jail 0.3.1

FreeBSD jail library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

use jail::process::Jailed;
use std::process::{Command, Stdio};
use std::{thread, time};

fn main() {
    if !rctl::State::check().is_enabled() {
        // If we don't have RCTL, let's just skip this test.
        panic!("Need RCTL for this example!");
    }

    let stopped = jail::StoppedJail::new("/").name("example_racct");

    let running = stopped.start().expect("Failed to start jail");

    println!("created new jail with JID {}", running.jid);

    println!("Let's run a command that burns CPU cycles in the jail!");
    let mut cmd = Command::new("/usr/bin/yes")
        .jail(&running)
        .stdout(Stdio::null())
        .spawn()
        .expect("Failed to execute command in jail");

    for _ in 1..10 {
        thread::sleep(time::Duration::from_millis(1000));
        match running.racct_statistics() {
            Ok(stats) => println!("Resource accounting statistics: {stats:#?}"),
            Err(jail::JailError::RctlError(rctl::Error::InvalidKernelState(state))) => {
                println!("Resource accounting is reported as {state}")
            }
            Err(e) => {
                println!("Other Error: {e}");
                break;
            }
        };
    }

    running.kill().expect("Could not kill jail");
    cmd.wait().expect("/usr/bin/yes failed?");
}