Skip to content

fix(docker): route VM-Docker runtimes through host-gateway#1301

Merged
drew merged 1 commit into
NVIDIA:mainfrom
laitingsheng:fix/colima-host-gateway-routing
May 11, 2026
Merged

fix(docker): route VM-Docker runtimes through host-gateway#1301
drew merged 1 commit into
NVIDIA:mainfrom
laitingsheng:fix/colima-host-gateway-routing

Conversation

@laitingsheng
Copy link
Copy Markdown
Contributor

@laitingsheng laitingsheng commented May 10, 2026

Summary

Extend the host-gateway extra-host routing branch from "Docker Desktop only" to also cover Colima, Lima, Rancher Desktop, and OrbStack — community VM-Docker runtimes that have the same constraint Docker Desktop does. Today they fall through to the bridge-gateway-IP path introduced in #1128, which leaves the supervisor callback host pointed at a bridge IP nothing on the host can bind to.

Related Issue

Fixes NVIDIA/NemoClaw#1188.

Changes

  • crates/openshell-driver-docker/src/lib.rs: add is_vm_dockerd_runtime detecting Colima/Lima/Rancher Desktop/OrbStack via info.name (Lima sets the daemon hostname) and runtime-specific label prefixes (dev.rancherdesktop.*, dev.orbstack.*); include it in docker_gateway_route alongside is_docker_desktop.
  • crates/openshell-driver-docker/src/tests.rs: add four routing-test cases mirroring docker_gateway_route_uses_host_gateway_for_docker_desktop — Colima default, Colima named profile (colima-<profile>), Rancher Desktop, and OrbStack.

Testing

  • mise run pre-commit passes
  • Unit tests added/updated
  • E2E tests added/updated (if applicable)

Checklist

  • Follows Conventional Commits
  • Commits are signed off (DCO)
  • Architecture docs updated (if applicable)

@copy-pr-bot
Copy link
Copy Markdown

copy-pr-bot Bot commented May 10, 2026

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

@laitingsheng laitingsheng marked this pull request as ready for review May 10, 2026 08:13
@laitingsheng laitingsheng force-pushed the fix/colima-host-gateway-routing branch 2 times, most recently from 7f04f05 to b0274b2 Compare May 10, 2026 08:29
drew
drew previously approved these changes May 10, 2026
Comment thread crates/openshell-driver-docker/src/lib.rs Outdated
@drew drew dismissed their stale review May 10, 2026 23:23

question about naming

@laitingsheng laitingsheng force-pushed the fix/colima-host-gateway-routing branch from b0274b2 to b210af1 Compare May 11, 2026 01:34
Colima, Lima, Rancher Desktop, and OrbStack all run dockerd inside a
host VM. Their bridge gateway IP is reachable from inside containers
but not from the OpenShell server process running on the host, the
same constraint Docker Desktop has — yet the existing
is_docker_desktop check rejects them, leaving callbacks routed at a
bridge IP nothing on the host can listen on.

Detect these runtimes by daemon Name (Lima sets the VM hostname to
colima*, lima-*, rancher-desktop, orbstack) and supplemental labels
(dev.rancherdesktop.*, dev.orbstack.*), and route them through
host-gateway like Docker Desktop.

Signed-off-by: Tinson Lai <tinsonl@nvidia.com>
@laitingsheng laitingsheng force-pushed the fix/colima-host-gateway-routing branch from b210af1 to d88523d Compare May 11, 2026 01:45
@laitingsheng laitingsheng requested a review from drew May 11, 2026 01:50
@drew drew merged commit 977be31 into NVIDIA:main May 11, 2026
22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[macOS + Colima] All whitelisted domains unreachable from sandbox — only inference.local works

2 participants