Struct SandboxConfigBuilder 

pub struct SandboxConfigBuilder { /* private fields */ }

Builder for SandboxConfig.

Implementations

impl SandboxConfigBuilder

pub fn new() -> Self

Create a new builder with default values.

Example:

use procjail::SandboxConfigBuilder;

let config = SandboxConfigBuilder::new().build();
assert_eq!(config.timeout_seconds, 60);

pub fn runtime(self, path: &str) -> Self

Set the runtime binary path.

pub fn runtime_args(self, args: &[&str]) -> Self

Add arguments to pass to the runtime before the harness script.

pub fn max_memory_mb(self, mb: u64) -> Self

Set maximum memory in megabytes.

pub fn max_memory_bytes(self, bytes: u64) -> Self

Set maximum memory in bytes.

pub fn max_cpu_seconds(self, seconds: u64) -> Self

Set maximum CPU time in seconds.

pub fn max_fds(self, fds: u64) -> Self

Set maximum open file descriptors.

pub fn max_disk_mb(self, mb: u64) -> Self

Set maximum writable disk space in megabytes.

pub fn max_processes(self, n: u64) -> Self

Set maximum child processes/threads.

pub fn allow_localhost(self, allow: bool) -> Self

Allow localhost networking.

pub fn env_passthrough(self, vars: &[&str]) -> Self

Set environment variables to pass through.

pub fn env_set(self, key: &str, value: &str) -> Self

Set additional env vars in the sandbox.

pub fn env_strip_secrets(self, strip: bool) -> Self

Whether to strip known secret env vars.

pub fn env_strip(self, vars: &[&str]) -> Self

Add specific env vars to strip.

pub fn env_mode(self, mode: EnvMode) -> Self

Configure how environment variables are propagated.

pub fn strategy(self, strategy: Strategy) -> Self

Force a specific containment strategy.

pub fn readonly_mount(self, host: &str, container: &str) -> Self

Add a read-only bind mount.

pub fn writable_mount(self, host: &str, container: &str) -> Self

Add a read-write bind mount.

pub fn timeout_seconds(self, seconds: u64) -> Self

Set process timeout in seconds (0 = no timeout).

pub fn capture_stderr(self, capture: bool) -> Self

Capture stderr separately instead of piping to parent.

pub fn build(self) -> SandboxConfig

Build the config.

Example:

use procjail::SandboxConfig;

let config = SandboxConfig::builder().runtime("node").build();
assert_eq!(config.runtime_path.to_string_lossy(), "node");

Trait Implementations

impl Clone for SandboxConfigBuilder

fn clone(&self) -> SandboxConfigBuilder

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfigBuilder

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxConfigBuilder

fn default() -> Self

Returns the “default value” for a type.