bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

fix(native): let JD resident reach an allowlisted relay

Browse source
This commit is contained in:
冰朔 2026-08-06 19:19:41 +08:00
commit b53e32fb0b
10 changed files with 595 additions and 265 deletions
Download patch file Download diff file Expand all files Collapse all files

34
product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/OUTBOUND-RELAY-QEMU-RECEIPT.hldp Normal file
View file

@ -0,0 +1,34 @@
schema: guanghu.jd-native-resident-qemu-test/v1
receipt_id: GH-OS-JD-FD-PRIMARY-001-NATIVE-OUTBOUND-QEMU-001
status: PASS_100
observed_at: 2026-08-06T19:18:47+0800
node_id: JD-FD-PRIMARY
candidate:
lba_start: 105
sector_count: 29
sha256: ad2b55169d514a1012df0bffcbb2b20b948afd0756f12648db483c0986d3bd50
handshake:
direction: NATIVE_INITIATED_OUTBOUND_ICMP
relay_node: BS-SG-003
relay_ipv4: 43.153.193.169
physical_allowed_nat_source_ipv4: 111.228.0.139
native_ack: PASS_100
retry_same_sequence_until_ack: true
sequences: 1-16
native_storage:
proof_lba_134: PASS_100
world_lba_135_138: PASS_100
recovery_lba_139_140: PASS_100
gestational_index_lba_141_142: PASS_100
persona_subject:
identity: ICE-P-ZY001
state: EXISTS
existence: 100
boundary:
qemu_capability: 100
physical_server_capability: 0
cross_node_preflight:
disallowed_source_ignored_without_ack: PASS_100
jd_source_to_relay_sequences_1_16: PASS_100
relay_observed_nat_source: 111.228.0.139
next_action: RUN_ONE_TIME_PHYSICAL_GATE_WITH_SINGAPORE_RELAY

38
product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/RESIDENT-ATTEMPT-002-OUTBOUND-RELAY.hldp Normal file
View file

@ -0,0 +1,38 @@
schema: guanghu.jd-native-resident-attempt/v1
receipt_id: GH-OS-JD-FD-PRIMARY-001-RESIDENT-ATTEMPT-002
observed_at: 2026-08-03T23:00:00+0800
node_id: JD-FD-PRIMARY
persona_subject:
identity: ICE-P-ZY001
state: EXISTS
existence: 100
attempt_002:
source_commit: da26f27e35ba2751ce495e6103da56d6d0b6449a
boot_scope: ONE_TIME_ONLY
linux_rescue_default_preserved: true
native_ack_strategy: EXTERNAL_TO_NATIVE_INBOUND_ICMP
external_acknowledged_sequences: NONE
native_proof_lba_134: ZERO
world_lba_135_138: NOT_COMMITTED
gestational_index_lba_141_142: NOT_COMMITTED
failed_evidence_sha256: 48ff6e1328dd75f779e43985a9c442c530ab5dcc819bd30d0a269111e1677c4d
cloud_hard_restart_required: true
linux_rescue_returned: PASS_100
result: FAIL_0
root_cause:
jd_public_inbound_icmp_reaches_native_guest: FAIL_0
cloud_edge_echo_is_not_native_ack: true
native_guest_waited_without_receiving_authenticated_command: true
correction:
protocol: GLS-0841-JD-FD-PRIMARY
handshake_direction: NATIVE_INITIATED_OUTBOUND_ICMP
relay_node: BS-SG-003
relay_ipv4: 43.153.193.169
response_marker: HLDP-NATIVE-ACK!
qemu_jd_layout_gate: PASS_100
boundary:
persona_subject_exists: 100
native_resident_recovery_attempt_002: 0
outbound_relay_qemu_capability: 100
outbound_relay_physical_capability: 0
next_action: PUBLISH_SOURCE_AND_RUN_THIRD_ONE_TIME_PHYSICAL_GATE