Struct ImageProxyConfig

pub struct ImageProxyConfig {
    pub authfile: Option<PathBuf>,
    pub auth_data: Option<File>,
    pub auth_anonymous: bool,
    pub certificate_directory: Option<PathBuf>,
    pub decryption_keys: Option<Vec<String>>,
    pub insecure_skip_tls_verification: Option<bool>,
    pub skopeo_cmd: Option<Command>,
}

Configuration for the proxy.

We re-export this rather than inventing our own wrapper in the interest of avoiding duplication. Configuration for the proxy.

Fields

authfile: Option<PathBuf>

Path to container auth file; equivalent to skopeo --authfile. This conflicts with [auth_data].

auth_data: Option<File>

Data stream for container auth. This conflicts with [authfile].

auth_anonymous: bool

Do not use default container authentication paths; equivalent to skopeo --no-creds.

Defaults to false; in other words, use the default file paths from man containers-auth.json.

certificate_directory: Option<PathBuf>

decryption_keys: Option<Vec<String>>

Decryption keys to decrypt an encrypted container image. equivalent to skopeo copy --decryption-key <path_to_decryption_key>

insecure_skip_tls_verification: Option<bool>

If set, disable TLS verification. Equivalent to skopeo --tls-verify=false.

skopeo_cmd: Option<Command>

Provide a configured std::process::Command instance.

This allows configuring aspects of the resulting child skopeo process. The intention of this hook is to allow the caller to use e.g. systemd-run or equivalent containerization tools. For example you can set up a command whose arguments are systemd-run -Pq -p DynamicUser=yes -- skopeo. You can also set up arbitrary aspects of the child via e.g. current_dir pre_exec.

The default is to wrap via util-linux setpriv --pdeathsig SIGTERM -- skopeo, which on Linux binds the lifecycle of the child process to the parent.

Note that you must add skopeo as the primary argument or indirectly. However, all other command line options including experimental-image-proxy will be injected by this library. You may use a different command name from skopeo if your application has set up a compatible copy, e.g. /usr/lib/myapp/my-private-skopeo/

Trait Implementations

impl Debug for ImageProxyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for ImageProxyConfig

fn default() -> ImageProxyConfig

Returns the “default value” for a type.