Struct SandboxImage 

pub struct SandboxImage {
    pub exec_uid: u32,
    pub exec_gid: u32,
    pub session_root: &'static str,
    pub port: u16,
    pub authorization: Authorization,
    pub isolation: Isolation,
}

The values an image must carry for the agent to run in it.

Fields

exec_uid: u32

Uid the supervised command runs as, resolved from a non-root base USER or the default.

exec_gid: u32

Primary gid from the base USER, which may differ from its uid.

session_root: &'static str

Writable session directory. Image-owned directories may also be writable on VM backends.

port: u16

Port the agent serves, both its own protocol and any lifecycle hooks.

authorization: Authorization

isolation: Isolation

Implementations

impl SandboxImage

pub fn exec_gid(&self) -> u32

Gid the supervised command runs as.

pub fn contract_env_vars(&self) -> [(&'static str, String); 6]

The agent’s configuration contract as (name, value) pairs, in the order the ENV block lists them.

pub fn user(&self) -> Option<String>

The uid:gid the image runs as, or None when it declares no user and starts as root. Why the gid is explicit is in the USER comment entrypoint renders.

pub fn exposed_port(&self) -> String

The port the image exposes, as an OCI ExposedPorts key.

pub fn passwd_entry(&self) -> String

The exec identity’s /etc/passwd line, without a trailing newline.

pub fn group_entry(&self) -> String

The exec identity’s /etc/group line, without a trailing newline.

Trait Implementations

impl Clone for SandboxImage

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SandboxImage

impl Debug for SandboxImage

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SandboxImage

impl PartialEq for SandboxImage

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SandboxImage