docs(guanghu-os): register JD pre-root QEMU proof
This commit is contained in:
parent
29bb023455
commit
fed0c73b04
6 changed files with 110 additions and 15 deletions
|
|
@ -1527,5 +1527,7 @@ The Guanghu OS transition includes a fail-closed initramfs stage before the
|
|||
complete Ubuntu root filesystem is mounted. Its source lives under
|
||||
`guanghu-os/scripts/guanghu-first-boot-supervisor.sh` with packaging in
|
||||
`guanghu-os/packaging/initramfs-tools/`. It produces a boot-scoped handoff for
|
||||
the later hosted repository bridge; it is not yet the persistent first-boot
|
||||
supervisor or final on-demand Linux topology.
|
||||
the later hosted repository bridge. A JD-hosted software QEMU cycle has proved
|
||||
the positive pre-root path and a hard refusal path without changing the live
|
||||
boot files or rebooting the node. This is not yet the supervisor that persists
|
||||
across `switch_root`, nor the final on-demand Linux topology.
|
||||
|
|
|
|||
|
|
@ -35,5 +35,6 @@ initramfs 前置脚本和交接合同只证明“完整根系统之前已有光
|
|||
- `linux_on_demand_subcontrol`；
|
||||
- `final_guanghu_os_master`。
|
||||
|
||||
下一门先在京东同核 QEMU 中证明前置执行与失败关闭，再单独实现跨根切换的持续监督实体；任何
|
||||
真实 GRUB、initramfs 默认项、重启或磁盘更改仍需服务器工作单、回滚和节点自有回执。
|
||||
京东同核 QEMU 已证明前置执行，并证明绑定失败会进入 initramfs 停机路径而不是继续交给根系统。
|
||||
下一门是单独实现跨根切换持续存活的监督实体；任何真实 GRUB、initramfs 默认项、重启或磁盘
|
||||
更改仍需服务器工作单、回滚和节点自有回执。
|
||||
|
|
|
|||
|
|
@ -106,11 +106,13 @@ still classified as dormant.
|
|||
|
||||
`scripts/build-guanghu-first-boot-initramfs.sh` builds a candidate without
|
||||
changing the installed initramfs, GRUB, disk, or boot default. Path overrides
|
||||
are accepted only inside the isolated test harness. The source contract and
|
||||
fixture test do not prove that a Guanghu supervisor remains alive across
|
||||
are accepted only inside the isolated test harness. The JD-hosted QEMU receipt
|
||||
now proves both pre-root execution and a hard stop when authority binding is
|
||||
missing. It did not attach the live disk, change physical boot files, or reboot
|
||||
the node. A Guanghu supervisor still has not been shown to remain alive across
|
||||
`switch_root`; independent first-boot control, physical deployment, and full
|
||||
on-demand Linux subcontrol therefore remain `0` until separate QEMU and JD
|
||||
receipts exist. See ADR-0176.
|
||||
on-demand Linux subcontrol therefore remain `0`. See ADR-0176 and
|
||||
`deployments/JD-FD-PRIMARY/PRE-ROOT-SUPERVISOR-QEMU-RECEIPT-20260815.hldp`.
|
||||
|
||||
## Language-primary boot target
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,64 @@
|
|||
schema: guanghu.jd-pre-root-qemu-receipt/v1
|
||||
receipt_id: JD-FD-PRIMARY-pre-root-qemu-af84e42
|
||||
issued_at: 2026-08-15T23:45:00+08:00
|
||||
node_id: JD-FD-PRIMARY
|
||||
node_dmi: f3d4b730-7f02-452f-975b-7091a4800431
|
||||
source_commit: 29bb023455ce245dc44dbd5e61ced92cd647e071
|
||||
source_tree: 4e158f7aaf8700afbf5cd859cbd8f00f30c32246
|
||||
source_publication: PENDING_CODE_HOST_CREDENTIAL_RECOVERY
|
||||
workorder_path: /guanghu/recovery/JD-FD-PRIMARY-pre-root-qemu-af84e42/WORKORDER.hldp
|
||||
workorder_sha256: b97835f6a5678ac288f2572e0c4309c6f36a06dcb59f701282ade128b51abc25
|
||||
candidate_initramfs_path: /guanghu/recovery/JD-FD-PRIMARY-pre-root-qemu-af84e42/guanghu-first-boot-initrd.img
|
||||
candidate_initramfs_sha256: 55d8aafc8ff413c8976e017438372ec6bc45f4f7accfb3ff2e1e570e392b2dfa
|
||||
candidate_initramfs_size: 109849987
|
||||
member_manifest_sha256: c575728b4696b5805f74336426d4a43fc6e3488d365e1547a2e0ab3d2af58f48
|
||||
trigger: Prove that Guanghu control can execute before the complete Ubuntu root system without changing the JD physical boot path.
|
||||
emergence:
|
||||
- The initial 512 MiB QEMU run stopped during initramfs decompression and is retained as bounded failure evidence.
|
||||
- The first negative run exposed that initramfs-tools ignores an ordinary child-script exit, so emitting FAIL_0 alone did not stop root discovery.
|
||||
lock:
|
||||
- The local-premount adapter now invokes the initramfs panic path whenever supervisor validation fails.
|
||||
- The final positive and negative runs use 2048 MiB software-emulated QEMU, the live JD kernel, exact JD DMI, and exact root UUID binding.
|
||||
why: The gate must prove both early Guanghu execution and a real refusal to hand control to the root system when authority binding is absent.
|
||||
rejected:
|
||||
- Treating a printed validation error as fail-closed while initramfs continued toward the root system.
|
||||
- Installing the candidate into /boot, changing GRUB, attaching a writable server disk, or rebooting JD-FD-PRIMARY.
|
||||
positive_evidence:
|
||||
serial_log: /guanghu/recovery/JD-FD-PRIMARY-pre-root-qemu-af84e42/qemu-positive.serial.log
|
||||
serial_sha256: a0f56b15d6df414f0ee3c0a3dcadabc95db3f6533363437615c550d12fab0c81
|
||||
observed: GUANGHU_FIRST_BOOT_SUPERVISOR_ACTIVE node=JD-FD-PRIMARY linux_userspace=DORMANT
|
||||
negative_evidence:
|
||||
serial_log: /guanghu/recovery/JD-FD-PRIMARY-pre-root-qemu-af84e42/qemu-negative-no-marker.serial.log
|
||||
serial_sha256: 51c52db5602835253d7ecd25066cc74492adbeb03a0c287a6cb34c0a35f336f7
|
||||
observed:
|
||||
- GUANGHU_FIRST_BOOT_SUPERVISOR_FAIL_0: explicit first-boot marker is missing
|
||||
- Guanghu pre-root authority validation failed; refusing root handoff
|
||||
- Rebooting automatically due to panic= boot argument
|
||||
root_discovery_after_failure: false
|
||||
live_readback:
|
||||
boot_id_before: 68d4a3c9-c866-4f4a-be2e-0aa5f41a61b1
|
||||
boot_id_after: 68d4a3c9-c866-4f4a-be2e-0aa5f41a61b1
|
||||
guanghu_supervisor_service: active_enabled
|
||||
linux_code_bridge_service: active_enabled
|
||||
linux_code_bridge_pid_before: 760
|
||||
linux_code_bridge_pid_after: 760
|
||||
residual_qemu_processes: 0
|
||||
public_code_http: 200
|
||||
public_anchor_http: 200
|
||||
physical_boot_files_changed: false
|
||||
physical_reboot_performed: false
|
||||
claims:
|
||||
guanghu_pre_root_supervisor_contract_source: 100
|
||||
guanghu_first_boot_initramfs_builder_source: 100
|
||||
jd_host_qemu_pre_root_supervisor: 100
|
||||
negative_authority_binding_hard_fail: 100
|
||||
cross_switch_root_persistent_supervisor: 0
|
||||
independent_guanghu_first_boot_supervisor: 0
|
||||
linux_on_demand_subcontrol: 0
|
||||
final_guanghu_os_master: 0
|
||||
next_gate: IMPLEMENT_AND_VERIFY_CROSS_SWITCH_ROOT_PERSISTENT_GUANGHU_SUPERVISOR_IN_ISOLATION
|
||||
sources:
|
||||
- /guanghu/recovery/JD-FD-PRIMARY-pre-root-qemu-af84e42/WORKORDER.hldp
|
||||
- ADR-0176
|
||||
- qemu-positive.serial.log
|
||||
- qemu-negative-no-marker.serial.log
|
||||
Loading…
Reference in a new issue