Struct NamespaceConfig 

pub struct NamespaceConfig {
    pub pid: bool,
    pub mnt: bool,
    pub net: bool,
    pub uts: bool,
    pub ipc: bool,
    pub cgroup: bool,
    pub user: bool,
    pub time: bool,
}

Namespace configuration

Defines which Linux namespaces to create for isolation

Fields

pid: bool

PID namespace - process isolation

mnt: bool

Mount namespace - filesystem isolation

net: bool

Network namespace - network isolation

uts: bool

UTS namespace - hostname isolation

ipc: bool

IPC namespace - inter-process communication isolation

cgroup: bool

Cgroup namespace - isolate cgroup hierarchy visibility

user: bool

User namespace - user/group ID isolation

time: bool

Time namespace - isolate time offsets from the host

Implementations

impl NamespaceConfig

pub fn all() -> Self

Create config with all namespaces enabled

pub fn minimal() -> Self

Create config with minimal namespaces for isolation.

M10: UTS and IPC are enabled even in minimal mode. Without UTS, containers can change the host hostname. Without IPC, they share System V IPC objects.

pub fn with_cgroup_namespace(self, enabled: bool) -> Self

Enable or disable cgroup namespace isolation.

pub fn with_time_namespace(self, enabled: bool) -> Self

Enable or disable time namespace isolation.

Trait Implementations

impl Clone for NamespaceConfig

fn clone(&self) -> NamespaceConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NamespaceConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for NamespaceConfig

fn default() -> Self

Returns the “default value” for a type.