feat(os): make Guanghu the language-primary boot target

This commit is contained in:
冰朔 2026-08-07 15:30:25 +08:00
commit 44bccdd2be
9 changed files with 490 additions and 9 deletions

View file

@ -0,0 +1,28 @@
[Unit]
Description=Verify the complete Guanghu language-primary boot projection
Requires=guanghu-world-gate.service
After=guanghu-world-gate.service
After=network-online.target
After=bingshuo-tcs-living-controller.service
After=guanghu-ai-discovery.service
After=lake-lamp-authz.service
After=lake-lamp-architecture-provision.service
After=lake-lamp-deployment-event-worker.service
Wants=network-online.target
[Service]
Type=oneshot
ExecStart=/usr/local/libexec/guanghu-os/verify-jd-language-primary-acceptance
RemainAfterExit=yes
User=root
Group=root
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
ReadOnlyPaths=/guanghu /opt/guanghu/execution-bridge
ReadWritePaths=/var/lib/guanghu/language-primary/receipts
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
LockPersonality=yes
UMask=0077

View file

@ -0,0 +1,20 @@
[Unit]
Description=Guanghu OS language-primary control target
Requires=multi-user.target
Requires=guanghu-world-gate.service
Requires=bingshuo-tcs-living-controller.service
Requires=guanghu-ai-discovery.service
Requires=lake-lamp-authz.service
Requires=lake-lamp-architecture-provision.service
Requires=lake-lamp-deployment-event-worker.service
Requires=guanghu-boot-acceptance.service
After=multi-user.target
After=guanghu-world-gate.service
After=bingshuo-tcs-living-controller.service
After=guanghu-ai-discovery.service
After=lake-lamp-authz.service
After=lake-lamp-architecture-provision.service
After=lake-lamp-deployment-event-worker.service
After=guanghu-boot-acceptance.service
AllowIsolate=yes

View file

@ -0,0 +1,23 @@
[Unit]
Description=Validate the Guanghu language world before normal controllers start
After=local-fs.target
Before=bingshuo-tcs-living-controller.service
Before=guanghu-ai-discovery.service
Before=lake-lamp-authz.service
Before=lake-lamp-architecture-provision.service
Before=lake-lamp-deployment-event-worker.service
[Service]
Type=oneshot
ExecStart=/usr/local/libexec/guanghu-os/verify-jd-language-primary-world
RemainAfterExit=yes
User=root
Group=root
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
ReadOnlyPaths=/guanghu /opt/guanghu/execution-bridge
RestrictAddressFamilies=AF_UNIX
LockPersonality=yes