Struct KernelSandbox 

pub struct KernelSandbox {
    policy: SandboxPolicy,
    kernel_id: Option<KernelId>,
    stats: RwLock<SandboxStats>,
    violations: RwLock<Vec<SandboxViolation>>,
    start_time: RwLock<Option<Instant>>,
    message_count: AtomicU64,
    last_rate_check: RwLock<Instant>,
}

Kernel sandbox for isolation and resource control.

Fields

policy: SandboxPolicy

kernel_id: Option<KernelId>

stats: RwLock<SandboxStats>

violations: RwLock<Vec<SandboxViolation>>

start_time: RwLock<Option<Instant>>

message_count: AtomicU64

last_rate_check: RwLock<Instant>

Implementations

impl KernelSandbox

pub fn new(policy: SandboxPolicy) -> KernelSandbox

Create a new kernel sandbox.

pub fn apply_to_kernel(&mut self, kernel_id: KernelId)

Apply sandbox to a kernel.

pub fn check_memory(&self, bytes: u64) -> Result<(), SandboxViolation>

Check memory usage against limits.

pub fn check_execution_time(&self) -> Result<(), SandboxViolation>

Check execution time against limits.

pub fn check_k2k(&self, destination: &str) -> Result<(), SandboxViolation>

Check K2K destination against policy.

pub fn check_checkpoint(&self) -> Result<(), SandboxViolation>

Check if checkpointing is allowed.

pub fn check_migration(&self) -> Result<(), SandboxViolation>

Check if migration is allowed.

pub fn record_message(&self) -> Result<(), SandboxViolation>

Record a message for rate limiting.

pub fn violations(&self) -> Vec<SandboxViolation>

Get all recorded violations.

pub fn stats(&self) -> SandboxStats

Get sandbox statistics.

pub fn policy(&self) -> &SandboxPolicy

Get the policy.

pub fn reset(&self)

Reset statistics and violations.

Trait Implementations

impl Debug for KernelSandbox

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.