From ac013637c6e66a4121c8cd266755ceb599438e6a Mon Sep 17 00:00:00 2001
From: Sonic Shih <sonic.shih@mandonothing.com>
Date: Fri, 24 Jul 2026 08:24:05 +0800
Subject: [PATCH] fix(deploy): allow shadow gate OSS readback

---
 deployment/aliyun/host-rust-lob-shadow-gate.sh   | 2 +-
 deployment/aliyun/test-rust-lob-control-plane.sh | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/deployment/aliyun/host-rust-lob-shadow-gate.sh b/deployment/aliyun/host-rust-lob-shadow-gate.sh
index 8c58ac790..193643313 100755
--- a/deployment/aliyun/host-rust-lob-shadow-gate.sh
+++ b/deployment/aliyun/host-rust-lob-shadow-gate.sh
@@ -732,7 +732,7 @@ verify_oss_round_trips() {
     fi
     previous_end_ns=$end_ns
     segment_dir="$tmp_dir/${market}-segment-${index}"
-    mkdir -m 0750 "$segment_dir"
+    install -d -m 0750 -o "$SERVICE_USER" -g "$SERVICE_USER" "$segment_dir"
     zst_uri="${uri%/*}/$file"
     zst_path="$segment_dir/$file"
     manifest_path="$segment_dir/${file}.manifest.json"
diff --git a/deployment/aliyun/test-rust-lob-control-plane.sh b/deployment/aliyun/test-rust-lob-control-plane.sh
index 15a667858..37c9bbe54 100755
--- a/deployment/aliyun/test-rust-lob-control-plane.sh
+++ b/deployment/aliyun/test-rust-lob-control-plane.sh
@@ -35,6 +35,7 @@ if grep -Fq -- '--argjson lob_continuity' "$GATE"; then
   exit 1
 fi
 grep -Fq 'manifest changed between discovery and readback' "$GATE"
+grep -Fq 'install -d -m 0750 -o "$SERVICE_USER" -g "$SERVICE_USER" "$segment_dir"' "$GATE"
 grep -Fq 'manifest_sha256:$manifest_sha256' "$GATE"
 grep -Fq 'readonly MAX_HEALTH_SILENCE_SECONDS=120' "$GATE"
 grep -Fq 'and .all_symbols_bridged == true' "$GATE"