[OndrejDrapalik]

What changed

Backport the eMudhra compromise fix into the NVIDIA v0.1.2 binaries built by scripts/build-binaries.ts. After applying the landlock patch, update rustls-webpki to 0.103.16 and webpki-roots / webpki-root-certs to 1.0.10 before compiling. All three packages exist in v0.1.2's lockfile.

The updates are chained with && in an awaited SDK command. A nonzero exit throws CommandExitError, aborts the build, and reaches the script's existing error handler. Add a short removal comment and one matching README line. The v0.1.2 pin and existing build commands remain unchanged.

How I verified it

Used a fresh local clone of NVIDIA/OpenShell v0.1.2 at 6648bd0c290efbc41ba131ee9831ee45cd431f94, without E2B:

git clone --depth 1 --branch v0.1.2 https://github.com/NVIDIA/OpenShell.git /tmp/emudhra-fix-r2/OpenShell
cd /tmp/emudhra-fix-r2/OpenShell
git apply /tmp/emudhra-fix-r2/openshell-e2b/patches/landlock-abi2.patch
cargo update -p rustls-webpki --precise 0.103.16
cargo update -p webpki-roots --precise 1.0.10
cargo update -p webpki-root-certs --precise 1.0.10
git diff -- Cargo.lock
cargo check --locked -p openshell-supervisor -p openshell-sandbox

• The patch and all three update commands passed. Cargo.lock changes only the versions and checksums of those three packages: rustls-webpki 0.103.15 -> 0.103.16, webpki-roots 1.0.7 -> 1.0.10, webpki-root-certs 1.0.7 -> 1.0.10. A parsed TOML comparison also confirmed no other package fields or package count changed.
• cargo check --locked -p openshell-supervisor -p openshell-sandbox passed with Rust 1.95.0 in 1m 03s. Ran with CARGO_BUILD_JOBS=4; supplied PROTOC and LD_LIBRARY_PATH from protobuf packages unpacked under /tmp/emudhra-fix-r2/protoc, with no system installation. No release build was run.

In this repository:

npm ci --ignore-scripts --no-audit --no-fund
node_modules/.bin/esbuild scripts/build-binaries.ts --platform=node --format=esm --outfile=/tmp/emudhra-fix-r2/build-binaries.syntax.mjs
git diff --check

All passed. There is no TypeScript compiler or tsconfig in this repository, so this checks parsing and transpilation without executing the script. No E2B sandboxes, binary builder run, template builds, or publishing were performed.

Residual risk

• This needs a builder run plus control and workload template rebuilds to take effect. Existing deployed templates are not changed by this PR.
• Patched binaries still land in dist/v0.1.2/.
• Gateway and CLI tarballs and wstunnel 11.0.0 remain upstream and are outside this change.
• Drop this backport once NVIDIA ships a release containing NVIDIA/OpenShell#4794 and the driver is ported to provisioning_evidence.