containerization-framework 0.4.0

Rust bindings for Apple's Containerization framework: Linux containers in lightweight VMs, in-process and without a daemon.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47

use crate::error::Error;
use crate::platform;
use crate::platform::ffi;

/// `EXT4.ExtendedAttribute`. Swift's fields are internal, so it holds nothing
/// Rust can read.
#[derive(Clone, Copy, Debug, Eq, PartialEq)]
pub struct ExtendedAttribute {
  _private: (),
}

impl ExtendedAttribute {
  /// `prefixMap`, sorted by its keys.
  pub const PREFIX_MAP: &[(isize, &str)] = &[
    (1, "user."),
    (2, "system.posix_acl_access"),
    (3, "system.posix_acl_default"),
    (4, "trusted."),
    (6, "security."),
    (7, "system."),
    (8, "system.richacl"),
  ];

  /// What Swift returns in place of each of its attributes.
  pub(crate) fn opaque() -> Self {
    Self { _private: () }
  }

  /// `compressName(_:)`: the id of the name's longest known prefix, and the
  /// rest of the name.
  pub fn compress_name(name: &str) -> Result<(u8, String), Error> {
    platform::outcome(
      ffi::cz_ext4_extended_attribute_compress_name(name),
      format!("compress the extended attribute name {name}"),
    )
    .map(|outcome| (outcome.compressed_name_id(), outcome.compressed_name_str()))
  }

  /// `decompressName(id:suffix:)`.
  pub fn decompress_name(id: isize, suffix: &str) -> Result<String, Error> {
    platform::outcome(
      ffi::cz_ext4_extended_attribute_decompress_name(id, suffix),
      format!("decompress the extended attribute name {suffix}"),
    )
    .map(|outcome| outcome.text())
  }
}