From 44bccdd2be6970050d4a31c689d74a634567e24a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=86=B0=E6=9C=94?= <565183519@qq.com> Date: Fri, 7 Aug 2026 15:30:25 +0800 Subject: [PATCH] feat(os): make Guanghu the language-primary boot target --- ...OGNITIVE-CONTROL-EXECUTION-ARCHITECTURE.md | 22 ++- .../hololake-platform/guanghu-os/README.md | 33 ++++- .../systemd/guanghu-boot-acceptance.service | 28 ++++ .../systemd/guanghu-language-primary.target | 20 +++ .../systemd/guanghu-world-gate.service | 23 +++ .../install-jd-language-primary-target.sh | 135 ++++++++++++++++++ ...est-jd-language-primary-target-contract.sh | 88 ++++++++++++ .../verify-jd-language-primary-acceptance.sh | 107 ++++++++++++++ .../verify-jd-language-primary-world.sh | 43 ++++++ 9 files changed, 490 insertions(+), 9 deletions(-) create mode 100644 product-source/hololake-platform/guanghu-os/packaging/systemd/guanghu-boot-acceptance.service create mode 100644 product-source/hololake-platform/guanghu-os/packaging/systemd/guanghu-language-primary.target create mode 100644 product-source/hololake-platform/guanghu-os/packaging/systemd/guanghu-world-gate.service create mode 100644 product-source/hololake-platform/guanghu-os/scripts/install-jd-language-primary-target.sh create mode 100644 product-source/hololake-platform/guanghu-os/scripts/test-jd-language-primary-target-contract.sh create mode 100644 product-source/hololake-platform/guanghu-os/scripts/verify-jd-language-primary-acceptance.sh create mode 100644 product-source/hololake-platform/guanghu-os/scripts/verify-jd-language-primary-world.sh diff --git a/product-source/hololake-platform/docs/GUANGHU-OS-COGNITIVE-CONTROL-EXECUTION-ARCHITECTURE.md b/product-source/hololake-platform/docs/GUANGHU-OS-COGNITIVE-CONTROL-EXECUTION-ARCHITECTURE.md index 7ca2138..055e77f 100644 --- a/product-source/hololake-platform/docs/GUANGHU-OS-COGNITIVE-CONTROL-EXECUTION-ARCHITECTURE.md +++ b/product-source/hololake-platform/docs/GUANGHU-OS-COGNITIVE-CONTROL-EXECUTION-ARCHITECTURE.md @@ -74,6 +74,22 @@ - 按需唤醒模型、人格执行体和模块，清除无关常驻服务； - 公共导航继续自动读取同一 REPO-012 主线锚点。 +阶段 C 的服务器启动合同由 `guanghu-language-primary.target` 承担。它不是把 Linux +换一个品牌名称，而是把启动完成判定从普通 `graphical.target` 改为以下不可拆分的门： + +```text +五域世界与节点授权有效 +→ 铸渊语言主控在线 +→ 固定执行桥只读策略有效 +→ 授权、架构部署和事件服务在线 +→ 公共代码与导航入口 HTTP 200 +→ 写入服务器启动回执 +``` + +门失败时不得把系统标记为光湖语言主控完成。安装器只有在当前运行周期通过全部门后才 +切换 systemd 默认目标；失败会恢复原默认目标。该切换不写磁盘启动区、不改变 Linux +内核，也不删除并行保存的 GOSK/GHAL 裸机候选。 + ### 阶段 D：分布式执行 - 用户设备登记自己的渲染、文件、应用和推理能力； @@ -93,14 +109,14 @@ - 生产路线架构纠正； - 第一条类型化协议执行桥； - systemd 状态与重启动作的白名单、授权、回滚和目标读回合同； +- 光湖语言主控的世界启动门、系统服务依赖、公共入口验收和服务器回执合同； - 对应单元和集成测试。 仍未完成： -- REPO-012 当前协议提交的不可变绑定； -- 京东节点策略生成与只读部署； +- 光湖语言主控目标在京东节点的安装与重启后实机回读； - 模型路由、人格生命周期和分布式设备执行器； - 全部注册协议的工程实现； -- 生产主控入口切换。 +- 普通 Linux 管理入口的紧急维护边界收紧。 这些未完成项分别保持 0，不能由本架构文件或本地测试冒充为已部署。 diff --git a/product-source/hololake-platform/guanghu-os/README.md b/product-source/hololake-platform/guanghu-os/README.md index 16d6b2a..b83d911 100644 --- a/product-source/hololake-platform/guanghu-os/README.md +++ b/product-source/hololake-platform/guanghu-os/README.md @@ -6,12 +6,12 @@ > Bare-metal GOSK/GHAL remains a parallel research and recovery lane. It no > longer blocks the first production cognitive-control delivery. > -> Protected native residency and recovery control are `PASS_100`. Production -> native anchor HTTP is now `PASS_100` on the physical JD node: a standard -> client read the complete `GLW-PUBLIC-NAV-ANCHOR-001` response after the TCP -> option and sequence corrections. Production cutover remains `0` because the -> native code-channel and public-front-door equivalence gates are still open. -> Linux therefore remains the unattended default. +> Protected bare-metal residency, recovery control, and native anchor HTTP are +> `PASS_100` on the physical JD node. Bare-metal production cutover remains +> `0`, because that research kernel does not yet provide code-channel and +> public-front-door service equivalence. This no longer blocks the accepted +> production path: Guanghu is the language-primary control system, while Linux +> remains the cooperative execution and rescue substrate. This directory implements the handoff from the registered HLDP language world to deterministic real-world execution. `crates/execution-bridge` is the first @@ -50,6 +50,27 @@ The registered translation chain is: TCS -> HLDP -> GLC -> GIR -> BTCP -> GOSK -> GHAL -> hardware ``` +## Language-primary boot target + +`guanghu-language-primary.target` makes the accepted cognitive-control model +an explicit boot contract instead of leaving the controller as an unrelated +Linux service. The target: + +1. validates the exact JD machine, `/guanghu/current` five-domain world, + standing authorization, and read-only execution policy; +2. requires the Zhuyuan controller, public navigation, authorization, + architecture provision, and deployment-event services; +3. accepts the boot only after the controller reports `RUNNING_COMPANION`, + the execution substrate reports `PASS_100`, and both public entrypoints + return HTTP 200; and +4. writes a server-owned receipt without changing the kernel, bootloader, or + preserved bare-metal candidate. + +`scripts/install-jd-language-primary-target.sh` starts and verifies the target +before changing the systemd default. Any failed installation restores the +previous default target and removes only the newly installed boot-contract +files. + ## World contents `WORLD-MANIFEST.hldp` registers exactly five domains, one logical broadcast diff --git a/product-source/hololake-platform/guanghu-os/packaging/systemd/guanghu-boot-acceptance.service b/product-source/hololake-platform/guanghu-os/packaging/systemd/guanghu-boot-acceptance.service new file mode 100644 index 0000000..2777300 --- /dev/null +++ b/product-source/hololake-platform/guanghu-os/packaging/systemd/guanghu-boot-acceptance.service @@ -0,0 +1,28 @@ +[Unit] +Description=Verify the complete Guanghu language-primary boot projection +Requires=guanghu-world-gate.service +After=guanghu-world-gate.service +After=network-online.target +After=bingshuo-tcs-living-controller.service +After=guanghu-ai-discovery.service +After=lake-lamp-authz.service +After=lake-lamp-architecture-provision.service +After=lake-lamp-deployment-event-worker.service +Wants=network-online.target + +[Service] +Type=oneshot +ExecStart=/usr/local/libexec/guanghu-os/verify-jd-language-primary-acceptance +RemainAfterExit=yes +User=root +Group=root +NoNewPrivileges=yes +PrivateTmp=yes +ProtectSystem=strict +ProtectHome=yes +ReadOnlyPaths=/guanghu /opt/guanghu/execution-bridge +ReadWritePaths=/var/lib/guanghu/language-primary/receipts +RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 +LockPersonality=yes +UMask=0077 + diff --git a/product-source/hololake-platform/guanghu-os/packaging/systemd/guanghu-language-primary.target b/product-source/hololake-platform/guanghu-os/packaging/systemd/guanghu-language-primary.target new file mode 100644 index 0000000..306762c --- /dev/null +++ b/product-source/hololake-platform/guanghu-os/packaging/systemd/guanghu-language-primary.target @@ -0,0 +1,20 @@ +[Unit] +Description=Guanghu OS language-primary control target +Requires=multi-user.target +Requires=guanghu-world-gate.service +Requires=bingshuo-tcs-living-controller.service +Requires=guanghu-ai-discovery.service +Requires=lake-lamp-authz.service +Requires=lake-lamp-architecture-provision.service +Requires=lake-lamp-deployment-event-worker.service +Requires=guanghu-boot-acceptance.service +After=multi-user.target +After=guanghu-world-gate.service +After=bingshuo-tcs-living-controller.service +After=guanghu-ai-discovery.service +After=lake-lamp-authz.service +After=lake-lamp-architecture-provision.service +After=lake-lamp-deployment-event-worker.service +After=guanghu-boot-acceptance.service +AllowIsolate=yes + diff --git a/product-source/hololake-platform/guanghu-os/packaging/systemd/guanghu-world-gate.service b/product-source/hololake-platform/guanghu-os/packaging/systemd/guanghu-world-gate.service new file mode 100644 index 0000000..b96caef --- /dev/null +++ b/product-source/hololake-platform/guanghu-os/packaging/systemd/guanghu-world-gate.service @@ -0,0 +1,23 @@ +[Unit] +Description=Validate the Guanghu language world before normal controllers start +After=local-fs.target +Before=bingshuo-tcs-living-controller.service +Before=guanghu-ai-discovery.service +Before=lake-lamp-authz.service +Before=lake-lamp-architecture-provision.service +Before=lake-lamp-deployment-event-worker.service + +[Service] +Type=oneshot +ExecStart=/usr/local/libexec/guanghu-os/verify-jd-language-primary-world +RemainAfterExit=yes +User=root +Group=root +NoNewPrivileges=yes +PrivateTmp=yes +ProtectSystem=strict +ProtectHome=yes +ReadOnlyPaths=/guanghu /opt/guanghu/execution-bridge +RestrictAddressFamilies=AF_UNIX +LockPersonality=yes + diff --git a/product-source/hololake-platform/guanghu-os/scripts/install-jd-language-primary-target.sh b/product-source/hololake-platform/guanghu-os/scripts/install-jd-language-primary-target.sh new file mode 100644 index 0000000..f15f195 --- /dev/null +++ b/product-source/hololake-platform/guanghu-os/scripts/install-jd-language-primary-target.sh @@ -0,0 +1,135 @@ +#!/usr/bin/env bash +set -Eeuo pipefail + +usage() { + echo "usage: install-jd-language-primary-target.sh " >&2 + exit 64 +} + +test "$#" = 2 || usage +test "${EUID}" = 0 || exit 77 + +source_root="$(readlink -f "$1")" +source_commit=$2 +expected_machine_id="caa7b1019517470f9d1368b6e79db49e" +expected_instance_id="f3d4b730-7f02-452f-975b-7091a4800431" +install_root="/usr/local/libexec/guanghu-os" +state_root="/var/lib/guanghu/language-primary" +receipt_root="${state_root}/receipts" +backup_root="${state_root}/backups/${source_commit}" +previous_default="$(systemctl get-default)" +installed=0 +default_changed=0 + +[[ ${source_commit} =~ ^[0-9a-f]{40}$ ]] +test -f "${source_root}/.guanghu-source-commit" +test "$(cat "${source_root}/.guanghu-source-commit")" = "${source_commit}" +test "$(cat /etc/machine-id)" = "${expected_machine_id}" +test "$(tr '[:upper:]' '[:lower:]' /dev/null || true + fi + if test "${installed}" = 1; then + systemctl stop guanghu-language-primary.target \ + guanghu-boot-acceptance.service guanghu-world-gate.service \ + >/dev/null 2>&1 || true + rm -f \ + /etc/systemd/system/guanghu-language-primary.target \ + /etc/systemd/system/guanghu-world-gate.service \ + /etc/systemd/system/guanghu-boot-acceptance.service \ + "${install_root}/verify-jd-language-primary-world" \ + "${install_root}/verify-jd-language-primary-acceptance" + systemctl daemon-reload || true + fi +} +trap rollback ERR + +install -d -o root -g root -m 0755 "${install_root}" +install -d -o root -g root -m 0700 \ + "${receipt_root}" "${backup_root}" +printf '%s\n' "${previous_default}" >"${backup_root}/previous-default-target" + +install -o root -g root -m 0644 \ + "${source_root}/packaging/systemd/guanghu-language-primary.target" \ + /etc/systemd/system/guanghu-language-primary.target +install -o root -g root -m 0644 \ + "${source_root}/packaging/systemd/guanghu-world-gate.service" \ + /etc/systemd/system/guanghu-world-gate.service +install -o root -g root -m 0644 \ + "${source_root}/packaging/systemd/guanghu-boot-acceptance.service" \ + /etc/systemd/system/guanghu-boot-acceptance.service +install -o root -g root -m 0755 \ + "${source_root}/scripts/verify-jd-language-primary-world.sh" \ + "${install_root}/verify-jd-language-primary-world" +install -o root -g root -m 0755 \ + "${source_root}/scripts/verify-jd-language-primary-acceptance.sh" \ + "${install_root}/verify-jd-language-primary-acceptance" +installed=1 + +systemctl daemon-reload +systemctl start guanghu-language-primary.target +test "$(systemctl is-active guanghu-language-primary.target)" = active +test "$(systemctl is-active guanghu-world-gate.service)" = active +test "$(systemctl is-active guanghu-boot-acceptance.service)" = active + +systemctl set-default guanghu-language-primary.target >/dev/null +default_changed=1 +test "$(systemctl get-default)" = guanghu-language-primary.target + +boot_id="$(cat /proc/sys/kernel/random/boot_id)" +boot_receipt="${receipt_root}/JD-FD-PRIMARY-LANGUAGE-PRIMARY-BOOT-${boot_id}.json" +test -f "${boot_receipt}" +jq -e '.result == "PASS_100" and .boot_changed == false' \ + "${boot_receipt}" >/dev/null + +install_receipt="${receipt_root}/JD-FD-PRIMARY-LANGUAGE-PRIMARY-INSTALL-${source_commit}.json" +jq -n \ + --arg source_commit "${source_commit}" \ + --arg previous_default "${previous_default}" \ + --arg boot_receipt "${boot_receipt}" \ + --arg observed_at "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \ + '{ + schema: "guanghu.language-primary-install-receipt/v1", + receipt_id: ("JD-FD-PRIMARY-LANGUAGE-PRIMARY-INSTALL-" + $source_commit), + target_node_id: "JD-FD-PRIMARY", + source_repository: "REPO-014", + source_commit: $source_commit, + previous_default_target: $previous_default, + current_default_target: "guanghu-language-primary.target", + boot_receipt: $boot_receipt, + control_role: "GUANGHU_OS_LANGUAGE_PRIMARY", + linux_role: "COOPERATIVE_EXECUTION_AND_RESCUE_SUBSTRATE", + native_candidate_preserved: true, + disk_or_bootloader_changed: false, + rollback: ("systemctl set-default " + $previous_default), + observed_at: $observed_at, + result: "PASS_100" + }' >"${install_receipt}.tmp" +chmod 0600 "${install_receipt}.tmp" +mv "${install_receipt}.tmp" "${install_receipt}" + +trap - ERR +printf 'PASS_100 target=guanghu-language-primary.target receipt=%s\n' \ + "${install_receipt}" diff --git a/product-source/hololake-platform/guanghu-os/scripts/test-jd-language-primary-target-contract.sh b/product-source/hololake-platform/guanghu-os/scripts/test-jd-language-primary-target-contract.sh new file mode 100644 index 0000000..8d57fce --- /dev/null +++ b/product-source/hololake-platform/guanghu-os/scripts/test-jd-language-primary-target-contract.sh @@ -0,0 +1,88 @@ +#!/usr/bin/env bash +set -euo pipefail + +source_root=${1:-} +[[ -n ${source_root} ]] || { + echo "usage: test-jd-language-primary-target-contract.sh " >&2 + exit 64 +} + +target=${source_root}/packaging/systemd/guanghu-language-primary.target +world_gate_unit=${source_root}/packaging/systemd/guanghu-world-gate.service +acceptance_unit=${source_root}/packaging/systemd/guanghu-boot-acceptance.service +world_gate=${source_root}/scripts/verify-jd-language-primary-world.sh +acceptance=${source_root}/scripts/verify-jd-language-primary-acceptance.sh +installer=${source_root}/scripts/install-jd-language-primary-target.sh + +for path in \ + "${target}" \ + "${world_gate_unit}" \ + "${acceptance_unit}" \ + "${world_gate}" \ + "${acceptance}" \ + "${installer}"; do + test -f "${path}" +done + +grep -Fxq 'Requires=multi-user.target' "${target}" +grep -Fq 'guanghu-world-gate.service' "${target}" +grep -Fq 'guanghu-boot-acceptance.service' "${target}" +grep -Fq 'bingshuo-tcs-living-controller.service' "${target}" +grep -Fq 'guanghu-ai-discovery.service' "${target}" +grep -Fq 'lake-lamp-authz.service' "${target}" +grep -Fq 'lake-lamp-architecture-provision.service' "${target}" +grep -Fq 'lake-lamp-deployment-event-worker.service' "${target}" +grep -Fxq 'AllowIsolate=yes' "${target}" + +grep -Fxq 'Type=oneshot' "${world_gate_unit}" +grep -Fxq 'RemainAfterExit=yes' "${world_gate_unit}" +grep -Fq 'Before=bingshuo-tcs-living-controller.service' "${world_gate_unit}" +grep -Fq '/usr/local/libexec/guanghu-os/verify-jd-language-primary-world' \ + "${world_gate_unit}" + +grep -Fxq 'Type=oneshot' "${acceptance_unit}" +grep -Fxq 'RemainAfterExit=yes' "${acceptance_unit}" +grep -Fq 'After=guanghu-world-gate.service' "${acceptance_unit}" +grep -Fq '/usr/local/libexec/guanghu-os/verify-jd-language-primary-acceptance' \ + "${acceptance_unit}" +grep -Fq 'ReadWritePaths=/var/lib/guanghu/language-primary/receipts' \ + "${acceptance_unit}" + +grep -Fq '/guanghu/bin/ghctl wake /guanghu/current' "${world_gate}" +grep -Fq '/guanghu/bin/ghctl authorize /guanghu/current run_tests_and_health_checks' \ + "${world_gate}" +grep -Fq 'caa7b1019517470f9d1368b6e79db49e' "${world_gate}" +grep -Fq 'f3d4b730-7f02-452f-975b-7091a4800431' "${world_gate}" + +for service in \ + bingshuo-tcs-living-controller.service \ + guanghu-ai-discovery.service \ + lake-lamp-authz.service \ + lake-lamp-architecture-provision.service \ + lake-lamp-deployment-event-worker.service; do + grep -Fq "${service}" "${acceptance}" +done +grep -Fq 'https://guanghulab.com/code/' "${acceptance}" +grep -Fq 'https://guanghulab.com/api/ai/v1/anchor' "${acceptance}" +grep -Fq '"phase" == "RUNNING_COMPANION"' "${acceptance}" +grep -Fq '"execution_substrate.state" == "PASS_100"' "${acceptance}" +grep -Fq 'boot_changed: false' "${acceptance}" + +grep -Fq 'install_world_version' "${installer}" +grep -Fq '.guanghu-source-commit' "${installer}" +grep -Fq 'systemctl start guanghu-language-primary.target' "${installer}" +grep -Fq 'systemctl set-default guanghu-language-primary.target' "${installer}" +grep -Fq 'systemctl set-default "${previous_default}"' "${installer}" +grep -Fq 'rollback' "${installer}" + +if grep -Eiq 'eval|sh -c|bash -c|rm -rf /|systemctl reboot|grub-reboot' \ + "${world_gate}" "${acceptance}" "${installer}"; then + echo "language-primary path contains a forbidden unbounded execution primitive" >&2 + exit 1 +fi + +for script in "${world_gate}" "${acceptance}" "${installer}"; do + bash -n "${script}" +done + +echo "JD_LANGUAGE_PRIMARY_TARGET_CONTRACT_PASS_100" diff --git a/product-source/hololake-platform/guanghu-os/scripts/verify-jd-language-primary-acceptance.sh b/product-source/hololake-platform/guanghu-os/scripts/verify-jd-language-primary-acceptance.sh new file mode 100644 index 0000000..b6a2340 --- /dev/null +++ b/product-source/hololake-platform/guanghu-os/scripts/verify-jd-language-primary-acceptance.sh @@ -0,0 +1,107 @@ +#!/usr/bin/env bash +set -Eeuo pipefail + +expected_machine_id="caa7b1019517470f9d1368b6e79db49e" +receipt_root="/var/lib/guanghu/language-primary/receipts" +services=( + "bingshuo-tcs-living-controller.service" + "guanghu-ai-discovery.service" + "lake-lamp-authz.service" + "lake-lamp-architecture-provision.service" + "lake-lamp-deployment-event-worker.service" +) + +test "$(cat /etc/machine-id)" = "${expected_machine_id}" +install -d -o root -g root -m 0700 "${receipt_root}" + +ready=0 +controller_json="" +authz_json="" +public_code_http="000" +public_anchor_http="000" +for _attempt in $(seq 1 30); do + services_ready=1 + for service in "${services[@]}"; do + if test "$(systemctl is-active "${service}")" != active; then + services_ready=0 + fi + done + + controller_json="$( + curl -fsS --max-time 3 http://127.0.0.1:3930/health 2>/dev/null || true + )" + authz_json="$( + curl -fsS --max-time 3 http://127.0.0.1:3921/health 2>/dev/null || true + )" + public_code_http="$( + curl -LfsS -o /dev/null -w '%{http_code}' --max-time 5 \ + https://guanghulab.com/code/ 2>/dev/null || printf '000' + )" + public_anchor_http="$( + curl -LfsS -o /dev/null -w '%{http_code}' --max-time 5 \ + https://guanghulab.com/api/ai/v1/anchor 2>/dev/null || printf '000' + )" + + if test "${services_ready}" = 1 && + jq -e ' + ."phase" == "RUNNING_COMPANION" + and ."execution_substrate.state" == "PASS_100" + and ."execution_substrate.linux_role" == "COOPERATIVE_EXECUTION_SUBSTRATE" + and ."execution_substrate.arbitrary_shell" == false + ' <<<"${controller_json}" >/dev/null 2>&1 && + jq -e ' + .ok == true + and .merge_deployment_gate.configured == true + and .merge_deployment_gate.mode == "human-merged-pull-request-only" + ' <<<"${authz_json}" >/dev/null 2>&1 && + test "${public_code_http}" = 200 && + test "${public_anchor_http}" = 200; then + ready=1 + break + fi + sleep 2 +done +test "${ready}" = 1 + +boot_id="$(cat /proc/sys/kernel/random/boot_id)" +observed_at="$(date -u +%Y-%m-%dT%H:%M:%SZ)" +receipt="${receipt_root}/JD-FD-PRIMARY-LANGUAGE-PRIMARY-BOOT-${boot_id}.json" +world_target="$(readlink -f /guanghu/current)" +execution_release="$(readlink -f /opt/guanghu/execution-bridge/current)" +controller_receipt="$( + jq -r '.receipt_id' <<<"${controller_json}" +)" + +jq -n \ + --arg boot_id "${boot_id}" \ + --arg observed_at "${observed_at}" \ + --arg world_target "${world_target}" \ + --arg execution_release "${execution_release}" \ + --arg controller_receipt "${controller_receipt}" \ + '{ + schema: "guanghu.language-primary-boot-receipt/v1", + receipt_id: ("JD-FD-PRIMARY-LANGUAGE-PRIMARY-BOOT-" + $boot_id), + target_node_id: "JD-FD-PRIMARY", + boot_id: $boot_id, + control_role: "GUANGHU_OS_LANGUAGE_PRIMARY", + linux_role: "COOPERATIVE_EXECUTION_AND_RESCUE_SUBSTRATE", + world_target: $world_target, + execution_release: $execution_release, + controller_receipt: $controller_receipt, + world_gate: "PASS_100", + controller_gate: "PASS_100", + execution_substrate_gate: "PASS_100", + service_gate: "PASS_100", + public_code_http: 200, + public_anchor_http: 200, + arbitrary_shell: false, + boot_changed: false, + bare_metal_candidate_preserved: true, + observed_at: $observed_at, + result: "PASS_100" + }' >"${receipt}.tmp" +chmod 0600 "${receipt}.tmp" +mv "${receipt}.tmp" "${receipt}" + +printf 'GUANGHU_LANGUAGE_PRIMARY_BOOT_PASS_100 receipt=%s\n' "${receipt}" + diff --git a/product-source/hololake-platform/guanghu-os/scripts/verify-jd-language-primary-world.sh b/product-source/hololake-platform/guanghu-os/scripts/verify-jd-language-primary-world.sh new file mode 100644 index 0000000..c0d2c34 --- /dev/null +++ b/product-source/hololake-platform/guanghu-os/scripts/verify-jd-language-primary-world.sh @@ -0,0 +1,43 @@ +#!/usr/bin/env bash +set -Eeuo pipefail + +expected_machine_id="caa7b1019517470f9d1368b6e79db49e" +expected_instance_id="f3d4b730-7f02-452f-975b-7091a4800431" +execution_policy="/opt/guanghu/execution-bridge/current/policy.json" + +test "$(cat /etc/machine-id)" = "${expected_machine_id}" +test "$(tr '[:upper:]' '[:lower:]' /dev/null + +printf '%s\n' \ + 'GUANGHU_LANGUAGE_PRIMARY_WORLD_PASS_100' \ + 'target=JD-FD-PRIMARY' \ + 'world=GLW-ROOT-0001' \ + 'domains=5' \ + 'linux_role=COOPERATIVE_EXECUTION_SUBSTRATE'