Struct podman_api_stubs::models::ContainerSecurityConfig

pub struct ContainerSecurityConfig {

    pub apparmor_profile: Option<String>,
    pub cap_add: Option<Vec<String>>,
    pub cap_drop: Option<Vec<String>>,
    pub groups: Option<Vec<String>>,
    pub idmappings: Option<IdMappingOptions>,
    pub mask: Option<Vec<String>>,
    pub no_new_privileges: Option<bool>,
    pub privileged: Option<bool>,
    pub procfs_opts: Option<Vec<String>>,
    pub read_only_filesystem: Option<bool>,
    pub seccomp_policy: Option<String>,
    pub seccomp_profile_path: Option<String>,
    pub selinux_opts: Option<Vec<String>>,
    pub umask: Option<String>,
    pub unmask: Option<Vec<String>>,
    pub user: Option<String>,
    pub userns: Option<Namespace>,
}

ContainerSecurityConfig is a container’s security features, including SELinux, Apparmor, and Seccomp.

Fields

apparmor_profile: Option<String>

cap_add: Option<Vec<String>>

cap_drop: Option<Vec<String>>

groups: Option<Vec<String>>

idmappings: Option<IdMappingOptions>

mask: Option<Vec<String>>

no_new_privileges: Option<bool>

privileged: Option<bool>

procfs_opts: Option<Vec<String>>

read_only_filesystem: Option<bool>

seccomp_policy: Option<String>

seccomp_profile_path: Option<String>

selinux_opts: Option<Vec<String>>

umask: Option<String>

unmask: Option<Vec<String>>

user: Option<String>

userns: Option<Namespace>

Implementations

impl ContainerSecurityConfig

pub fn new() -> ContainerSecurityConfig

pub fn set_apparmor_profile(&mut self, apparmor_profile: String)

pub fn with_apparmor_profile(
    self,
    apparmor_profile: String
) -> ContainerSecurityConfig

pub fn apparmor_profile(&self) -> Option<&String>

pub fn reset_apparmor_profile(&mut self)

pub fn set_cap_add(&mut self, cap_add: Vec<String>)

pub fn with_cap_add(self, cap_add: Vec<String>) -> ContainerSecurityConfig

pub fn cap_add(&self) -> Option<&Vec<String>>

pub fn reset_cap_add(&mut self)

pub fn set_cap_drop(&mut self, cap_drop: Vec<String>)

pub fn with_cap_drop(self, cap_drop: Vec<String>) -> ContainerSecurityConfig

pub fn cap_drop(&self) -> Option<&Vec<String>>

pub fn reset_cap_drop(&mut self)

pub fn set_groups(&mut self, groups: Vec<String>)

pub fn with_groups(self, groups: Vec<String>) -> ContainerSecurityConfig

pub fn groups(&self) -> Option<&Vec<String>>

pub fn reset_groups(&mut self)

pub fn set_idmappings(&mut self, idmappings: IdMappingOptions)

pub fn with_idmappings(
    self,
    idmappings: IdMappingOptions
) -> ContainerSecurityConfig

pub fn idmappings(&self) -> Option<&IdMappingOptions>

pub fn reset_idmappings(&mut self)

pub fn set_mask(&mut self, mask: Vec<String>)

pub fn with_mask(self, mask: Vec<String>) -> ContainerSecurityConfig

pub fn mask(&self) -> Option<&Vec<String>>

pub fn reset_mask(&mut self)

pub fn set_no_new_privileges(&mut self, no_new_privileges: bool)

pub fn with_no_new_privileges(
    self,
    no_new_privileges: bool
) -> ContainerSecurityConfig

pub fn no_new_privileges(&self) -> Option<&bool>

pub fn reset_no_new_privileges(&mut self)

pub fn set_privileged(&mut self, privileged: bool)

pub fn with_privileged(self, privileged: bool) -> ContainerSecurityConfig

pub fn privileged(&self) -> Option<&bool>

pub fn reset_privileged(&mut self)

pub fn set_procfs_opts(&mut self, procfs_opts: Vec<String>)

pub fn with_procfs_opts(
    self,
    procfs_opts: Vec<String>
) -> ContainerSecurityConfig

pub fn procfs_opts(&self) -> Option<&Vec<String>>

pub fn reset_procfs_opts(&mut self)

pub fn set_read_only_filesystem(&mut self, read_only_filesystem: bool)

pub fn with_read_only_filesystem(
    self,
    read_only_filesystem: bool
) -> ContainerSecurityConfig

pub fn read_only_filesystem(&self) -> Option<&bool>

pub fn reset_read_only_filesystem(&mut self)

pub fn set_seccomp_policy(&mut self, seccomp_policy: String)

pub fn with_seccomp_policy(
    self,
    seccomp_policy: String
) -> ContainerSecurityConfig

pub fn seccomp_policy(&self) -> Option<&String>

pub fn reset_seccomp_policy(&mut self)

pub fn set_seccomp_profile_path(&mut self, seccomp_profile_path: String)

pub fn with_seccomp_profile_path(
    self,
    seccomp_profile_path: String
) -> ContainerSecurityConfig

pub fn seccomp_profile_path(&self) -> Option<&String>

pub fn reset_seccomp_profile_path(&mut self)

pub fn set_selinux_opts(&mut self, selinux_opts: Vec<String>)

pub fn with_selinux_opts(
    self,
    selinux_opts: Vec<String>
) -> ContainerSecurityConfig

pub fn selinux_opts(&self) -> Option<&Vec<String>>

pub fn reset_selinux_opts(&mut self)

pub fn set_umask(&mut self, umask: String)

pub fn with_umask(self, umask: String) -> ContainerSecurityConfig

pub fn umask(&self) -> Option<&String>

pub fn reset_umask(&mut self)

pub fn set_unmask(&mut self, unmask: Vec<String>)

pub fn with_unmask(self, unmask: Vec<String>) -> ContainerSecurityConfig

pub fn unmask(&self) -> Option<&Vec<String>>

pub fn reset_unmask(&mut self)

pub fn set_user(&mut self, user: String)

pub fn with_user(self, user: String) -> ContainerSecurityConfig

pub fn user(&self) -> Option<&String>

pub fn reset_user(&mut self)

pub fn set_userns(&mut self, userns: Namespace)

pub fn with_userns(self, userns: Namespace) -> ContainerSecurityConfig

pub fn userns(&self) -> Option<&Namespace>

pub fn reset_userns(&mut self)

Trait Implementations

impl Clone for ContainerSecurityConfig

fn clone(&self) -> ContainerSecurityConfig

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ContainerSecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ContainerSecurityConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
    __D: Deserializer<'de>, 

Deserialize this value from the given Serde deserializer.

impl PartialEq<ContainerSecurityConfig> for ContainerSecurityConfig

fn eq(&self, other: &ContainerSecurityConfig) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &ContainerSecurityConfig) -> bool

This method tests for !=.

impl Serialize for ContainerSecurityConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error> where
    __S: Serializer, 

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ContainerSecurityConfig