Struct KernelSandbox 

pub struct KernelSandbox {
    policy: SandboxPolicy,
    kernel_id: Option<KernelId>,
    stats: RwLock<SandboxStats>,
    violations: RwLock<Vec<SandboxViolation>>,
    start_time: RwLock<Option<Instant>>,
    message_count: AtomicU64,
    last_rate_check: RwLock<Instant>,
}

Kernel sandbox for isolation and resource control.

Fields

policy: SandboxPolicy

The sandbox policy

kernel_id: Option<KernelId>

Kernel this sandbox applies to

stats: RwLock<SandboxStats>

Statistics

violations: RwLock<Vec<SandboxViolation>>

Recorded violations

start_time: RwLock<Option<Instant>>

Start time for execution tracking

message_count: AtomicU64

Message count for rate limiting

last_rate_check: RwLock<Instant>

Last rate check time

Implementations

impl KernelSandbox

pub fn new(policy: SandboxPolicy) -> Self

Create a new kernel sandbox.

pub fn apply_to_kernel(&mut self, kernel_id: KernelId)

Apply sandbox to a kernel.

pub fn check_memory(&self, bytes: u64) -> Result<(), SandboxViolation>

Check memory usage against limits.

pub fn check_execution_time(&self) -> Result<(), SandboxViolation>

Check execution time against limits.

pub fn check_k2k(&self, destination: &str) -> Result<(), SandboxViolation>

Check K2K destination against policy.

pub fn check_checkpoint(&self) -> Result<(), SandboxViolation>

Check if checkpointing is allowed.

pub fn check_migration(&self) -> Result<(), SandboxViolation>

Check if migration is allowed.

pub fn record_message(&self) -> Result<(), SandboxViolation>

Record a message for rate limiting.

fn record_violation(&self, violation: SandboxViolation)

Record a violation.

pub fn violations(&self) -> Vec<SandboxViolation>

Get all recorded violations.

pub fn stats(&self) -> SandboxStats

Get sandbox statistics.

pub fn policy(&self) -> &SandboxPolicy

Get the policy.

pub fn reset(&self)

Reset statistics and violations.

Trait Implementations

impl Debug for KernelSandbox

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.