Struct RemotePolicy 

pub struct RemotePolicy {
    pub allow_privileged: bool,
    pub allow_raw: bool,
    pub bind_roots: Vec<PathBuf>,
    pub publish_addresses: Vec<String>,
    pub any_instance: bool,
}

The operator’s limits for remote callers.

Fields

allow_privileged: bool

allow_raw: bool

raw_config, raw_devices, incus_profiles, idmap maps, guest-bound ports.

bind_roots: Vec<PathBuf>

Host directories bind mounts may come from.

publish_addresses: Vec<String>

Host addresses a published port may listen on, besides loopback.

any_instance: bool

Exec into, remove and read logs of any instance, not only the ones isb serve manages.

Implementations

impl RemotePolicy

pub fn check_file(&self, file: &ComposeFile, base: &Path) -> Result<()>

Check a whole compose file. base is where its relative paths resolve.

pub fn check_spec(&self, spec: &SandboxSpec, base: &Path) -> Result<()>

Check one sandbox spec.

pub fn check_base_dir(&self, dir: &Path) -> Result<()>

A base directory a remote caller asked for must be inside a bind root.

Trait Implementations

impl Clone for RemotePolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RemotePolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RemotePolicy

fn default() -> Self

Returns the “default value” for a type.