Struct GVisorOciRunOptions 

pub struct GVisorOciRunOptions {
    pub network_mode: GVisorNetworkMode,
    pub ignore_cgroups: bool,
    pub runsc_rootless: bool,
    pub stage_runsc_binary: bool,
    pub require_supervisor_exec_policy: bool,
    pub platform: GVisorPlatform,
    pub console_socket: Option<PathBuf>,
}

Options for running an OCI bundle with gVisor.

Fields

network_mode: GVisorNetworkMode

gVisor networking mode passed to runsc.

ignore_cgroups: bool

Skip runsc’s cgroup setup when Nucleus manages cgroups externally.

runsc_rootless: bool

Tell runsc to use its rootless launcher and helper handoff semantics.

This is independent from require_supervisor_exec_policy: production callers decide separately whether the host-side execute allowlist is compatible with the selected handoff path.

stage_runsc_binary: bool

Stage runsc into the per-container runtime directory before exec.

This is for non-store runsc binaries and host-side supervisor execute policy isolation. Rootless bridge mode should normally leave runsc on its immutable package path so gVisor helpers can re-exec a globally traversable binary after they adjust credentials.

require_supervisor_exec_policy: bool

Fail if the host-side supervisor execute allowlist cannot be installed.

platform: GVisorPlatform

gVisor Sentry platform backend.

console_socket: Option<PathBuf>

Optional OCI console socket that receives the terminal PTY master.

Trait Implementations

impl Clone for GVisorOciRunOptions

fn clone(&self) -> GVisorOciRunOptions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GVisorOciRunOptions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for GVisorOciRunOptions

fn default() -> Self

Returns the “default value” for a type.

impl Eq for GVisorOciRunOptions

impl PartialEq for GVisorOciRunOptions

fn eq(&self, other: &GVisorOciRunOptions) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for GVisorOciRunOptions