List of all items

Structs

• Entrypoint
• FsMount
• HealthCheck
• InstanceSpec
• NetworkInstanceConfig
• StoredImage
• TeeInstanceConfig
• VmMetrics
• audit::AuditLog
• audit::AuditQuery
• box_record::BoxRecord
• box_record::HealthCheck
• box_record::ManagedExecutionMetadata
• box_record::ManagedRestartCompletion
• box_state::BoxStateStore
• cache::layer_cache::LayerCache
• cache::layer_cache::LayerMeta
• cache::rootfs_cache::RootfsCache
• cache::rootfs_cache::RootfsMeta
• compose::ComposeProject
• compose::HealthCheckSpec
• fs::FsManager
• fs::MountPoint
• grpc::AttestationClient
• grpc::ExecClient
• grpc::PtyClient
• grpc::RaTlsAttestationClient
• grpc::SealClient
• grpc::SealResult
• grpc::SecretEntry
• grpc::SecretInjectionResult
• grpc::SecretInjector
• grpc::StreamingExec
• grpc::StreamingExecInput
• grpc::StreamingPty
• grpc::StreamingPtyInput
• grpc::UnsealResult
• host_check::VirtualizationSupport
• local_execution::LocalExecutionHandle
• local_execution::LocalExecutionManager
• local_execution::LocalExecutionObservation
• local_execution::VmLocalExecutionBackend
• managed_execution_store::ManagedExecutionStore
• network::NetworkStore
• network::PasstManager
• oci::ImagePuller
• oci::OciHealthCheck
• oci::OciImage
• oci::OciImageConfig
• oci::OciRootfsBuilder
• oci::build::dockerfile::Dockerfile
• oci::build::dockerfile::RunBindMount
• oci::build::dockerfile::RunCacheMount
• oci::build::dockerfile::RunTmpfsMount
• oci::build::engine::BuildConfig
• oci::build::engine::BuildResult
• oci::build::engine::BuildRunPoolConfig
• oci::build::engine::OciHealthCheck
• oci::build::layer::DirSnapshot
• oci::build::layer::FileEntry
• oci::build::layer::LayerInfo
• oci::credentials::CredentialStore
• oci::reference::ImageReference
• oci::registry::PushResult
• oci::registry::RegistryAuth
• oci::registry::RegistryPusher
• oci::signing::SignResult
• oci::store::ImageStore
• operator::AutoscalerController
• operator::ObservedMetrics
• operator::ReconcileResult
• pool::client::PoolClientLease
• pool::client::PoolClientOutput
• pool::client::PoolClientRun
• pool::client::PoolImageStat
• pool::client::PoolLeaseClient
• pool::client::PoolLeaseExec
• pool::client::PoolLeaseExecRequest
• pool::client::PoolLeaseReleaseRequest
• pool::client::PoolLeaseReleaseResponse
• pool::client::PoolLeaseRequest
• pool::client::PoolLeaseResponse
• pool::client::PoolRunRequest
• pool::client::PoolRunResponse
• pool::client::PoolStatusResponse
• pool::client::PoolStopResponse
• pool::scaler::PoolScaler
• pool::warm_pool::PoolStats
• pool::warm_pool::WarmPool
• prom::RuntimeMetrics
• resize::ResizeResult
• resize::ResourceUpdate
• rootfs::AttachedRootfs
• rootfs::CopyProvider
• rootfs::GuestLayout
• rootfs::OverlayProvider
• rootfs::RootfsBuilder
• sandbox::capability::CertifiedCrun
• sandbox::capability::CgroupV2Evidence
• sandbox::capability::IdMapping
• sandbox::capability::SandboxCapabilitySnapshot
• sandbox::capability::SandboxIdMappingPlan
• sandbox::capability::SubordinateIdRange
• sandbox::capability::UserNamespaceEvidence
• sandbox::controller::CrunController
• sandbox::controller::SandboxLaunchSpec
• sandbox::handler::CrunHandler
• sandbox::oci::SandboxBundleSpec
• sandbox::oci::SandboxMount
• sandbox::oci::SandboxResources
• sandbox::oci::SandboxTmpfs
• sandbox::rootfs::RootfsIdentityRequirements
• scale::InstanceRegistry
• scale::ScaleManager
• scale::ServiceHealth
• snapshot::SnapshotStore
• tee::attestation::AttestationReport
• tee::attestation::AttestationRequest
• tee::attestation::CertificateChain
• tee::attestation::PlatformInfo
• tee::attestation::TcbVersion
• tee::certs::AmdKdsClient
• tee::extension::SnpTeeExtension
• tee::kbs::KbsClient
• tee::kbs::KbsConfig
• tee::kbs::KbsRequest
• tee::kbs::KbsResponse
• tee::kbs::KbsSecret
• tee::policy::AttestationPolicy
• tee::policy::MinTcbPolicy
• tee::policy::PolicyResult
• tee::policy::PolicyViolation
• tee::reattest::ReattestConfig
• tee::reattest::ReattestState
• tee::reattest::ReattestSummary
• tee::rollback::VersionStore
• tee::rollback::VersionedSealedData
• tee::sealed::SealedData
• tee::snp::SevSnpSupport
• tee::verifier::VerificationResult
• vm::VmManager
• vmm::Entrypoint
• vmm::FsMount
• vmm::InstanceSpec
• vmm::NetworkInstanceConfig
• vmm::ShimHandler
• vmm::TeeInstanceConfig
• vmm::VmController
• vmm::VmMetrics
• volume::VolumeStore

Enums

• box_record::ManagedExecutionOperation
• box_record::ManagedExecutionState
• box_record::ManagedRestartOutcome
• compose::ProjectState
• managed_execution_store::ManagedExecutionReservation
• managed_execution_store::ManagedExecutionStoreError
• oci::build::dockerfile::Instruction
• oci::build::dockerfile::RunCacheSharing
• oci::build::dockerfile::RunCommand
• oci::registry::RegistryProtocol
• oci::signing::SignaturePolicy
• oci::signing::VerifyResult
• pool::client::PoolRequest
• pool::scaler::ScaleDecision
• tee::reattest::FailureAction
• tee::sealed::SealingPolicy
• vm::BoxState

Traits

• VmHandler
• VmmProvider
• local_execution::LocalExecutionBackend
• network::NetworkBackend
• rootfs::RootfsProvider
• tee::extension::TeeExtension
• vmm::VmHandler
• vmm::VmmProvider

Functions

• audit::read_audit_log
• fs::ensure_cache_dir
• host_check::check_virtualization_support
• load_resolved_image_config
• log::is_runtime_console_noise
• log::json_log_path
• network::terminate_passt
• oci::build::dockerfile::parse_single_instruction
• oci::build::engine::build
• oci::build::layer::create_layer
• oci::build::layer::create_layer_from_dir
• oci::build::layer::create_layer_with_deletions
• oci::extract_layer
• oci::signing::sign_image
• oci::signing::verify_image_signature
• pool::client::read_frame
• pool::client::run_client
• pool::client::status_client
• pool::client::stop_client
• pool::client::write_frame
• process::is_process_alive
• process::is_process_alive_with_identity
• process::is_process_running_with_identity
• process::pid_start_time
• resize::validate_update
• rootfs::attach_persistent_rootfs
• rootfs::default_provider
• rootfs::read_persisted_exit_code
• rootfs::unmount_box_overlay
• rootfs::unmount_box_rootfs
• sandbox::capability::map_container_gid
• sandbox::capability::map_container_uid
• sandbox::capability::plan_id_mappings
• sandbox::capability::probe_sandbox_capabilities
• sandbox::capability::unmap_host_gid
• sandbox::capability::unmap_host_uid
• sandbox::controller::write_bundle
• sandbox::oci::compile_oci_spec
• sandbox::path_access::prepare_crun_path_access
• sandbox::rootfs::inspect_rootfs_identity_requirements
• sandbox::rootfs::mapped_root_ids
• sandbox::rootfs::prepare_managed_mount_source
• sandbox::rootfs::prepare_rootfs_ownership
• sandbox::rootfs::validate_external_mount_access
• tee::ark_roots::is_trusted_ark
• tee::attestation::parse_platform_info
• tee::kbs::parse_resource_path
• tee::ratls::create_client_config
• tee::ratls::create_server_config
• tee::ratls::extract_report_from_cert
• tee::ratls::generate_ratls_certificate
• tee::ratls::verify_ratls_certificate
• tee::reattest::validate_config
• tee::rollback::seal_versioned
• tee::rollback::unseal_versioned
• tee::sealed::seal
• tee::sealed::unseal
• tee::simulate::build_simulated_report
• tee::simulate::is_simulate_mode
• tee::simulate::is_simulated_report
• tee::snp::check_sev_snp_support
• tee::snp::require_sev_snp_support
• tee::verifier::verify_attestation
• tee::verifier::verify_attestation_with_time
• vm::reap::cleanup_recorded_sandbox_runtime
• vm::reap::reap_orphaned_box
• vm::reap::wait_for_recorded_sandbox_log_drain

Type Aliases

• managed_execution_store::ManagedExecutionStoreResult
• vm::PullProgressFn

Constants

• ATTEST_VSOCK_PORT
• DEFAULT_IMAGE_CACHE_SIZE
• EXEC_VSOCK_PORT
• PORT_FWD_VSOCK_PORT
• PTY_VSOCK_PORT
• RESOLVED_IMAGE_CONFIG_FILE
• VERSION
• rootfs::GUEST_WORKDIR
• sandbox::capability::CERTIFIED_CRUN_VERSION
• sandbox::capability::SANDBOX_CAPABILITY_SCHEMA
• sandbox::oci::DEFAULT_SANDBOX_PIDS_LIMIT
• sandbox::oci::SANDBOX_BUNDLE_SCHEMA
• tee::ark_roots::AMD_ARK_ROOTS
• tee::attestation::SNP_MEASUREMENT_SIZE
• tee::attestation::SNP_REPORT_SIZE
• tee::attestation::SNP_USER_DATA_SIZE
• tee::simulate::SIMULATED_CHIP_ID
• tee::simulate::SIMULATED_REPORT_VERSION
• tee::simulate::TEE_SIMULATE_ENV
• vmm::DEFAULT_SHUTDOWN_TIMEOUT_MS