From c5668d33bc75f7f00f1683ad10503f6467df9481 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=86=B0=E6=9C=94?= <565183519@qq.com>
Date: Sun, 16 Aug 2026 02:27:05 +0800
Subject: [PATCH] fix(pncc): provision resident runtime ownership

---
 .../hololake-platform/guanghu-os/scripts/guanghu-master-init.sh  | 1 +
 .../guanghu-os/scripts/test-guanghu-master-init.sh               | 1 +
 2 files changed, 2 insertions(+)

diff --git a/product-source/hololake-platform/guanghu-os/scripts/guanghu-master-init.sh b/product-source/hololake-platform/guanghu-os/scripts/guanghu-master-init.sh
index a0cb2546a..d58539bb4 100644
--- a/product-source/hololake-platform/guanghu-os/scripts/guanghu-master-init.sh
+++ b/product-source/hololake-platform/guanghu-os/scripts/guanghu-master-init.sh
@@ -104,6 +104,7 @@ verify_identity() {
 prepare_runtime() {
   mount -o remount,rw /
   mkdir -p "$STATE_ROOT" "$RECEIPT_ROOT" /run/sshd /run/systemd/resolve
+  install -d -o guanghu -g guanghu -m 0700 "$PNCC_STATE_ROOT"
   chmod 0700 "$STATE_ROOT" "$RECEIPT_ROOT"
   chmod 1777 /tmp
   mountpoint -q /proc || mount -t proc proc /proc
diff --git a/product-source/hololake-platform/guanghu-os/scripts/test-guanghu-master-init.sh b/product-source/hololake-platform/guanghu-os/scripts/test-guanghu-master-init.sh
index fc53cd9b2..5264eec6c 100644
--- a/product-source/hololake-platform/guanghu-os/scripts/test-guanghu-master-init.sh
+++ b/product-source/hololake-platform/guanghu-os/scripts/test-guanghu-master-init.sh
@@ -20,6 +20,7 @@ grep -Fq 'start_guanghu repository-bridge' "$subject"
 grep -Fq 'start_guanghu app-hub' "$subject"
 grep -Fq 'start_guanghu navigation-bridge' "$subject"
 grep -Fq 'start_guanghu pncc-runtime' "$subject"
+grep -Fq 'install -d -o guanghu -g guanghu -m 0700 "$PNCC_STATE_ROOT"' "$subject"
 grep -Fq '[[ ",$expected," == *",$code,"* ]]' "$subject"
 grep -Fq 'wait_http code-projection http://127.0.0.1:8088/code/ 200,303' "$subject"
 grep -Fq 'wait_http navigation-bridge http://127.0.0.1:3922/v1/anchor 200' "$subject"