Struct BoxTransientSecretStore 

pub struct BoxTransientSecretStore { /* private fields */ }

The sole Box-owned transient Secret filesystem boundary.

Callers may create private scopes below one pre-mounted Linux tmpfs, but Box never creates that backing mount or falls back to disk storage.

Implementations

impl BoxTransientSecretStore

pub fn new(root: impl Into<PathBuf>) -> Self

pub fn root(&self) -> &Path

pub async fn require_ready(&self) -> RuntimeResult<()>

pub async fn private_scope(&self, scope: &str) -> RuntimeResult<Self>

Create or reopen one private namespace inside the same validated tmpfs.

pub async fn materialize_environment( &self, identity: &str, bindings: Vec<(String, BoxSecretMaterial)>, ) -> RuntimeResult<BoxSecretEnvironmentProjection>

Materialize caller-provided environment values and return only the non-sensitive mount/manifest projection used by BoxConfig.

pub fn configure_vm(&self, manager: &mut VmManager) -> RuntimeResult<()>

Mark this already-validated tmpfs as the only source whose single-file MicroVM mounts may be staged inside tmpfs rather than copied to disk.

pub async fn cleanup_identity(&self, identity: &str) -> RuntimeResult<()>

pub fn cleanup_identity_sync(&self, identity: &str) -> RuntimeResult<()>

Trait Implementations

impl Clone for BoxTransientSecretStore

fn clone(&self) -> BoxTransientSecretStore

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BoxTransientSecretStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.