bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

fix: allow verified JD Ubuntu proxy digest

Browse source
This commit is contained in:
冰朔 2026-08-15 17:53:33 +08:00
commit e832dc6ad7
3 changed files with 18 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
product-source/hololake-platform/guanghu-os/README.md
View file

@ -80,7 +80,10 @@ physical cutover is implied by that source result.
`scripts/linux-subcontrol-docker-backend.sh` is the first executable shadow
backend for the Linux-hosted transition. It binds the exact JD instance,
backend id, immutable Ubuntu image digest, and preserved GRUB rescue slot. A
backend id, immutable Ubuntu image digest, and preserved GRUB rescue slot. It
accepts only the direct Ubuntu repository or the explicitly approved
`docker.m.daocloud.io/library/ubuntu` proxy needed by the JD route; arbitrary
registry paths fail closed. A
wake starts a networkless, read-only, capability-free container with explicit
CPU, memory, and PID limits. Only the registered runtime-identity readback is
accepted; reclaim removes the container and verifies `DORMANT`. Environment