lsof -i:8080 command on onboarding needs sudo prefix to work properly

[markito]

Description

When onboarding, there is a prompt to identify process running on port 8080 that requires sudo to work properly. I'd recommend updating instructions to include sudo.

Example below:

  NemoClaw Onboarding
  ===================

  [1/7] Preflight checks
  ──────────────────────────────────────────────────
  ✓ Docker is running
  ✓ Container runtime: docker
  ✓ openshell CLI: openshell 0.0.14

  !! Port 8080 is not available.
     OpenShell gateway needs this port.

     Could not identify the process using port 8080.
     Run: lsof -i :8080 -sTCP:LISTEN

     Detail: port 8080 is in use (EADDRINUSE)

Example of results with and without sudo (as well as using netstat)

(base) markito@xenomorph:~$ lsof -i :8080 -sTCP:LISTEN
(base) markito@xenomorph:~$ netstat -na|grep -i 8080
tcp        0      0 0.0.0.0:8080            0.0.0.0:*               LISTEN
(base) markito@xenomorph:~$ sudo lsof -i :8080 -sTCP:LISTEN
[sudo] password for markito:
COMMAND      PID USER   FD   TYPE  DEVICE SIZE/OFF NODE NAME
docker-pr 190242 root    8u  IPv4 7730081      0t0  TCP *:http-alt (LISTEN)
(base) markito@xenomorph:~$

### Reproduction Steps

1. Run nemoclaw onboard on a machine with port 8080 already used.
2. Run lsof -i :8080 -sTCP:LISTEN and see it doesn't return which process
3. Repeat the process using sudo and it works properly.

### Environment

OS: ubuntu 22 (6.8.0-101-generic #101~22.04.1-Ubuntu)
NodeJS version: v22.22.1
Docker version: 29.3.0, build 5927d80 
NemoClaw: v0.1.0

### Debug Output

```shell

Logs

Checklist

• I confirmed this bug is reproducible
• I searched existing issues and this is not a duplicate

[wscurran]

✨ Thanks for submitting this issue with a detailed summary, it addresses a bug with the lsof command requiring a sudo prefix, which could be related to the onboarding process or permissions configuration.

---

Possibly related open PRs:

• #745 fix(onboard): use sudo lsof fallback to identify root-owned port blockers (fixes #726)
• #869 fix(security): stop piping curl output directly to sudo bash
• #857 docs: restructure spark-install.md for clearer onboarding flow

[latenighthackathon]

Submitted a fix in PR #1073 — adds sudo prefix to both lsof suggestions in the port-conflict error path so the command works for non-root users on Linux.