Struct Config 

pub struct Config {

    pub root: Vec<u8>,
    pub bindings: Vec<Binding>,
    pub cwd: Vec<u8>,
    pub cwd_default: bool,
    pub kill_on_exit: bool,
    pub verbose: i32,
    pub command: Vec<CString>,
    pub env: Option<Vec<CString>>,
    pub kernel_release: Option<Vec<u8>>,
    pub fake_root: bool,
    pub threads: usize,
    pub spin_us: u64,
    pub cleanup_dirs: Vec<Vec<u8>>,
    pub seccomp_programs: Vec<Vec<u8>>,
    pub info_fds: Vec<i32>,
    pub json_status_fds: Vec<i32>,
    pub new_session: bool,
    pub hostname: Option<Vec<u8>>,
    pub argv0: Option<CString>,
    pub bwrap_mode: bool,
}

Everything the launcher needs to start the traced command.

Fields

root: Vec<u8>

Host directory used as the guest /.

bindings: Vec<Binding>

Bind mounts, in command-line order; later entries win on equal prefix.

cwd: Vec<u8>

Initial working directory, as a guest path.

cwd_default: bool

cwd was not given on the command line: it is the caller’s working directory, to be kept only where the guest can see it.

kill_on_exit: bool

Kill every tracee when the supervisor exits.

verbose: i32

Verbosity, 0 is quiet.

command: Vec<CString>

Command and arguments to run inside the guest; argv[0] first.

env: Option<Vec<CString>>

Environment for the command, or None to inherit the supervisor’s.

kernel_release: Option<Vec<u8>>

Value reported by uname(2) in the release field, if faked.

fake_root: bool

Pretend to be root (fake_id0). Accepted but not implemented yet.

threads: usize

Number of supervisor threads answering seccomp notifications.

spin_us: u64

Microseconds a supervisor thread spins before parking.

cleanup_dirs: Vec<Vec<u8>>

Directories to remove recursively once the tracer returns (bwrap mode).

seccomp_programs: Vec<Vec<u8>>

Extra classic-BPF seccomp programs (raw sock_filter bytes) the first tracee installs after ours (bwrap --seccomp/--add-seccomp-fd).

info_fds: Vec<i32>

Descriptors that receive {"child-pid": N} once the child is forked (bwrap --info-fd).

json_status_fds: Vec<i32>

Descriptors that receive {"child-pid": N} and later {"exit-code": N} (bwrap --json-status-fd).

new_session: bool

Run the command in a new session (bwrap --new-session).

hostname: Option<Vec<u8>>

Hostname to report (bwrap --hostname). Not applied yet.

argv0: Option<CString>

argv[0] to give the command when it differs from command[0] (bwrap --argv0).

bwrap_mode: bool

Invoked through the bubblewrap front end: failures are worded as bwrap words them.

Trait Implementations

impl Clone for Config

fn clone(&self) -> Config

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Config

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Config

fn default() -> Self

Builds the configuration equivalent to running proot with no option.