Struct ContainerToWiderWorld 

pub struct ContainerToWiderWorld {
    pub default_policy: RuleVerdict,
    pub rules: Option<Vec<ContainerToWiderWorldRule>>,
}

The container-to-wider-world section, defining how containers can communicate with the wider world.

Fields

default_policy: RuleVerdict

The default_policy defines the default for when there is not a specific rule.

rules: Option<Vec<ContainerToWiderWorldRule>>

An optional list of rules, see ContainerToWiderWorldRule.

Example

The easiest way to define the rules is using TOMLs arrays of tables:

[container_to_wider_world]
default_policy = "drop"

[[container_to_wider_world.rules]]
# first rule here
[[container_to_wider_world.rules]]
# second rule here

Trait Implementations

impl Clone for ContainerToWiderWorld

fn clone(&self) -> ContainerToWiderWorld

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ContainerToWiderWorld

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ContainerToWiderWorld

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Hash for ContainerToWiderWorld

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for ContainerToWiderWorld

fn eq(&self, other: &ContainerToWiderWorld) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Process<Iptables> for ContainerToWiderWorld

fn process( &self, ctx: &ProcessContext<'_, Iptables>, ) -> Result<Option<Vec<IptablesRule>>>

Process the current type within the given ProcessContext, returning zero or more rules to apply with nft.

impl Process<Nftables> for ContainerToWiderWorld

fn process( &self, ctx: &ProcessContext<'_, Nftables>, ) -> Result<Option<Vec<String>>>

Process the current type within the given ProcessContext, returning zero or more rules to apply with nft.

impl Eq for ContainerToWiderWorld

impl StructuralPartialEq for ContainerToWiderWorld