fix(snap): defer gateway start until Docker connects

Signed-off-by: Evan Lezar <elezar@nvidia.com>

Author: elezar

python/openshell/release_formula_test.py

@@ -131,13 +131,15 @@ def test_snap_wrapper_uses_optional_gateway_config_without_generating_toml() ->
     assert 'exec "${SNAP}/bin/openshell-gateway" "$@"' in wrapper
 
 
-def test_snap_docker_connect_hook_restarts_gateway() -> None:
+def test_snap_docker_connect_hook_enables_and_starts_gateway() -> None:
     repo_root = Path(__file__).resolve().parents[2]
     hook = repo_root / "snap/hooks/connect-plug-docker"
+    snapcraft = (repo_root / "snapcraft.yaml").read_text(encoding="utf-8")
 
     assert hook.is_file()
     assert hook.stat().st_mode & stat.S_IXUSR
-    assert 'snapctl restart "${SNAP_INSTANCE_NAME}.gateway"' in hook.read_text(
+    assert "install-mode: disable" in snapcraft
+    assert 'snapctl start --enable "${SNAP_INSTANCE_NAME}.gateway"' in hook.read_text(
         encoding="utf-8"
     )
 

snap/hooks/connect-plug-docker

@@ -2,11 +2,10 @@
 # SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
 # SPDX-License-Identifier: Apache-2.0
 
-# The gateway daemon can start when this plug is still disconnected. Restart it
-# after Docker access becomes available so driver auto-detection runs with the
-# socket exposed by docker:docker-daemon. This hook does not make normal gateway
-# startup conditional on Docker; it runs only after an operator connects Docker.
+# The gateway is disabled on installation so it cannot start before this plug is
+# connected. Enable and start it after Docker access becomes available so driver
+# auto-detection runs with the socket exposed by docker:docker-daemon.
 
 set -eu
 
-snapctl restart "${SNAP_INSTANCE_NAME}.gateway"
+snapctl start --enable "${SNAP_INSTANCE_NAME}.gateway"

snapcraft.yaml

@@ -82,6 +82,10 @@ apps:
   gateway:
     command: bin/openshell-gateway-wrapper
     daemon: simple
+    # Do not start before the Docker interface is available. The
+    # connect-plug-docker hook enables and starts the gateway after Docker
+    # access is granted, including for store-managed auto-connections.
+    install-mode: disable
     # refresh-mode: endure prevents snapd from restarting the gateway daemon
     # during snap refreshes, which would kill active sandbox sessions.
     # Operators must manually restart the service after a refresh if needed.