Module oci 

Rootless Podman-compatible provider for dependency-isolated Linux runners. The runtime is installed by the operator; this adapter never starts a native runner for an isolated policy and never grants a host filesystem mount.

Structs

IsolationSettings

The operator’s isolation settings, in config/isolation.json.

OciProcesses

Enums

Engine

How the provider reaches Podman.

Constants

ROOTFUL_SOCKET

The Podman service socket a rootful engine listens on.

Functions

containers_range

How many subordinate ids file (/etc/subuid or /etc/subgid) gives the containers account that --userns=auto allocates from; 0 when none.

containers_range_needed

How many subordinate ids the containers account needs for a rootful engine: one --userns=auto namespace for each runner the pool can run.