Struct IdRanges 

pub struct IdRanges {
    pub user: String,
    pub from_env: bool,
    pub uid: u32,
    pub subuid: String,
    pub subgid: String,
}

The account QCode runs as and what /etc/passwd, /etc/subuid and /etc/subgid say, which is everything needed to know whether rootless podman can map the ids an image uses.

Plain data, so every case is checked without touching the machine’s files; only IdRanges::here reads them.

Fields

user: String

The account’s name.

from_env: bool

Whether user is the name the environment gave. It is not when the environment named nobody, which is the case for a qcode a service or env -i started: the name then comes from /etc/passwd, so IdRanges::line writes it out in full instead of leaving $USER to a shell that has none.

uid: u32

The account’s numeric id; either may stand at the start of a line.

subuid: String

The text of /etc/subuid, empty when it is missing.

subgid: String

The text of /etc/subgid, empty when it is missing.

Implementations

impl IdRanges

pub fn here() -> Self

Reads this machine: the account from the environment, or from /etc/passwd when the environment names nobody, the owner of this process, and the two id files as they are. A file that cannot be read counts as empty, which is what podman makes of it too.

pub fn of( environment: Option<&str>, uid: u32, passwd: &str, subuid: &str, subgid: &str, ) -> Self

The ranges of the account environment names, or of the one the passwd file holds for uid when the environment names nobody.

/etc/subuid names an account by name far more often than by number, so an empty name makes a machine on which podman works look like one that has no id ranges for it: the account is read from passwd, whose own lines name every account there is.

The files are parameters so a test can describe any machine from any other one.

pub fn present(&self) -> bool

Whether both files give this account a range.

pub fn line(&self) -> String

The line that gives this account a range in both files, then tells podman to take it up.

The range starts after every range either file already hands out, so it never overlaps another account’s: two accounts sharing ids could read each other’s container files. $USER is left for the shell, which knows the name for certain; a name /etc/passwd gave is written out instead, because a shell as bare as the one this program was started from would leave $USER empty and usermod would range nobody.

Trait Implementations

impl Clone for IdRanges

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IdRanges

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for IdRanges

impl PartialEq for IdRanges

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for IdRanges