procjail 0.2.0

Process sandbox for running untrusted code — Linux namespaces, seccomp, firejail, bubblewrap, rlimits
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

use thiserror::Error;

/// Result type for procjail public APIs.
pub type Result<T> = std::result::Result<T, ProcjailError>;

/// Public error type for procjail APIs.
#[derive(Debug, Error)]
pub enum ProcjailError {
    /// I/O failure while interacting with the sandbox or reading config.
    #[error("{0}. Fix: verify the runtime binary, harness path, work directory, and any config file paths exist and are readable on this host.")]
    Io(#[from] std::io::Error),
    /// TOML parse failure while loading configuration.
    #[error("failed to parse procjail TOML configuration: {0}. Fix: keep settings at the top level, for example `runtime_path = \"node\"` and `timeout_seconds = 30`.")]
    TomlDe(#[from] toml::de::Error),
    /// Generic procjail failure with context.
    #[error("{0}. Fix: verify the runtime path, containment strategy, harness file, and working directory before retrying.")]
    Message(String),
    /// Transparent anyhow error.
    #[error("procjail operation failed: {0}. Fix: verify the runtime path, containment strategy, harness file, and working directory before retrying.")]
    Anyhow(#[from] anyhow::Error),
}