hakoniwa 1.3.2

Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

pub(crate) type Result<T> = std::result::Result<T, Error>;

#[allow(clippy::enum_variant_names)]
#[derive(thiserror::Error, Debug)]
pub(crate) enum Error {
    #[error(transparent)]
    StdIoError(#[from] std::io::Error),
    #[error(transparent)]
    StdNulError(#[from] std::ffi::NulError),
    #[error("{0}")]
    SysError(String),
    #[error("mount source path must be absolute: {0}")]
    MountSourcePathMustBeAbsolute(String),
    #[error("mount target path must be absolute: {0}")]
    MountTargetPathMustBeAbsolute(String),
    #[error("mount procfs requires a new PID namespace")]
    MountProcfsEPERM,
    #[error("{0}")]
    SetUserFailed(String),
    #[error(transparent)]
    ProcError(#[from] procfs::ProcError),
    #[error(transparent)]
    CapsError(#[from] caps::errors::CapsError),
    #[cfg(feature = "landlock")]
    #[error("landlock `{0}` feature requires minimum kernel version {1}: {2}")]
    LandlockFeatureUnsupported(String, String, String),
    #[cfg(feature = "landlock")]
    #[error("landlock path must be exist: {0}")]
    LandlockPathMustBeAbsolute(String),
    #[cfg(feature = "landlock")]
    #[error(transparent)]
    LandlockPathfdError(#[from] landlock::PathFdError),
    #[cfg(feature = "landlock")]
    #[error(transparent)]
    LandlockRulesetError(#[from] landlock::RulesetError),
    #[cfg(feature = "seccomp")]
    #[error(transparent)]
    SeccompError(#[from] libseccomp::error::SeccompError),
}