Struct SandboxSettings 

pub struct SandboxSettings {
    pub read_roots: Vec<String>,
    pub proxy_port: Option<NonZeroU16>,
    pub proxy_allow_ech: bool,
    pub package_min_release_age_days: Option<u16>,
}

The sandbox: section (ADR-018, ADR-019).

Fields

read_roots: Vec<String>

Paths (directories or files) the OS layers let commands read although no allow rule covers them: system and toolchain directories every build reads. The hook decision ignores them, and deny rules win over them in every layer. Absolute or ~/…, never a glob.

proxy_port: Option<NonZeroU16>

The loopback port moat proxy listens on and the host sandboxes send their commands’ traffic to; absent, the CLI’s default.

proxy_allow_ech: bool

Let moat proxy forward a TLS ClientHello that carries an encrypted server name (ECH, ESNI). Off, such a tunnel is refused: the server acts on the encrypted name, which may be another site than the allowed host.

package_min_release_age_days: Option<u16>

Days a package version must have been published before the package managers moat run starts install it (ADR-030); 0 turns this off, absent is 7 days (Policy::package_min_release_age_days).

Trait Implementations

impl Clone for SandboxSettings

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxSettings

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxSettings

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxSettings

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SandboxSettings

impl PartialEq for SandboxSettings

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SandboxSettings

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SandboxSettings