Expand description
Confinery sandbox engine.
A Sandbox takes a SandboxSpec (a resolved profile plus a command)
and runs it under the strongest isolation the host supports, reporting
which layers were applied. Each OS has its own backend; unsupported systems
fall back to an implementation that refuses to run.
Re-exports§
pub use detect::detect;pub use detect::HostCapabilities;pub use error::Result;pub use error::SandboxError;pub use report::LayerOutcome;pub use report::LayerStatus;pub use report::SandboxReport;pub use spec::SandboxSpec;
Modules§
- detect
- Host capability detection, surfaced by
confinery doctor. - error
- Errors from the sandbox engine.
- report
- The outcome of a sandbox run and the layers that were applied.
- spec
- The runtime specification handed to a platform sandbox.
Traits§
- Sandbox
- A platform sandbox capable of running one command under isolation.
Functions§
- platform_
sandbox - Build the sandbox backend for the current platform.