Struct ContainerConfig 

pub struct ContainerConfig {

    pub id: u32,
    pub name: String,
    pub image: String,
    pub cpu_cores: u32,
    pub memory_mb: u32,
    pub storage_gb: u32,
    pub password: String,
    pub ssh_key: Option<String>,
    pub host_port: Option<u16>,
    pub template_ports: Vec<PortMapping>,
    pub template_env: HashMap<String, String>,
    pub extra_runtime_args: Vec<String>,
    pub data_path: Option<String>,
    pub volume_encryption_key: Option<[u8; 32]>,
}

Fields

id: u32

name: String

image: String

cpu_cores: u32

memory_mb: u32

storage_gb: u32

password: String

ssh_key: Option<String>

host_port: Option<u16>

SSH host-port forwarding (LXD/Proxmox: SSH access). Distinct from template_ports which are workload-specific.

template_ports: Vec<PortMapping>

Workload ports the consumer reaches (e.g. nostr-relay 7777, bitcoind RPC 18443). Empty for non-template spawns. Docker backend translates each to -p host:container; LXD/Proxmox backends ignore for now.

template_env: HashMap<String, String>

Workload environment variables (template defaults + consumer overrides). Docker backend passes via -e KEY=VAL.

extra_runtime_args: Vec<String>

Extra docker run flags from the template definition (e.g. --ulimit nofile=1048576:1048576 for strfry). LXD/Proxmox backends ignore these.

data_path: Option<String>

In-container path for the workload’s persistent state. Docker backend mounts a vmid-scoped volume there. None = stateless (no volume created).

volume_encryption_key: Option<[u8; 32]>

Optional 32-byte LUKS key for the persistent data volume. When set (Phase 2 of consumer-encrypted-volumes), the DockerBackend creates a LUKS-on-loop file instead of a plain Docker named volume; the key is fed to cryptsetup luksFormat/luksOpen over stdin and never persisted to disk. On delete_container the LUKS header is erased (cryptsetup luksErase) so the keyslots are unrecoverable even if the operator forensically extracts the underlying file.

Provider populates this from EncryptedSpawnPodRequest.volume_encryption.decoded_key() when present; None means a plain volume (today’s default). data_path: None makes this field a no-op (stateless workloads have nothing to encrypt).

Trait Implementations

impl Clone for ContainerConfig

fn clone(&self) -> ContainerConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ContainerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.