Struct CreateSandboxOptions 

pub struct CreateSandboxOptions {
    pub image: Option<String>,
    pub vcpus: Option<u32>,
    pub memory_mb: Option<u64>,
    pub profile: Option<SecurityProfile>,
    pub source_url: Option<String>,
    pub source_ref: Option<String>,
    pub volumes: Vec<String>,
    pub secrets: Vec<String>,
    pub secret_files: Vec<String>,
}

Options for creating a sandbox with a git source.

Fields

image: Option<String>

Docker image to use.

vcpus: Option<u32>

memory_mb: Option<u64>

profile: Option<SecurityProfile>

source_url: Option<String>

Git repository URL to clone into the sandbox.

source_ref: Option<String>

Git ref to checkout after cloning.

volumes: Vec<String>

Volume mounts (slug:/path or slug:/path:ro). Create volumes via CLI first.

secrets: Vec<String>

Secret bindings for proxy-based injection (Gondolin pattern). Secrets are injected as HTTP headers by the host proxy — they never enter the VM. Formats: "KEY=value:host", "KEY:host", "KEY:host:header".

secret_files: Vec<String>

Secret keys to inject as files at /run/agentkernel/secrets/KEY. Values are resolved from the secret vault.

Trait Implementations

impl Debug for CreateSandboxOptions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CreateSandboxOptions

fn default() -> CreateSandboxOptions

Returns the “default value” for a type.

impl Serialize for CreateSandboxOptions

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.