Struct ContainerRuntime 

pub struct ContainerRuntime { /* private fields */ }

One daemon whose reported controllers passed admission.

Implementations

impl ContainerRuntime

pub fn guarded(self, harness: PathBuf) -> Self

Binds the harness whose private protocol retains cleanup after parent termination.

pub fn probe(engine: ContainerEngine, program: PathBuf) -> Result<Self, AxError>

Contacts the daemon under the bounded control-request budget.

Errors

Refuses unavailable, unsupported, or unreadable daemon capabilities.

pub fn info_command(engine: ContainerEngine, program: &Path) -> Command

Builds the daemon question for the host’s bounded probe runner. Unlike --version, info contacts the server and tests access.

pub fn admit( engine: ContainerEngine, program: PathBuf, info: &[u8], ) -> Result<Self, AxError>

Admits reported Linux cgroup v2 CPU, memory and process limits. The host must obtain these bytes from a successful bounded info call.

Errors

E_SANDBOX_DENIED for missing, unknown or unsupported evidence.

pub fn create_command( &self, limits: &ContainerLimits, launch: &ContainerLaunch<'_>, ) -> Result<Command, AxError>

Builds a stopped container. No shell interprets the target argv. The source path must name the already synced copy, never the source tree.

Errors

E_SANDBOX_DENIED when mount or environment translation is ambiguous. No process starts and no image is pulled by this method.

Trait Implementations

impl Clone for ContainerRuntime

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ContainerRuntime

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ContainerRuntime

impl PartialEq for ContainerRuntime

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ContainerRuntime