feat(vm): add openshell-vm microVM gateway backend (opt-in via NEMOCLAW_GATEWAY_BACKEND=vm)#1791

Closed

ericksoa wants to merge 47 commits into

mainfrom

feat/openshell-vm-backend

Commits on Apr 12, 2026

fix(vm): pass --name to openshell-vm and use correct gateway identity
ericksoa
committed
ci(vm): grant KVM device access to runner user for vm-e2e
ericksoa
committed
fix(vm): reduce VM memory to 4GB, use downloaded runtime, add diagnostics
ericksoa
committed
fix(vm): patch rootfs init script to mount /dev/mqueue for runc
ericksoa
committed
fix(vm): add diagnostic logging to rootfs mqueue patch
ericksoa
committed
fix(vm): pass --name before prepare-rootfs subcommand (clap arg order)
ericksoa
committed
fix(vm): install runc shim to strip mqueue mounts on old kernels
ericksoa
committed
fix(vm): rewrite runc mqueue shim as separate file to avoid init script breakage
ericksoa
committed
fix(vm): use containerd config template to route runc through mqueue shim
ericksoa
committed
fix(vm): replace mqueue with tmpfs in OCI spec instead of deleting lines
ericksoa
committed
feat(vm): build and import sandbox image via virtio-fs for VM backend
ericksoa
committed
fix(vm): use k3s-bundled ctr path for containerd image import
ericksoa
committed
fix(vm): write image tar to /opt/nemoclaw/ instead of /tmp/ (tmpfs overlay)
ericksoa
committed
fix(vm): use import script on rootfs to avoid exec agent shell quoting issues
ericksoa
committed
fix(vm): add containerd image list debug after import to verify ref
ericksoa
committed
fix(vm): add k3s data dirs to PATH for ctr lookup in import script
ericksoa
committed
fix(vm): skip DNS proxy for VM backend, add sandbox readiness wait
ericksoa
committed
ci(vm): add sandbox pod logs and describe to diagnostics
ericksoa
committed
fix(vm): replace VM supervisor binary with Docker-compatible one
ericksoa
committed
fix(vm): increase sandbox readiness timeout for VM backend (30 attempts)
ericksoa
committed
fix(vm): use gRPC sandbox list instead of docker exec for VM readiness
ericksoa
committed
fix(vm): allow --resume to recover a completed session with dead VM gateway
ericksoa
committed
fix(vm): wait for inference route after gateway recovery before exiting resume
ericksoa
committed
refactor(vm): remove GPU-forces-Docker constraint from backend detection
ericksoa
committed
feat(vm): drop Docker-in-Docker from k8s manifest, use openshell-vm
ericksoa
committed
fix(vm): increase post-resume inference route wait from 30s to 60s
ericksoa
committed
Merge branch 'main' into feat/openshell-vm-backend
ericksoa
authored

Commits on Apr 20, 2026