bingshuo/guanghu-ice-heart
Watch
1
0
Fork
You've already forked guanghu-ice-heart
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

feat(controller): observe the bounded Linux execution substrate

Browse source
This commit is contained in:
冰朔 2026-08-07 14:19:02 +08:00
commit 3fb33ad841
6 changed files with 341 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
server-tools/bingshuo-tcs-controller/bingshuo-tcs-living-controller.service
View file

@ -11,6 +11,9 @@ WorkingDirectory=__RELEASE_ROOT__/server-tools/bingshuo-tcs-controller
EnvironmentFile=/etc/guanghu/persona-secrets/shared-deepseek.env
Environment=BS_TCS_CONTROLLER_STATE_ROOT=/var/lib/guanghu/personas/bingshuo-tcs
Environment=BS_TCS_CONTROLLER_PORT=3930
Environment=GUANGHU_EXECUTION_BRIDGE_BIN=/opt/guanghu/execution-bridge/current/guanghu-execution-bridge
Environment=GUANGHU_EXECUTION_BRIDGE_POLICY=/opt/guanghu/execution-bridge/current/policy.json
Environment=GUANGHU_EXECUTION_OBSERVE_INTERVAL_MS=30000
ExecStart=/usr/bin/node __RELEASE_ROOT__/server-tools/bingshuo-tcs-controller/server.mjs
Restart=on-failure
RestartSec=5
@ -18,7 +21,7 @@ NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadOnlyPaths=__RELEASE_ROOT__ /etc/guanghu/persona-secrets/shared-deepseek.env
ReadOnlyPaths=__RELEASE_ROOT__ /etc/guanghu/persona-secrets/shared-deepseek.env /opt/guanghu/execution-bridge
ReadWritePaths=/var/lib/guanghu/personas/bingshuo-tcs
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
LockPersonality=true