sandbox

Documentation

Overview

Package sandbox orchestrates create → proxy/harden → run → destroy.

Index

• type CreateOptions
• type Manager
  • func (m *Manager) Create(ctx context.Context, opt CreateOptions) (driver.Handle, error)
  • func (m *Manager) Exec(ctx context.Context, nameOrID string, req driver.ExecRequest) (driver.ExecResult, error)
  • func (m *Manager) List(ctx context.Context) ([]driver.Info, error)
  • func (m *Manager) Remove(ctx context.Context, nameOrID string) error

Types

type CreateOptions

type CreateOptions struct {
	Spec   driver.Spec
	Policy policy.Document // optional; validated if Version != 0
}

CreateOptions are host-side inputs for a new sandbox.

type Manager

type Manager struct {
	Driver driver.ComputeDriver
	Proxy  proxy.EgressProxy
}

Manager owns sandbox lifecycle for one host.

func (*Manager) Create

func (m *Manager) Create(ctx context.Context, opt CreateOptions) (driver.Handle, error)

Create validates policy (if set), applies proxy policy, creates and starts the sandbox.

func (*Manager) Exec

func (m *Manager) Exec(ctx context.Context, nameOrID string, req driver.ExecRequest) (driver.ExecResult, error)

Exec runs a command inside a named sandbox.

func (*Manager) List

func (m *Manager) List(ctx context.Context) ([]driver.Info, error)

List returns known sandboxes.

func (*Manager) Remove

func (m *Manager) Remove(ctx context.Context, nameOrID string) error

Remove stops and deletes a sandbox by name or id.