···2828}
29293030func newAgentHub(port uint32, l *slog.Logger) (*agentHub, error) {
3131- ln, err := vsock.Listen(port, nil)
3131+ // bind the host context explicitly. if the local CID resolves to the
3232+ // loopback CID (which happens on some systems when vsock_loopback is active),
3333+ // Listen() would bind loopback and never see guest VMs
3434+ ln, err := vsock.ListenContextID(vsock.Host, port, nil)
3235 if err != nil {
3336 return nil, fmt.Errorf("listen for agent on vsock port %d: %w", port, err)
3437 }