Struct ContainerSecurity 

pub struct ContainerSecurity {
    pub seccomp: ContainerSeccomp,
    pub capabilities_drop: Vec<String>,
    pub capabilities_add: Vec<String>,
    pub no_new_privileges: bool,
    pub run_as_user: Option<u32>,
    pub run_as_group: Option<u32>,
}

Security parameters for the container.

Fields

seccomp: ContainerSeccomp

Seccomp profile to apply.

capabilities_drop: Vec<String>

Capabilities to drop (e.g. ["ALL"]).

capabilities_add: Vec<String>

Capabilities to add after dropping.

no_new_privileges: bool

Set PR_SET_NO_NEW_PRIVS before exec.

run_as_user: Option<u32>

Run as this UID (None = inherit).

run_as_group: Option<u32>

Run as this GID (None = inherit).

Trait Implementations

impl Clone for ContainerSecurity

fn clone(&self) -> ContainerSecurity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ContainerSecurity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ContainerSecurity

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ContainerSecurity

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.