gleamunison/sandbox_policy

Types

BoundaryRefusal

pub type BoundaryRefusal {
  MissingExternalExecutor
  DirectHostFfiDenied
  NativeJetDenied
  InvalidResourceBudget
}

Constructors

```
MissingExternalExecutor
```
```
DirectHostFfiDenied
```
```
NativeJetDenied
```
```
InvalidResourceBudget
```

ExecutionProfile

</>

pub type ExecutionProfile {
  Local
  AuthenticatedRemote
  UntrustedExecution
}

Constructors

```
Local
```
```
AuthenticatedRemote
```
```
UntrustedExecution
```

ExternalExecutor

</>

pub type ExternalExecutor {
  ExternalExecutor(
    name: String,
    launcher: fn(String, ResourceBudget) -> Result(String, String),
  )
}

Constructors

ExternalExecutor(
  name: String,
  launcher: fn(String, ResourceBudget) -> Result(String, String),
)

ResourceBudget

</>

pub type ResourceBudget {
  ResourceBudget(
    deadline_ms: Int,
    max_processes: Int,
    max_memory_bytes: Int,
    max_reductions: Int,
    max_concurrency: Int,
  )
}

Constructors

ResourceBudget(
  deadline_ms: Int,
  max_processes: Int,
  max_memory_bytes: Int,
  max_reductions: Int,
  max_concurrency: Int,
)

SandboxPolicy

</>

pub type SandboxPolicy {
  SandboxPolicy(
    profile: ExecutionProfile,
    budget: ResourceBudget,
    abilities: capability.Policy,
    direct_host_ffi: Bool,
    native_jets: Bool,
    external_executor: option.Option(ExternalExecutor),
  )
}

Constructors

SandboxPolicy(
  profile: ExecutionProfile,
  budget: ResourceBudget,
  abilities: capability.Policy,
  direct_host_ffi: Bool,
  native_jets: Bool,
  external_executor: option.Option(ExternalExecutor),
)

Values

admit

</>

pub fn admit(
  policy: SandboxPolicy,
) -> Result(SandboxPolicy, BoundaryRefusal)

authenticated_remote

</>

pub fn authenticated_remote(
  abilities: capability.Policy,
) -> SandboxPolicy

capability_refusals

</>

pub fn capability_refusals(
  policy: SandboxPolicy,
  denied: List(String),
) -> List(String)

default_budget

</>

pub fn default_budget() -> ResourceBudget

execute

</>

pub fn execute(
  policy: SandboxPolicy,
  input: String,
) -> Result(String, String)

local

</>

pub fn local(abilities: capability.Policy) -> SandboxPolicy

profile_denies_host_authority

</>

pub fn profile_denies_host_authority(
  policy: SandboxPolicy,
) -> Bool

profile_name

</>

pub fn profile_name(profile: ExecutionProfile) -> String

refusal_name

</>

pub fn refusal_name(refusal: BoundaryRefusal) -> String

require_no_host_authority

</>

pub fn require_no_host_authority(
  keys: List(String),
) -> Result(Nil, String)

untrusted

</>

pub fn untrusted(
  abilities: capability.Policy,
  external_executor: option.Option(ExternalExecutor),
) -> SandboxPolicy