Enum IsolationCapability 

pub enum IsolationCapability {
    ReadOnlyRoot,
    WritableLayer,
    MountReadOnlyEnforcement,
    SingleFileMountExpansionAudit,
    NoNetworkGuarantee,
    EgressAllowlist,
    SecretIsolation,
    SecretMount,
    SecretRedaction,
    ProcessTimeout,
    ProcessSignal,
    ProcessRlimits,
    ContentRefIo,
    IoRedaction,
    ProcessStats,
    Cleanup,
    Detach,
    Reclaim,
    AuditLog,
}

Enumerates the finite isolation capability cases. Serialized names are part of the SDK contract; update fixtures when variants change.

Variants

ReadOnlyRoot

Use this variant when the contract needs to represent read only root; selecting it has no side effect by itself.

WritableLayer

Use this variant when the contract needs to represent writable layer; selecting it has no side effect by itself.

MountReadOnlyEnforcement

Use this variant when the contract needs to represent mount read only enforcement; selecting it has no side effect by itself.

SingleFileMountExpansionAudit

Use this variant when the contract needs to represent single file mount expansion audit; selecting it has no side effect by itself.

NoNetworkGuarantee

Use this variant when the contract needs to represent no network guarantee; selecting it has no side effect by itself.

EgressAllowlist

Use this variant when the contract needs to represent egress allowlist; selecting it has no side effect by itself.

SecretIsolation

Use this variant when the contract needs to represent secret isolation; selecting it has no side effect by itself.

SecretMount

Use this variant when the contract needs to represent secret mount; selecting it has no side effect by itself.

SecretRedaction

Use this variant when the contract needs to represent secret redaction; selecting it has no side effect by itself.

ProcessTimeout

Use this variant when the contract needs to represent process timeout; selecting it has no side effect by itself.

ProcessSignal

Use this variant when the contract needs to represent process signal; selecting it has no side effect by itself.

ProcessRlimits

Use this variant when the contract needs to represent process rlimits; selecting it has no side effect by itself.

ContentRefIo

Use this variant when the contract needs to represent content ref io; selecting it has no side effect by itself.

IoRedaction

Use this variant when the contract needs to represent io redaction; selecting it has no side effect by itself.

ProcessStats

Use this variant when the contract needs to represent process stats; selecting it has no side effect by itself.

Cleanup

Use this variant when the contract needs to represent cleanup; selecting it has no side effect by itself.

Detach

Use this variant when the contract needs to represent detach; selecting it has no side effect by itself.

Reclaim

Use this variant when the contract needs to represent reclaim; selecting it has no side effect by itself.

AuditLog

Use this variant when the contract needs to represent audit log; selecting it has no side effect by itself.

Trait Implementations

impl Clone for IsolationCapability

fn clone(&self) -> IsolationCapability

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IsolationCapability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for IsolationCapability

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl FromIterator<IsolationCapability> for IsolationCapabilitySet

fn from_iter<T: IntoIterator<Item = IsolationCapability>>(iter: T) -> Self

Creates a value from an iterator.

impl Hash for IsolationCapability

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for IsolationCapability

fn cmp(&self, other: &IsolationCapability) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for IsolationCapability

fn eq(&self, other: &IsolationCapability) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for IsolationCapability

fn partial_cmp(&self, other: &IsolationCapability) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for IsolationCapability

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for IsolationCapability

impl Eq for IsolationCapability

impl StructuralPartialEq for IsolationCapability