Jetson Thor: Nemoclaw Onboard - Failed Creating sandbox [3/11]

### Description

When running nemoclaw onboard on Jetson AGX Thor, the process fails at sandbox creation, error occurs at Docker build Step 3/11.

Full log:

smh@tegra-ubuntu:~/claw$ nemoclaw onboard

NemoClaw Onboarding
===================

[1/8] Preflight checks
──────────────────────────────────────────────────
✓ Docker is running
⚠ Container DNS probe inconclusive (reason: no_output).
docker run produced no output (timed out or failed to start)
Proceeding. If the sandbox build later hangs at `npm ci`, see issue #2101.
✓ Container runtime: docker
✓ Container runtime resources: 14 vCPU / 58.7 GiB
✓ openshell CLI: openshell 0.0.39
Cleaning up previous NemoClaw session...
! No active forward found for port 18789
✓ Previous session cleaned up
✓ Port 8080 available (OpenShell gateway)
✓ NVIDIA GPU detected (NVIDIA Jetson/Tegra GPU, 60086 MB)
✓ Sandbox GPU: disabled by configuration
✓ Memory OK: 60086 MB RAM + 0 MB swap
NVIDIA GPU hardware detected but nvidia-smi is not available.
Install NVIDIA drivers and the Container Toolkit for default GPU passthrough.

[2/8] Starting OpenShell gateway
──────────────────────────────────────────────────
Starting OpenShell Docker-driver gateway...
Gateway log: /home/smh/.local/state/nemoclaw/openshell-docker-gateway/openshell-gateway.log
⚠ Could not verify sandbox bridge reachability.
This does not prove the gateway is unreachable; continuing.
spawnSync docker ETIMEDOUT | Unable to find image 'busybox@sha256:73aaf090f3d85aa34ee199857f03fa3a95c8ede2ffd4cc2cdb5b94e566b11662' locally | signal SIGTERM
✓ Docker-driver gateway is healthy

……

[6/8] Creating sandbox
──────────────────────────────────────────────────
Creating sandbox 'my-assistant' (this takes a few minutes on first run)...
Warning: OpenClaw sandbox base image ghcr.io/nvidia/nemoclaw/sandbox-base:latest has glibc unknown; OpenShell sandbox supervisor requires glibc >= 2.39.
Building OpenClaw sandbox base image locally because no compatible published base image was found.

Sending build context to Docker daemon 211.8MB
Step 1/11 : FROM node:22-trixie-slim@sha256:2d9f5c76c8f4dd36e8f253bee5d828a83a6c09f36188f0b0414325232e0b175d
---> 655ea0f68e5c
Step 2/11 : ENV DEBIAN_FRONTEND=noninteractive
---> Using cache
---> 3aedf8da7407
Step 3/11 : RUN apt-get update && apt-get install -y --no-install-recommends python3=3.13.5-1 python3-pip=25.1.1+dfsg-1 python3-venv=3.13.5-1 curl=8.14.1-2+deb13u2 git=1:2.47.3-0+deb13u1 gnupg=2.4.7-21+deb13u1 ca-certificates=20250419 iproute2=6.15.0-1 iptables=1.8.11-2 libcap2-bin=1:2.75-10+b8 procps=2:4.0.4-9 e2fsprogs=1.47.2-3+b10 "dos2unix=7.5.2-1*" jq=1.7.1-6+deb13u1 vim-tiny=2:9.1.1230-2 openssh-sftp-server=1:10.0p1-7+deb13u2 && rm -rf /var/lib/apt/lists/*
---> Running in e646b3d5ddb2
failed to create endpoint elastic_bartik on network bridge: failed to add the host (veth7d3ec48) <=> sandbox (vethd23e174) pair interfaces: operation not supported
Command failed (exit 1): docker build -f /home/smh/.nemoclaw/source/Dockerfile.base -t nemoclaw-sandbox-base:latest .

### Reproduction Steps

1. Run 'nemoclaw onboard'
2. [3/8] Configuring inference (NIM) 1
3. [4/8] Setting up inference provider 1
4. [5/8] Messaging channels None
5. [6/8] Creating sandbox

### Environment

- Hardware: NVIDIA Jetson AGX Thor
- Kernel: 6.1.119-rt45-rt-tegra
- OS: Ubuntu 24.04.1 LTS (noble)
- Arch: aarch64
- Docker: 26.1.3
- Node.js: v22.22.2

### Debug Output

```shell

```

### Logs

```shell

```

### Checklist

- [x] I confirmed this bug is reproducible
- [x] I searched existing issues and this is not a duplicate