cntr 2.0.0

A container debugging tool based on Linux mount API
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

//! Shared container access utilities
//!
//! This module provides common functionality for looking up containers
//! and accessing their properties.

use crate::ApparmorMode;
use crate::procfs;
use crate::result::Result;
use anyhow::bail;
use nix::unistd::Pid;

/// Lookup a container by name/ID and get its process status
///
/// # Arguments
/// * `container_name` - Container name, ID, or PID
/// * `container_types` - List of container types to try
/// * `apparmor_mode` - AppArmor mode configuration
pub(crate) fn lookup_container(
    container_name: &str,
    container_types: &[Box<dyn container_pid::Container>],
    apparmor_mode: ApparmorMode,
) -> Result<procfs::ProcStatus> {
    // Lookup container PID
    let pid_raw = match container_pid::lookup_container_pid(container_name, container_types) {
        Ok(pid) => pid,
        Err(e) => bail!("{}", e),
    };
    let pid = Pid::from_raw(pid_raw);

    // Get process status (includes uid, gid, capabilities, lsm_profile)
    procfs::status(pid, apparmor_mode)
}