Struct SandboxSpec 

pub struct SandboxSpec {

    pub name: String,
    pub image: RootfsSource,
    pub resources: SandboxResources,
    pub runtime: SandboxRuntimeOptions,
    pub env: Vec<EnvVar>,
    pub labels: BTreeMap<String, String>,
    pub rlimits: Vec<Rlimit>,
    pub mounts: Vec<VolumeMount>,
    pub patches: Vec<Patch>,
    pub network: NetworkSpec,
    pub init: Option<HandoffInit>,
    pub pull_policy: PullPolicy,
    pub security_profile: SecurityProfile,
    pub lifecycle: SandboxPolicy,
}

Backend-neutral sandbox task description.

This is the durable contract for fields that are already shared across backends. Local-only execution state such as resolved manifest digests, snapshot upper-layer paths, registry credentials, replace flags, and backend dispatch stays outside this type.

Fields

name: String

Unique sandbox name.

image: RootfsSource

Root filesystem source.

resources: SandboxResources

CPU and memory resources.

runtime: SandboxRuntimeOptions

Guest runtime options.

env: Vec<EnvVar>

Environment variables visible to commands in the sandbox.

labels: BTreeMap<String, String>

User-defined labels attached to the sandbox.

rlimits: Vec<Rlimit>

Sandbox-wide resource limits inherited by guest processes.

mounts: Vec<VolumeMount>

Volume mounts.

patches: Vec<Patch>

Rootfs patches applied before VM start.

network: NetworkSpec

Network specification.

init: Option<HandoffInit>

Hand off PID 1 to a guest init binary after agentd setup.

pull_policy: PullPolicy

Pull policy for OCI images.

security_profile: SecurityProfile

In-guest security profile.

lifecycle: SandboxPolicy

Sandbox lifecycle policy.

Trait Implementations

impl Clone for SandboxSpec

fn clone(&self) -> SandboxSpec

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxSpec

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxSpec

fn default() -> SandboxSpec

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxSpec

where SandboxSpec: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SandboxSpec

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.