Enum GrantRuntime 

pub enum GrantRuntime {
    Container,
    Native,
    MicroVm,
}

Which runtime the grant admits. Mirrors the NATIVE_EXEC_ANNOTATION marker rather than re-deriving it: a native forge is fork+exec’d on the host with no container boundary at all, which is a materially different thing to admit.

Variants

Container

Container backend (the default shape).

Native

Host fork+exec — no container boundary. See WorkloadSpec::wants_native_exec.

MicroVm

KVM guest with its own kernel — a stronger boundary than a container, not a weaker one. See WorkloadSpec::wants_microvm (R605-F8).

It is nonetheless a distinct runtime in the grant rather than being folded into Self::Container, because a grant states what it admits: a recipe signed to run in a container and a recipe signed to run in a microVM differ in what the argv can reach (its own kernel, its own device set, a host filesystem it sees only through the drives kamaji attaches), and one describing the other would be false in both directions.

Trait Implementations

impl Clone for GrantRuntime

fn clone(&self) -> GrantRuntime

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for GrantRuntime

impl Debug for GrantRuntime

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for GrantRuntime

impl PartialEq for GrantRuntime

fn eq(&self, other: &GrantRuntime) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for GrantRuntime