Skip to content

fix(docker): route VM-Docker runtimes through host-gateway#1301

Open
laitingsheng wants to merge 1 commit intoNVIDIA:mainfrom
laitingsheng:fix/colima-host-gateway-routing
Open

fix(docker): route VM-Docker runtimes through host-gateway#1301
laitingsheng wants to merge 1 commit intoNVIDIA:mainfrom
laitingsheng:fix/colima-host-gateway-routing

Conversation

@laitingsheng
Copy link
Copy Markdown
Contributor

@laitingsheng laitingsheng commented May 10, 2026

Summary

Extend the host-gateway extra-host routing branch from "Docker Desktop only" to also cover Colima, Lima, Rancher Desktop, and OrbStack — community VM-Docker runtimes that have the same constraint Docker Desktop does. Today they fall through to the bridge-gateway-IP path introduced in #1128, which leaves the supervisor callback host pointed at a bridge IP nothing on the host can bind to.

Related Issue

Fixes NVIDIA/NemoClaw#1188.

Changes

  • crates/openshell-driver-docker/src/lib.rs: add is_vm_dockerd_runtime detecting Colima/Lima/Rancher Desktop/OrbStack via info.name (Lima sets the daemon hostname) and runtime-specific label prefixes (dev.rancherdesktop.*, dev.orbstack.*); include it in docker_gateway_route alongside is_docker_desktop.
  • crates/openshell-driver-docker/src/tests.rs: add four routing-test cases mirroring docker_gateway_route_uses_host_gateway_for_docker_desktop — Colima default, Colima named profile (colima-<profile>), Rancher Desktop, and OrbStack.

Testing

  • mise run pre-commit passes
  • Unit tests added/updated
  • E2E tests added/updated (if applicable)

Checklist

  • Follows Conventional Commits
  • Commits are signed off (DCO)
  • Architecture docs updated (if applicable)

@copy-pr-bot
Copy link
Copy Markdown

copy-pr-bot Bot commented May 10, 2026

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

@laitingsheng laitingsheng marked this pull request as ready for review May 10, 2026 08:13
@laitingsheng laitingsheng force-pushed the fix/colima-host-gateway-routing branch from 1ce7f9d to 7f04f05 Compare May 10, 2026 08:21
Colima, Lima, Rancher Desktop, and OrbStack all run dockerd inside a
host VM. Their bridge gateway IP is reachable from inside containers
but not from the OpenShell server process running on the host, the
same constraint Docker Desktop has — yet the existing
is_docker_desktop check rejects them, leaving callbacks routed at a
bridge IP nothing on the host can listen on.

Detect these runtimes by daemon Name (Lima sets the VM hostname to
colima*, lima-*, rancher-desktop, orbstack) and supplemental labels
(dev.rancherdesktop.*, dev.orbstack.*), and route them through
host-gateway like Docker Desktop.

Signed-off-by: Tinson Lai <tinsonl@nvidia.com>
@laitingsheng laitingsheng force-pushed the fix/colima-host-gateway-routing branch from 7f04f05 to b0274b2 Compare May 10, 2026 08:29
}

if is_docker_desktop(info) {
if is_vm_dockerd_runtime(info) {
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why include "vm" here? This is just a docker (and compatible alternatives) check, right?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[macOS + Colima] All whitelisted domains unreachable from sandbox — only inference.local works

2 participants