Skip to main contentModule linux
Source Expand description
Linux sandbox backends.
Dispatches between:
cgroup — cgroup v2 resource tracking + optional AppArmor enforcement
namespace — full namespace isolation via OCI runtime (runc/crun)
pub use cgroup::CgroupV2Manager;pub use namespace::NamespaceContainer;
- cgroup
- cgroup v2 resource manager.
- namespace
- Linux namespace container via an OCI runtime (runc or crun).