Struct ContainerConfig 

pub struct ContainerConfig {
    pub clone_flags: Vec<CloneFlag>,
    pub network_isolation: bool,
    pub user_namespace: bool,
    pub cgroup_namespace: bool,
    pub bind_mounts: Vec<BindMount>,
    pub cgroup_path: Option<String>,
    pub security: ContainerSecurity,
    pub command: String,
    pub args: Vec<String>,
    pub env: HashMap<String, String>,
}

Container configuration — translated to an OCI runtime spec before launch.

Use NamespaceContainer::build_config to derive this from a high-level SandboxConfig.

Fields

clone_flags: Vec<CloneFlag>

Namespace flags to apply.

network_isolation: bool

Isolate the network namespace.

user_namespace: bool

Request a user namespace mapping (rootless containers).

cgroup_namespace: bool

Request a cgroup namespace.

bind_mounts: Vec<BindMount>

Bind mounts to create inside the container.

cgroup_path: Option<String>

Path to the agent’s cgroup (used for resource limits inside the ns).

security: ContainerSecurity

Security parameters.

command: String

Command to exec inside the container.

args: Vec<String>

Arguments for the command.

env: HashMap<String, String>

Environment variables (complete set — parent env is not inherited inside the namespace unless explicitly passed).

Trait Implementations

impl Clone for ContainerConfig

fn clone(&self) -> ContainerConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ContainerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ContainerConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ContainerConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.