From bc41cf02d92a6d1508fede22ad004420b5417f97 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=86=B0=E6=9C=94?= <565183519@qq.com> Date: Fri, 7 Aug 2026 01:27:22 +0800 Subject: [PATCH] docs(native): record JD anchor network preflight failure --- ...1-jd-native-service-equivalence-staging.md | 7 ++++ ...OR-NETWORK-PREFLIGHT-RECEIPT-20260807.hdlp | 37 +++++++++++++++++++ 2 files changed, 44 insertions(+) create mode 100644 product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/NATIVE-ANCHOR-NETWORK-PREFLIGHT-RECEIPT-20260807.hdlp diff --git a/product-source/hololake-platform/docs/adr/0171-jd-native-service-equivalence-staging.md b/product-source/hololake-platform/docs/adr/0171-jd-native-service-equivalence-staging.md index 1afb899..6abc14e 100644 --- a/product-source/hololake-platform/docs/adr/0171-jd-native-service-equivalence-staging.md +++ b/product-source/hololake-platform/docs/adr/0171-jd-native-service-equivalence-staging.md @@ -51,6 +51,13 @@ JD-FD-PRIMARY 在原生光湖 OS 常驻时已经证明： 当前正文包含稳定的唯一入口映射。它尚未在原生常驻期间自动拉取 REPO-012 的新版本， 因此“公共导航自动更新”仍需后续的原生锚点快照同步或带认证的增量更新协议。 +2026-08-07 的重启前网络门禁证明：京东 Linux 临时在 `172.16.0.6:3922` 监听时， +BS-SG-003 到 `111.228.0.139:3922` 连接超时；临时监听随后停止。因此当前云网络入口为 +`0`，没有执行一场已知无法形成外部回读的物理重启。下一步只能二选一： + +- 在京东云为 `3922/TCP` 建立来源受限的精确入站规则，再做一次性原生门禁； +- 或让原生系统沿现有受保护出站通道投影锚点，避免开放新的入站端口。 + ## 安全决定 - 京东的无人值守默认启动继续保持 Linux 维护位； diff --git a/product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/NATIVE-ANCHOR-NETWORK-PREFLIGHT-RECEIPT-20260807.hdlp b/product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/NATIVE-ANCHOR-NETWORK-PREFLIGHT-RECEIPT-20260807.hdlp new file mode 100644 index 0000000..e1be6a7 --- /dev/null +++ b/product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/NATIVE-ANCHOR-NETWORK-PREFLIGHT-RECEIPT-20260807.hdlp @@ -0,0 +1,37 @@ +schema: guanghu.jd-native-anchor-network-preflight-receipt/v1 +receipt_id: GH-OS-JD-FD-PRIMARY-NATIVE-ANCHOR-NETWORK-PREFLIGHT-20260807-001 +status: FAIL_0_EXTERNAL_REACHABILITY +observed_at: 2026-08-07T01:22:00+08:00 +node_id: JD-FD-PRIMARY +accepted_repository_commit: ab6c0577a71b8713b64cf3bd1e02a7076dfd648c +candidate: + lba_start: 105 + sector_count: 29 + previous_sha256: 3512a76923f992adb0b339858a2a7e44ee144fcecb50284df4b743a44040469d + staged_sha256: 2911b5f6a067efb7b5b7ec330833cb9f8a6b965b5a05802770dd27032678f32f + replacement_receipt: /guanghu/recovery/JD-FD-PRIMARY-anchor-ab6c0577a71b8713b64cf3bd1e02a7076dfd648c/REPLACE-RECEIPT.hldp +boot_safety: + current_running_os: LINUX_HOSTED_MAINTENANCE + unattended_default: gnulinux-simple-9e4550a0-452b-4f28-b5a5-d5364aa450f6 + native_candidate_armed: false + code_entry_http: 200 + public_anchor_http: 200 +network_preflight: + listener_address: 172.16.0.6 + listener_port: 3922 + source_node: BS-SG-003 + source_scope: CURRENT_PROTECTED_NATIVE_RELAY + result: CONNECT_TIMEOUT + temporary_listener_stopped: true +gates: + native_anchor_http_qemu_capability: 100 + native_anchor_candidate_staged: 100 + native_anchor_external_network_reachability: 0 + native_anchor_http_physical_capability: 0 + public_front_door_native_anchor_equivalence: 0 + code_channel_service_equivalence: 0 + production_native_cutover: 0 +decision: + physical_reboot_executed: false + reason: EXTERNAL_PATH_KNOWN_TO_FAIL_BEFORE_REBOOT + next_action: AUTHORIZE_JD_CLOUD_SOURCE_RESTRICTED_3922_RULE_OR_BUILD_OUTBOUND_ANCHOR_PROJECTION