED] DENIED /usr/local/bin/node(435) -> 127.0.0.1:18789 [policy:- engine:opa] [reason:endpoint 127.0.0.1:18789 not in policy 'atlassian'; endpoint 127.0.0.1:18789 not...]
[1780340405.355] [sandbox] [INFO ] [openshell_sandbox::mechanistic_mapper] Skipped proposal for always-blocked destination (SSRF hardening — loopback/link-local/unspecified) host=127.0.0.1 port=18789
[1780340405.355] [sandbox] [INFO ] [openshell_sandbox] Flushed denial analysis to gateway proposals=0 sandbox_name=my-assistant summaries=1
[1780340405.382] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340405.382] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340411.261] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340411.334] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340411.334] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340413.734] [sandbox] [WARN ] [openshell_sandbox::ssh] channel_eof on unknown channel ChannelId(10)
[1780340416.319] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340417.029] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340417.294] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340417.294] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340421.977] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340422.026] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340422.026] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340426.898] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340427.020] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340427.020] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340433.942] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340434.044] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340434.044] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340441.134] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340442.251] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340442.484] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340442.484] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340447.680] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340447.792] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340447.792] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340452.546] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340452.656] [sandbox] [OCSF ] [ocsf] NET:OPEN [MED] DENIED /usr/local/bin/node(435) -> 127.0.0.1:18789 [policy:- engine:opa] [reason:endpoint 127.0.0.1:18789 not in policy 'atlassian'; endpoint 127.0.0.1:18789 not...]
[1780340452.746] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340452.746] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340455.356] [gateway] [INFO ] [openshell_server::grpc::policy] SubmitPolicyAnalysis: persisted draft chunks
[1780340455.355] [sandbox] [INFO ] [openshell_sandbox::mechanistic_mapper] Skipped proposal for always-blocked destination (SSRF hardening — loopback/link-local/unspecified) host=127.0.0.1 port=18789
[1780340455.355] [sandbox] [INFO ] [openshell_sandbox] Flushed denial analysis to gateway proposals=0 sandbox_name=my-assistant summaries=1
[1780340457.000] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340457.777] [sandbox] [OCSF ] [ocsf] NET:OPEN [MED] DENIED /usr/local/bin/node(1622) -> 127.0.0.1:18789 [policy:- engine:opa] [reason:endpoint 127.0.0.1:18789 not in policy 'atlassian'; endpoint 127.0.0.1:18789 not...]
[1780340457.906] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340457.906] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340465.356] [gateway] [INFO ] [openshell_server::grpc::policy] SubmitPolicyAnalysis: persisted draft chunks
[1780340465.355] [sandbox] [INFO ] [openshell_sandbox::mechanistic_mapper] Skipped proposal for always-blocked destination (SSRF hardening — loopback/link-local/unspecified) host=127.0.0.1 port=18789
[1780340465.355] [sandbox] [INFO ] [openshell_sandbox] Flushed denial analysis to gateway proposals=0 sandbox_name=my-assistant summaries=1
[1780340466.134] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340471.754] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340472.328] [sandbox] [OCSF ] [ocsf] NET:OPEN [MED] DENIED /usr/local/bin/node(1647) -> 127.0.0.1:18789 [policy:- engine:opa] [reason:endpoint 127.0.0.1:18789 not in policy 'atlassian'; endpoint 127.0.0.1:18789 not...]
[1780340472.482] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340472.482] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340475.356] [gateway] [INFO ] [openshell_server::grpc::policy] SubmitPolicyAnalysis: persisted draft chunks
[1780340475.355] [sandbox] [INFO ] [openshell_sandbox::mechanistic_mapper] Skipped proposal for always-blocked destination (SSRF hardening — loopback/link-local/unspecified) host=127.0.0.1 port=18789
[1780340475.355] [sandbox] [INFO ] [openshell_sandbox] Flushed denial analysis to gateway proposals=0 sandbox_name=my-assistant summaries=1
[1780340484.364] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340484.892] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340484.893] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=POST path=/v1/chat/completions protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340491.137] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340516.135] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340529.782] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340529.801] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340541.147] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340566.135] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340591.144] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340616.136] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340641.148] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340666.202] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340691.148] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340716.137] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340741.144] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340762.810] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780340762.968] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780340762.968] [gateway] [INFO ] [openshell_server::grpc::sandbox] ExecSandbox (relay): command started
[1780340763.256] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780340762.810] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=d49da84b-df0b-48d6-a38d-441f78fde695, target=unix:/run/openshell/ssh.sock)]
[1780340762.810] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780340762.816] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780340762.816] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780340762.863] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=d49da84b-df0b-48d6-a38d-441f78fde695, target=unix:/run/openshell/ssh.sock)]
[1780340762.968] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=5a1da399-b493-4b34-8418-81ae73866d1c, target=unix:/run/openshell/ssh.sock)]
[1780340762.968] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780340763.012] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780340763.012] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780340763.027] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780340763.027] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=GET path=/v1/models protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780340763.072] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=5a1da399-b493-4b34-8418-81ae73866d1c, target=unix:/run/openshell/ssh.sock)]
[1780340763.256] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=127d1765-5e19-4ea5-9cd6-86ed9ba3a862, target=unix:/run/openshell/ssh.sock)]
[1780340763.256] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780340763.306] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780340763.306] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780340766.146] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340791.141] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340816.220] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340841.141] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340866.139] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
[1780340891.144] [sandbox] [WARN ] [openshell_sandbox::ssh] data on unknown channel ChannelId(6)
═══ Onboard Session ═══
{
"version": 1,
"sessionId": "1780339595782-bb24a736-d61e-41c6-b565-ad88a75681b0",
"status": "complete",
"resumable": false,
"mode": "interactive",
"startedAt": "2026-06-01T18:46:35.782Z",
"updatedAt": "2026-06-01T18:54:58.059Z",
"sandboxName": "my-assistant",
"provider": "vllm-local",
"model": "qwen/qwen3.6-27b",
"endpointUrl": "http://host.openshell.internal:8000/v1",
"credentialEnv": null,
"hermesAuthMethod": null,
"preferredInferenceApi": "openai-completions",
"nimContainer": null,
"hermesToolGateways": [],
"policyPresets": [
"npm",
"pypi",
"huggingface",
"brew",
"brave",
"slack",
"discord",
"telegram",
"whatsapp",
"jira",
"outlook",
"github",
"local-inference",
"openclaw-pricing"
],
"gpuPassthrough": true,
"lastStepStarted": "policies",
"lastCompletedStep": "policies",
"failure": null,
"machine": {
"version": 1,
"state": "complete",
"stateEnteredAt": "2026-06-01T18:54:58.059Z",
"revision": 12
},
"steps": {
"preflight": {
"status": "complete",
"startedAt": "2026-06-01T18:46:35.792Z",
"completedAt": "2026-06-01T18:46:41.031Z",
"error": null
},
"gateway": {
"status": "complete",
"startedAt": "2026-06-01T18:47:52.371Z",
"completedAt": "2026-06-01T18:47:52.899Z",
"error": null
},
"sandbox": {
"status": "complete",
"startedAt": "2026-06-01T18:48:03.707Z",
"completedAt": "2026-06-01T18:49:47.440Z",
"error": null
},
"provider_selection": {
"status": "complete",
"startedAt": "2026-06-01T18:47:52.899Z",
"completedAt": "2026-06-01T18:48:00.065Z",
"error": null
},
"inference": {
"status": "complete",
"startedAt": null,
"completedAt": "2026-06-01T18:48:00.117Z",
"error": null
},
"openclaw": {
"status": "complete",
"startedAt": null,
"completedAt": "2026-06-01T18:49:47.979Z",
"error": null
},
"agent_setup": {
"status": "skipped",
"startedAt": null,
"completedAt": null,
"error": null
},
"policies": {
"status": "complete",
"startedAt": "2026-06-01T18:49:47.980Z",
"completedAt": "2026-06-01T18:54:56.802Z",
"error": null
}
}
}
═══ Sandbox Internals ═══
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 18:49 ? 00:00:01 /opt/openshell/bin/openshell-sandbox env CHAT_UI_URL=http://127.0.0.1:18789 NEMOCLAW_DASHBOARD_PORT=18789 nemoclaw-start
sandbox 78 1 0 18:49 ? 00:00:00 bash /usr/local/bin/nemoclaw-start
sandbox 84 78 0 18:49 ? 00:00:00 tee -a /tmp/nemoclaw-start.log
sandbox 85 78 0 18:49 ? 00:00:00 tee -a /tmp/nemoclaw-start.log
sandbox 435 78 1 18:49 ? 00:00:20 openclaw
sandbox 436 78 0 18:49 ? 00:00:00 bash /usr/local/bin/nemoclaw-start
sandbox 438 436 0 18:49 ? 00:00:00 tail -n +1 -F /tmp/gateway.log
sandbox 439 436 0 18:49 ? 00:00:00 sed -u s/^/[gateway-log:] /
sandbox 450 78 0 18:49 ? 00:00:00 bash /usr/local/bin/nemoclaw-start
sandbox 451 450 0 18:49 ? 00:00:00 tail -n +1 -F /tmp/gateway.log
sandbox 453 78 0 18:49 ? 00:00:00 python3 -
sandbox 1994 1 0 19:06 pts/0 00:00:00 /bin/bash -i
sandbox 2127 1 0 19:08 ? 00:00:00 ps -ef
total used free shared buff/cache available
Mem: 122543 114048 4872 575 5916 8494
Swap: 16383 7538 8845
═══ Kernel Messages ═══
(kernel messages skipped: dmesg access is restricted for this user; /proc/sys/kernel/dmesg_restrict=1 prevents non-root users from reading kernel logs)
[debug] Done. If filing a bug, run with --output and attach the tarball to your issue:
[debug] nemoclaw debug --output /tmp/nemoclaw-debug.tar.gz
Description
If I ask any agent to create a Cron job on a DGX Spark, it throws a 1006 Gateway error and the agent is not able to create the cron job.
Reproduction Steps
Tool Search Code
Tool output
{
"status": "error",
"tool": "tool_search_code",
"error": "Error: gateway closed (1006 abnormal closure (no close frame)): no close reason\nGateway target: ws://127.0.0.1:18789\nSource: env OPENCLAW_GATEWAY_URL\nConfig: /sandbox/.openclaw/openclaw.json\n\nPossible causes:\n- Gateway not yet ready to accept connections (retry after a moment)\n- TLS mismatch (connecting with ws:// to a wss:// gateway, or vice versa)\n- Gateway crashed or was terminated unexpectedly\nRun
openclaw doctorfor diagnostics."}
Also, other tool calls don't seem to work too, exec tool stopped working for example since I upgraded to nemoclaw v0.0.55 (Tool exec not found).
Environment
OS: Linux 6.17.0-1014-nvidia aarch64
Node: v22.22.2
Docker: Docker version 29.2.1, build a5c7197
NemoClaw: nemoclaw v0.0.55
Debug Output
Logs
Checklist