Struct DockerSandbox 

pub struct DockerSandbox { /* private fields */ }

Docker/Podman container sandbox

Implementations

impl DockerSandbox

pub fn new(name: &str, runtime: ContainerRuntime) -> Self

Create a new Docker sandbox with the specified runtime

pub fn new_persistent(name: &str, runtime: ContainerRuntime) -> Self

Create a persistent Docker sandbox (won’t be cleaned up in Drop)

pub fn set_persistent(&mut self, persistent: bool)

Mark this sandbox as persistent (won’t be cleaned up in Drop)

pub fn with_detected_runtime(name: &str) -> Result<Self>

Create a new Docker sandbox with auto-detected runtime

impl DockerSandbox

pub fn run_ephemeral_cmd( runtime: ContainerRuntime, image: &str, cmd: &[String], config: &SandboxConfig, ) -> Result<ExecResult>

Run a command in a temporary container using docker run --rm This is faster than create→start→exec→stop for one-shot commands

Trait Implementations

impl Drop for DockerSandbox

fn drop(&mut self)

Executes the destructor for this type.

impl Sandbox for DockerSandbox

fn start<'life0, 'life1, 'async_trait>( &'life0 mut self, config: &'life1 SandboxConfig, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Start the sandbox with the given configuration

fn exec<'life0, 'life1, 'life2, 'async_trait>( &'life0 mut self, cmd: &'life1 [&'life2 str], ) -> Pin<Box<dyn Future<Output = Result<ExecResult>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Execute a command in the sandbox

fn exec_with_env<'life0, 'life1, 'life2, 'life3, 'async_trait>( &'life0 mut self, cmd: &'life1 [&'life2 str], env: &'life3 [String], ) -> Pin<Box<dyn Future<Output = Result<ExecResult>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, 'life3: 'async_trait,

Execute a command with environment variables

fn exec_with_options<'life0, 'life1, 'life2, 'life3, 'async_trait>( &'life0 mut self, cmd: &'life1 [&'life2 str], opts: &'life3 ExecOptions, ) -> Pin<Box<dyn Future<Output = Result<ExecResult>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, 'life3: 'async_trait,

Execute a command with full options (env, workdir, user)

fn stop<'life0, 'async_trait>( &'life0 mut self, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Stop the sandbox and clean up resources

fn resize<'life0, 'async_trait>( &'life0 mut self, vcpus: u32, memory_mb: u64, ) -> Pin<Box<dyn Future<Output = Result<bool>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Attempt to resize sandbox resources in-place.

fn name(&self) -> &str

Get the sandbox name/identifier

fn backend_type(&self) -> BackendType

Get the backend type

fn is_running(&self) -> bool

Check if the sandbox is running

fn write_file_unchecked<'life0, 'life1, 'life2, 'async_trait>( &'life0 mut self, path: &'life1 str, content: &'life2 [u8], ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Internal write implementation (no validation, called by write_file)

fn read_file_unchecked<'life0, 'life1, 'async_trait>( &'life0 mut self, path: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Vec<u8>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Internal read implementation (no validation, called by read_file)

fn remove_file_unchecked<'life0, 'life1, 'async_trait>( &'life0 mut self, path: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Internal remove implementation

fn mkdir_unchecked<'life0, 'life1, 'async_trait>( &'life0 mut self, path: &'life1 str, recursive: bool, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Internal mkdir implementation

fn attach<'life0, 'life1, 'async_trait>( &'life0 mut self, shell: Option<&'life1 str>, ) -> Pin<Box<dyn Future<Output = Result<i32>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Attach an interactive shell to the sandbox

fn attach_with_env<'life0, 'life1, 'life2, 'async_trait>( &'life0 mut self, shell: Option<&'life1 str>, env: &'life2 [String], ) -> Pin<Box<dyn Future<Output = Result<i32>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Attach to the sandbox with an interactive shell and environment variables

fn write_file<'life0, 'life1, 'life2, 'async_trait>( &'life0 mut self, path: &'life1 str, content: &'life2 [u8], ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Write a file to the sandbox filesystem

fn read_file<'life0, 'life1, 'async_trait>( &'life0 mut self, path: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Vec<u8>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Read a file from the sandbox filesystem

fn remove_file<'life0, 'life1, 'async_trait>( &'life0 mut self, path: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Remove a file from the sandbox filesystem

fn mkdir<'life0, 'life1, 'async_trait>( &'life0 mut self, path: &'life1 str, recursive: bool, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Create a directory in the sandbox filesystem

fn inject_files<'life0, 'life1, 'async_trait>( &'life0 mut self, files: &'life1 [FileInjection], ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Inject files from config into the sandbox