Struct ComputeConfig 

pub struct ComputeConfig {
    pub bridge: String,
    pub subnet: String,
    pub vcpus: u32,
    pub mem_mib: u32,
    pub kernel_signing_pubkeys: Vec<String>,
    pub kernel_allowed_hashes: Vec<String>,
    pub region: Option<String>,
    pub docker_endpoint: DockerEndpoint,
    pub docker_volume_mode: DockerVolumeMode,
    pub sql_shim_url: Option<String>,
    pub managed_db_privilege: ManagedDbPrivilege,
}

compute section — opt-in compute backends. Present ⇒ serve registers the backends this node can offer and advertises them to the scheduler; backends are capability-detected (container on Linux, remote docker when a daemon is reachable, VMM when /dev/kvm exists).

Fields

bridge: String

Bridge the container veths / VM taps attach to (default br-boatramp).

subnet: String

Guest IP subnet (default 10.0.0.0/24).

vcpus: u32

vCPUs this node advertises as schedulable (0 ⇒ detect from the host).

mem_mib: u32

Memory (MiB) this node advertises as schedulable (0 ⇒ a 1 GiB default).

kernel_signing_pubkeys: Vec<String>

Static kernel-signing public keys ("<alg>:<hex>") — the trust anchor for the posture-scaled kernel bar. Under multi-tenant, a dynamically- selected default kernel must carry a signature verifying against one of these. Host-access-gated (never in the KV tier); changing it needs a restart. Empty ⇒ no kernel may be signed-verified (strict posture then accepts none).

kernel_allowed_hashes: Vec<String>

Static allow-list of kernel content hashes (sha256 hex) a dynamic default may select under multi-tenant. Host-access-gated. Empty ⇒ no kernel is allow-listed.

region: Option<String>

This node’s region tag (FA-8). Advertised on the compute Node so a gateway routing to a compute:-backed workload with --lb nearest sends each request to the nearest replica by its node’s region — no manual --region map. None ⇒ region-agnostic.

docker_endpoint: DockerEndpoint

How the remote-Docker backend reports a workload’s reachable endpoint. published (default) publishes the container port on 127.0.0.1:<ephemeral> so a host-native serve reaches it on any daemon (incl. Docker Desktop / macOS, where the bridge IP is not host-routable); bridge routes to the container bridge IP directly (only when serve shares the daemon’s network).

docker_volume_mode: DockerVolumeMode

How the remote-Docker backend backs a workload’s persistent volumes. named (default) attaches a daemon-managed docker volume by name (portable across daemons + Docker Desktop / macOS); bind bind-mounts a host directory under <data_dir>/compute/volumes/<name> (local daemon only).

sql_shim_url: Option<String>

Guest-reachable base URL of the compute sql-shim (PLAN-compute-bindings) — e.g. http://10.0.0.1:8081 (the compute bridge gateway) or the docker bridge gateway. Set ⇒ a workload’s --bind sql reaches the managed database through a listener bound on 0.0.0.0:<port>. None (default) ⇒ compute sql bindings off.

managed_db_privilege: ManagedDbPrivilege

Privilege strategy for a managed database’s stock image on a shared-kernel backend (see ManagedDbPrivilege). rootless by default.

Trait Implementations

impl Clone for ComputeConfig

fn clone(&self) -> ComputeConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ComputeConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ComputeConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ComputeConfig

where ComputeConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.