Struct Cgroup 

pub struct Cgroup { /* private fields */ }

Cgroup v2 manager

Implements the cgroup lifecycle state machine from Nucleus_Resources_CgroupLifecycle.tla

Implementations

impl Cgroup

pub fn create(name: &str) -> Result<Self>

Create a new cgroup with the given name

State transition: Nonexistent -> Created

pub fn set_limits(&mut self, limits: &ResourceLimits) -> Result<()>

Set resource limits

State transition: Created -> Configured

pub fn attach_process(&mut self, pid: u32) -> Result<()>

Attach a process to this cgroup

State transition: Configured -> Attached

pub fn freeze_existing(path: &Path) -> Result<CgroupFreezeGuard>

Freeze an existing cgroup v2 subtree until the returned guard is dropped.

pub fn memory_current(&self) -> Result<u64>

Get current memory usage

pub fn install_gpu_device_allowlist( &self, gpu_specs: &[DeviceNodeSpec], include_tty: bool, best_effort: bool, ) -> Result<bool>

Install a cgroup v2 device allowlist (BPF_PROG_TYPE_CGROUP_DEVICE).

When GPU passthrough is enabled, this restricts device access to the base /dev nodes plus the bound GPU devices, so a compromised workload cannot reach other host devices even if it creates a device node.

best_effort matches --allow-degraded-security: when true, a kernel or capability limitation degrades to a warning rather than failing the launch, because the filesystem layer (only bound device nodes exist in /dev) remains the primary gate.

pub fn path(&self) -> &Path

Get cgroup path

pub fn state(&self) -> CgroupState

Get the current state of this cgroup

pub fn cleanup(self) -> Result<()>

Clean up the cgroup

State transition: * -> Removed (only on success)

Trait Implementations

impl Drop for Cgroup

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.