2ddec79102
- Add `json` tags for `oci_version` and `no_new_privileges` - Add `json` tag for `additional_gids` in `User` struct - Add `json` tags for `typ` in `Rlimit`, `Mount`, `LinuxNamespace` - Add `json` tags for path and ID mapping fields in `Linux` - Add `json` tags for `file_mode`, `container_id`, `host_id`
239 lines
3.5 KiB
V
239 lines
3.5 KiB
V
module crun
|
|
|
|
// OCI Runtime Spec structures that can be directly encoded to JSON
|
|
pub struct Spec {
|
|
pub mut:
|
|
oci_version string @[json: 'ociVersion']
|
|
platform Platform
|
|
process Process
|
|
root Root
|
|
hostname string
|
|
mounts []Mount
|
|
linux Linux
|
|
hooks Hooks
|
|
}
|
|
|
|
pub struct Platform {
|
|
pub mut:
|
|
os string = 'linux'
|
|
arch string = 'amd64'
|
|
}
|
|
|
|
pub struct Process {
|
|
pub mut:
|
|
terminal bool = true
|
|
user User
|
|
args []string
|
|
env []string
|
|
cwd string = '/'
|
|
capabilities Capabilities
|
|
rlimits []Rlimit
|
|
no_new_privileges bool @[json: 'noNewPrivileges']
|
|
}
|
|
|
|
pub struct User {
|
|
pub mut:
|
|
uid u32
|
|
gid u32
|
|
additional_gids []u32 @[json: 'additionalGids']
|
|
}
|
|
|
|
pub struct Capabilities {
|
|
pub mut:
|
|
bounding []string
|
|
effective []string
|
|
inheritable []string
|
|
permitted []string
|
|
ambient []string
|
|
}
|
|
|
|
pub struct Rlimit {
|
|
pub mut:
|
|
typ string @[json: 'type']
|
|
hard u64
|
|
soft u64
|
|
}
|
|
|
|
pub struct Root {
|
|
pub mut:
|
|
path string
|
|
readonly bool
|
|
}
|
|
|
|
pub struct Mount {
|
|
pub mut:
|
|
destination string
|
|
typ string @[json: 'type']
|
|
source string
|
|
options []string
|
|
}
|
|
|
|
pub struct Linux {
|
|
pub mut:
|
|
namespaces []LinuxNamespace
|
|
resources LinuxResources
|
|
devices []LinuxDevice
|
|
masked_paths []string @[json: 'maskedPaths']
|
|
readonly_paths []string @[json: 'readonlyPaths']
|
|
uid_mappings []LinuxIDMapping @[json: 'uidMappings']
|
|
gid_mappings []LinuxIDMapping @[json: 'gidMappings']
|
|
}
|
|
|
|
pub struct LinuxNamespace {
|
|
pub mut:
|
|
typ string @[json: 'type']
|
|
path string
|
|
}
|
|
|
|
pub struct LinuxResources {
|
|
pub mut:
|
|
memory Memory
|
|
cpu CPU
|
|
pids Pids
|
|
blkio BlockIO
|
|
}
|
|
|
|
pub struct Memory {
|
|
pub mut:
|
|
limit u64
|
|
reservation u64
|
|
swap u64
|
|
kernel u64
|
|
swappiness i64
|
|
}
|
|
|
|
pub struct CPU {
|
|
pub mut:
|
|
shares u64
|
|
quota i64
|
|
period u64
|
|
cpus string
|
|
mems string
|
|
}
|
|
|
|
pub struct Pids {
|
|
pub mut:
|
|
limit i64
|
|
}
|
|
|
|
pub struct BlockIO {
|
|
pub mut:
|
|
weight u16
|
|
}
|
|
|
|
pub struct LinuxDevice {
|
|
pub mut:
|
|
path string
|
|
typ string @[json: 'type']
|
|
major i64
|
|
minor i64
|
|
file_mode u32 @[json: 'fileMode']
|
|
uid u32
|
|
gid u32
|
|
}
|
|
|
|
pub struct LinuxIDMapping {
|
|
pub mut:
|
|
container_id u32 @[json: 'containerID']
|
|
host_id u32 @[json: 'hostID']
|
|
size u32
|
|
}
|
|
|
|
pub struct Hooks {
|
|
pub mut:
|
|
prestart []Hook
|
|
poststart []Hook
|
|
poststop []Hook
|
|
}
|
|
|
|
pub struct Hook {
|
|
pub mut:
|
|
path string
|
|
args []string
|
|
env []string
|
|
}
|
|
|
|
// Enums for type safety but convert to strings
|
|
pub enum MountType {
|
|
bind
|
|
tmpfs
|
|
proc
|
|
sysfs
|
|
devpts
|
|
nfs
|
|
overlay
|
|
}
|
|
|
|
pub enum MountOption {
|
|
rw
|
|
ro
|
|
noexec
|
|
nosuid
|
|
nodev
|
|
rbind
|
|
relatime
|
|
strictatime
|
|
mode
|
|
size
|
|
}
|
|
|
|
pub enum Capability {
|
|
cap_chown
|
|
cap_dac_override
|
|
cap_dac_read_search
|
|
cap_fowner
|
|
cap_fsetid
|
|
cap_kill
|
|
cap_setgid
|
|
cap_setuid
|
|
cap_setpcap
|
|
cap_linux_immutable
|
|
cap_net_bind_service
|
|
cap_net_broadcast
|
|
cap_net_admin
|
|
cap_net_raw
|
|
cap_ipc_lock
|
|
cap_ipc_owner
|
|
cap_sys_module
|
|
cap_sys_rawio
|
|
cap_sys_chroot
|
|
cap_sys_ptrace
|
|
cap_sys_pacct
|
|
cap_sys_admin
|
|
cap_sys_boot
|
|
cap_sys_nice
|
|
cap_sys_resource
|
|
cap_sys_time
|
|
cap_sys_tty_config
|
|
cap_mknod
|
|
cap_lease
|
|
cap_audit_write
|
|
cap_audit_control
|
|
cap_setfcap
|
|
cap_mac_override
|
|
cap_mac_admin
|
|
cap_syslog
|
|
cap_wake_alarm
|
|
cap_block_suspend
|
|
cap_audit_read
|
|
}
|
|
|
|
pub enum RlimitType {
|
|
rlimit_cpu
|
|
rlimit_fsize
|
|
rlimit_data
|
|
rlimit_stack
|
|
rlimit_core
|
|
rlimit_rss
|
|
rlimit_nproc
|
|
rlimit_nofile
|
|
rlimit_memlock
|
|
rlimit_as
|
|
rlimit_lock
|
|
rlimit_sigpending
|
|
rlimit_msgqueue
|
|
rlimit_nice
|
|
rlimit_rtprio
|
|
rlimit_rttime
|
|
}
|