Enum CapPreset 

pub enum CapPreset {
    None,
    Default,
    Monitoring,
    Admin,
}

Predefined capability profiles that bundle commonly-needed Linux capabilities. The profile caps are always emitted; users can add extra capabilities via security.cap_add.

Variants

None

No extra capabilities beyond Podman’s defaults.

Default

Sane default: DAC_READ_SEARCH, PERFMON — needed by tools such as btop and htop for file-descriptor and perf monitoring.

Monitoring

Monitoring / observability: like Default plus SYS_PTRACE, SYS_NICE, SYSLOG.

Admin

Powerful / dangerous: like Monitoring plus SYS_ADMIN, NET_ADMIN. Only use when you trust the container fully.

Implementations

impl CapPreset

pub fn caps(&self) -> &'static [&'static str]

Trait Implementations

impl Clone for CapPreset

fn clone(&self) -> CapPreset

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for CapPreset

impl Debug for CapPreset

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CapPreset

fn default() -> CapPreset

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CapPreset

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for CapPreset

impl PartialEq for CapPreset

fn eq(&self, other: &CapPreset) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for CapPreset

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CapPreset