Struct SandboxConfig 

pub struct SandboxConfig {
    pub enforce: SandboxEnforce,
    pub provider: SandboxProvider,
    pub image: Option<String>,
    pub extra_write: Vec<String>,
    pub egress: Vec<String>,
}

Per-role OS sandbox config.

Fields

enforce: SandboxEnforce

provider: SandboxProvider

Sandbox provider: process (default, tier 2) or container (tier 3). container with enforce = "off" means no sandboxing, same as today.

image: Option<String>

Container image used when provider = "container". Defaults to sandbox_container::DEFAULT_IMAGE when unset.

extra_write: Vec<String>

Extra paths the operator opts into as writable (e.g. “~/.cargo”). Stored as raw strings; not expanded or canonicalized here.

egress: Vec<String>

Extra network destinations allowed under enforce = "fs+net" (for example package registries). Stored as host:port strings. With provider = "container" a non-empty list is refused by config::validate (proxy-env advisory only — see SandboxProvider::enforces_hard_net_boundary); an empty list keeps the hard --network none boundary.

Trait Implementations

impl Clone for SandboxConfig

fn clone(&self) -> SandboxConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxConfig

fn default() -> SandboxConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxConfig

where SandboxConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for SandboxConfig

fn eq(&self, other: &SandboxConfig) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SandboxConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SandboxConfig