Enum IsolationBackend 

pub enum IsolationBackend {
    None,
    Bwrap {
        bwrap_path: PathBuf,
    },
}

Which isolation backend to use for a stage execution.

Variants

None

No isolation — legacy behaviour. A malicious stage can read host files, call out to the network, write to the user’s home directory. Noether emits a warning the first time this backend is used unless --unsafe-no-isolation is set.

Bwrap

Wrap the stage subprocess in bwrap. Requires the bubblewrap binary in PATH. Linux-only.

Fields

bwrap_path: PathBuf

Implementations

impl IsolationBackend

pub fn auto() -> (Self, Option<String>)

Resolve "auto": pick the best backend available on this host. On Linux with bwrap on PATH, that’s IsolationBackend::Bwrap. Elsewhere, falls back to IsolationBackend::None with the returned warning string so the caller can surface it.

pub fn from_flag(flag: &str) -> Result<(Self, Option<String>), IsolationError>

Parse the --isolate / NOETHER_ISOLATION argument.

pub fn is_effective(&self) -> bool

Trait Implementations

impl Clone for IsolationBackend

fn clone(&self) -> IsolationBackend

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IsolationBackend

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for IsolationBackend

fn eq(&self, other: &IsolationBackend) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for IsolationBackend

impl StructuralPartialEq for IsolationBackend