Struct SandboxBuilder 

pub struct SandboxBuilder<S: State = Empty> { /* private fields */ }

Use builder syntax to set the inputs and finish with build().

Implementations

impl<S: State> SandboxBuilder<S>

pub fn build(self) -> Sandbox

where S: IsComplete,

Finish building and return the requested object

pub fn code(self, value: SandboxCode) -> SandboxBuilder<SetCode<S>>

where S::Code: IsUnset,

Required.

Where the sandbox’s root filesystem comes from

pub fn limits(self, value: SandboxLimits) -> SandboxBuilder<SetLimits<S>>

where S::Limits: IsUnset,

Optional (Some / Option setters). Enforced resource ceilings.

Optional because not every platform can enforce them, and a declaration that names none takes the platform’s own defaults. Naming them on a platform that cannot enforce them is rejected at plan time rather than silently ignored.

pub fn maybe_limits( self, value: Option<SandboxLimits>, ) -> SandboxBuilder<SetLimits<S>>

where S::Limits: IsUnset,

Optional (Some / Option setters). Enforced resource ceilings.

Optional because not every platform can enforce them, and a declaration that names none takes the platform’s own defaults. Naming them on a platform that cannot enforce them is rejected at plan time rather than silently ignored.

pub fn egress(self, value: SandboxEgress) -> SandboxBuilder<SetEgress<S>>

where S::Egress: IsUnset,

Required.

Outbound network policy

pub fn lifecycle( self, value: SandboxLifecyclePolicy, ) -> SandboxBuilder<SetLifecycle<S>>

where S::Lifecycle: IsUnset,

Required.

Sandbox lifetime ceiling and idle behaviour

pub fn preview_ports( self, value: Vec<u16>, ) -> SandboxBuilder<SetPreviewPorts<S>>

where S::PreviewPorts: IsUnset,

Optional (Some / Option setters). Default: <Vec<u16> as Default>::default().

Ports eligible for a preview capability. An application reaches its sandbox through the provider, so it cannot widen its own ingress at runtime; a holder of a remote binding’s credentials is bounded by no port condition, which is why a remote sandbox declares none.

pub fn maybe_preview_ports( self, value: Option<Vec<u16>>, ) -> SandboxBuilder<SetPreviewPorts<S>>

where S::PreviewPorts: IsUnset,

Optional (Some / Option setters). Default: <Vec<u16> as Default>::default().

Ports eligible for a preview capability. An application reaches its sandbox through the provider, so it cannot widen its own ingress at runtime; a holder of a remote binding’s credentials is bounded by no port condition, which is why a remote sandbox declares none.