Crate reverie_process 

A drop-in replacement for std::process::Command that provides the ability to set up namespaces, a seccomp filter, and more.

Modules

seccomp

Provides helpers for constructing a seccomp filter. This is a pure Rust implementation and does not require libseccomp.

Structs

Bind

Represents a bind mount. Can be converted into a Mount.

Child

Represents a child process.

ChildStartContext

Child-only setup context, constructed after namespace/filesystem setup.

ChildStderr

A handle to a child process’s stderr.

ChildStdin

A handle to a child process’s standard input (stdin).

ChildStdout

A handle to a child process’s standard output (stdout).

Command

A builder for spawning a process.

Container

A Container is a configuration of how a process shall be spawned. It can, but doesn’t have to, include Linux namespace configuration.

DeferredContainerRun

A provisional container result whose successful value remains owned by its mandatory cleanup check.

Error

An error from spawning a process. This is a thin wrapper around crate::Errno, but with more context about what went wrong.

Mount

A mount.

MountFlags

Used with mount.

Namespace

A namespace that may be unshared with Command::unshare.

Output

The output of a finished process.

OwnedContainerCleanup

Retains the atomically acquired child identity and exclusive wait obligation.

OwnedDecodeFailure

Decode refusal retaining the complete bytes and genuine child status.

OwnedDeferredContainerRun

A complete encoded result whose original child has not yet been settled.

OwnedFinalization

Encoded bytes and the child, retained through pending or failed cleanup. No generic result value has been deserialized in the parent.

OwnedReapedResult

A successful child wait plus original encoded bytes. Decode is deliberately separate.

ParentStartContext

Parent-only startup context bound to this invocation’s unreaped child.

Pid

A process ID (PID).

Pty

Represents a pseudo-TTY “master”.

PtyChild

A pseudo-TTY child (or “slave” in TTY parlance). This is passed to child processes.

Stdio

Describes what to do with a standard I/O stream for a child process when passed to the stdin, stdout, and stderr methods of Command.

Enums

ChildCleanupObservation

An observation of the original child, never an inferred successful exit.

Context

Context associated with Error. Useful for knowing which particular part of super::Command::spawn failed.

ExitStatus

Describes the result of a process after it has exited.

MountParseError

An error from parsing a mount.

OwnedFinalize

The distinction between real completion, persistent failure and an owned pending wait.

OwnedRunFailure

The original failure, separate from subsequent cleanup observations.

RunError

An error that ocurred while running a containerized function.

Signal

Types of operating system signals

StartupError

Failure of the finite container startup exchange.

StartupOwnedFailure

An owned startup or result-acquisition refusal. Every post-clone failure retains the real child, including failures from an owned deferred workload.

StartupRunError

A startup failure together with the actual owned-child cleanup outcome.

Constants

MAX_STARTUP_FDS

Maximum number of owned descriptors transferred by one container startup.