hakoniwa 1.4.0

Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

use nix::sched::CloneFlags;

/// Linux namespace types.
///
/// [namespaces]: https://man7.org/linux/man-pages/man7/namespaces.7.html
/// [unshare]: https://man7.org/linux/man-pages/man2/unshare.2.html
#[derive(Hash, Eq, PartialEq, Clone, Copy, Debug)]
pub enum Namespace {
    Cgroup,
    Ipc,
    Mount,
    Network,
    Pid,
    User,
    Uts,
}

impl Namespace {
    pub(crate) fn to_clone_flag(self) -> CloneFlags {
        match self {
            Self::Cgroup => CloneFlags::CLONE_NEWCGROUP,
            Self::Ipc => CloneFlags::CLONE_NEWIPC,
            Self::Mount => CloneFlags::CLONE_NEWNS,
            Self::Network => CloneFlags::CLONE_NEWNET,
            Self::Pid => CloneFlags::CLONE_NEWPID,
            Self::User => CloneFlags::CLONE_NEWUSER,
            Self::Uts => CloneFlags::CLONE_NEWUTS,
        }
    }
}

impl std::fmt::Display for Namespace {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        match self {
            Self::Cgroup => write!(f, "CGROUP"),
            Self::Ipc => write!(f, "IPC"),
            Self::Mount => write!(f, "MOUNT"),
            Self::Network => write!(f, "NETWORk"),
            Self::Pid => write!(f, "PID"),
            Self::User => write!(f, "USER"),
            Self::Uts => write!(f, "UTS"),
        }
    }
}