installable() asks whether the gateway host can run the package manager at all (root, or sudo present) so a hosted instance gets 'needs a newer image' instead of a sudo line it cannot run. The probe is on the control host and never installs or starts anything.