Struct Sandbox 

pub struct Sandbox { /* private fields */ }

A sandboxed execution environment

Implementations

impl Sandbox

pub fn new(config: SandboxConfig) -> Self

Create a new sandbox with the given configuration

pub fn new_default() -> Self

Create a sandbox with default configuration

impl Sandbox

pub async fn init(&mut self) -> Result<(), SandboxError>

Initialize the sandbox — create the workdir if configured

pub fn is_initialized(&self) -> bool

Check if the sandbox is initialized

pub fn workdir(&self) -> &Path

Get the sandbox workdir path

pub fn config(&self) -> &SandboxConfig

Get the sandbox configuration

pub fn resolve_path(&self, path: &str) -> Result<PathBuf, SandboxError>

Resolve a path within the sandbox

Returns an error if the resolved path is outside the sandbox workdir.

pub fn check_read_path(&self, path: &str) -> Result<PathBuf, SandboxError>

Check if a path is allowed for reading

pub fn check_write_path(&self, path: &str) -> Result<PathBuf, SandboxError>

Check if a path is allowed for writing

pub fn check_network(&self) -> Result<(), SandboxError>

Check if network access is allowed

pub fn filtered_env(&self) -> Vec<(String, String)>

Get a filtered environment for sandboxed processes

pub async fn cleanup(&mut self) -> Result<(), SandboxError>

Clean up the sandbox workdir

pub async fn create_temp_file( &self, prefix: &str, suffix: &str, ) -> Result<PathBuf, SandboxError>

Create a temporary file within the sandbox

Trait Implementations

impl Default for Sandbox

fn default() -> Self

Returns the “default value” for a type.

impl Drop for Sandbox

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.