Struct EgressNamespaceFailure 

pub struct EgressNamespaceFailure {
    pub blocker: EgressNamespaceBlocker,
    pub failed_call: String,
    pub errno: Option<i32>,
    pub userns_grant: UsernsGrant,
    pub attachment: ProfileAttachment,
}

A creation of the capsule network namespace that failed, with what its refusal names.

Every refusal of E-CAP-005 — at staging, at launch, at a session’s first command, in mur doctor — renders Self::reason, so the places that ask cannot explain one host two ways.

Fields

blocker: EgressNamespaceBlocker

Decided by the failed call and its errno alone; the readings below never change it.

failed_call: String

The call that failed, in CreationStep::describe’s words (unshare(CLONE_NEWUSER | CLONE_NEWNET), writing uid_map/gid_map, …), or, for EgressNamespaceBlocker::CreatorUnavailable, the runtime’s account of why the creator could not run.

errno: Option<i32>

The errno the failed call left. None exactly for EgressNamespaceBlocker::CreatorUnavailable, where no creation step ran.

userns_grant: UsernsGrant

AppArmor’s unprivileged-userns restriction as this process read it when the failure was observed. Explains the failure; never decides whether there is one.

attachment: ProfileAttachment

The profile the kernel reports as confining this process, read at the same moment.

Implementations

impl EgressNamespaceFailure

pub fn summary(&self) -> String

<failed call> failed with <ERRNO>, or the creator’s account: the one-line answer mur doctor prints.

pub fn reason(&self) -> String

The text an operator sees under E-CAP-005: what failed, with its errno symbolically and in words; the likely cause and its remedy; and, last, the host readings the cause was chosen from.

Trait Implementations

impl Clone for EgressNamespaceFailure

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EgressNamespaceFailure

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for EgressNamespaceFailure

impl PartialEq for EgressNamespaceFailure

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for EgressNamespaceFailure