feat(guanghu-os): bridge JD code plane through supervisor

product-source/hololake-platform/guanghu-os/packaging/systemd/guanghu-language-primary.target

@@ -8,6 +8,7 @@ Requires=lake-lamp-authz.service
 Requires=lake-lamp-architecture-provision.service
 Requires=lake-lamp-deployment-event-worker.service
 Requires=guanghu-boot-acceptance.service
+Requires=guanghu-supervisor.service
 After=multi-user.target
 After=guanghu-world-gate.service
 After=bingshuo-tcs-living-controller.service
@@ -16,5 +17,5 @@ After=lake-lamp-authz.service
 After=lake-lamp-architecture-provision.service
 After=lake-lamp-deployment-event-worker.service
 After=guanghu-boot-acceptance.service
+After=guanghu-supervisor.service
 AllowIsolate=yes
-

product-source/hololake-platform/guanghu-os/packaging/systemd/guanghu-supervisor.service

@@ -0,0 +1,18 @@
+[Unit]
+Description=Guanghu OS master control bridge for Linux collaboration services
+Before=hlcc-jd-candidate.service
+After=local-fs.target docker.service
+Wants=docker.service
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/sbin/guanghu-supervisor-control-bridge activate
+RemainAfterExit=yes
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectHome=true
+ProtectSystem=strict
+ReadWritePaths=/run/guanghu/supervisor
+
+[Install]
+WantedBy=guanghu-language-primary.target

product-source/hololake-platform/guanghu-os/packaging/systemd/hlcc-jd-candidate.service.d/10-guanghu-supervisor.conf

@@ -0,0 +1,3 @@
+[Unit]
+Requires=guanghu-supervisor.service
+After=guanghu-supervisor.service