Struct SandboxSpec 

pub struct SandboxSpec {

    pub id: Option<String>,
    pub labels: HashMap<String, String>,
    pub kernel: String,
    pub rootfs: String,
    pub boot_args: String,
    pub vcpus: u32,
    pub memory_mib: u64,
    pub cmd: Vec<String>,
    pub env: HashMap<String, String>,
    pub working_dir: String,
    pub user: String,
    pub mounts: Vec<SandboxMountSpec>,
    pub network: SandboxNetworkSpec,
    pub ttl_seconds: u32,
    pub ssh_public_key: Option<String>,
    pub idle_timeout_seconds: u32,
    pub on_idle: IdleAction,
    pub template_warm: Option<TemplateWarmRef>,
    pub ready_probe: Option<ReadyProbeSpec>,
}

Full sandbox creation parameters.

The initial workload fields (cmd, env, working_dir, user) are consumed by the boot task: a non-empty cmd is launched automatically once the sandbox is ready, through the same path as Run. mounts, image, and ssh_public_key are validated at the service boundary (see the guest agent’s SandboxService::create).

Fields

id: Option<String>

Caller-supplied ID; auto-generated (UUID) when None or empty.

labels: HashMap<String, String>

Arbitrary key-value metadata (filtering, listing).

kernel: String

Kernel image path (empty = daemon default).

rootfs: String

Root filesystem image path (empty = daemon default).

boot_args: String

Kernel command-line arguments (empty = daemon default).

vcpus: u32

Number of vCPUs (0 = daemon default).

memory_mib: u64

Memory in MiB (0 = daemon default).

cmd: Vec<String>

Initial command launched automatically after boot (empty = none).

env: HashMap<String, String>

Environment variables for the initial command.

working_dir: String

Working directory for the initial command.

user: String

User to run the initial command as.

mounts: Vec<SandboxMountSpec>

Bind mounts into the sandbox.

network: SandboxNetworkSpec

Network configuration.

ttl_seconds: u32

Auto-destroy TTL in seconds (0 = no limit).

ssh_public_key: Option<String>

SSH public key injected via MMDS (None = no SSH setup).

idle_timeout_seconds: u32

Apply Self::on_idle after this many seconds without a running execution (0 = no idle detection). Re-armed on every Ready edge; file activity does NOT re-arm (CORE-21).

on_idle: IdleAction

What to do when the idle timeout expires.

template_warm: Option<TemplateWarmRef>

The catalog template’s pre-warmed snapshot, when the create resolved one (CORE-107). A boot-recipe input like rootfs: the create path restores it instead of cold-booting when eligible, and it rides the journaled effective spec so crash replay keeps working. None for non-catalog templates and warm-less catalog entries.

ready_probe: Option<ReadyProbeSpec>

The catalog template’s readiness probe (CORE-107): READY is withheld until it passes; expiry fails the boot. None = ready on exec-acceptance. Filled from the resolved template, never the request.

Trait Implementations

impl Clone for SandboxSpec

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxSpec

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxSpec

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxSpec

where SandboxSpec: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SandboxSpec

impl PartialEq for SandboxSpec

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SandboxSpec

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SandboxSpec