fiberd

type API struct {
	Listen string // -listen
	HTTP   string // -http
	TLS    TLS
}

type Audit struct{ Key string } // -audit-key

type Cloudhv struct {
	VMM         string // -cloudhv-vmm
	Kernel      string // -cloudhv-kernel
	Rootfs      string // -cloudhv-rootfs
	MemoryMiB   uint64 // -cloudhv-memory-mib
	RestoreMode string // -cloudhv-restore-mode
}

type Config struct {
	Node     Node
	API      API
	Trust    Trust
	Runtime  Runtime
	Endpoint Endpoint
	Handoff  Handoff
	Registry Registry
	Audit    Audit
	// Timing paces the loops. It is not a flag in a release build. Tests
	// and embedding binaries set it, and the testhooks build binds flags
	// on it.
	Timing Timing
	// Ready, when set, is told the bound addresses once every listener
	// is open. A binary or a test that listens on ":0" learns its ports
	// from it. http and handoff are nil when off.
	Ready func(grpc, http, handoff net.Addr)
	// contains filtered or unexported fields
}

type DeltaKeys struct{ Sign, Trust, Seal string } // -delta-key, -delta-trust, -delta-seal-key

type Endpoint struct{ Family, Host string } // -endpoint-family, -endpoint-host

type EndpointHoster interface{ EndpointHost() string }

type Engine struct {
	Command   string // -engine
	UID       uint   // -engine-uid
	MemoryMax uint64 // -engine-memory-max
}

type Gvisor struct {
	Rootfs          string // -gvisor-rootfs
	TemplatesOnDisk bool   // -gvisor-templates-on-disk
}

type Handoff struct{ Listen, Key string } // -handoff-listen, -handoff-key

type Helpers struct{ CRIU, Runsc string }

type HomeFactory func(c *Config, jwks *grant.Cache) (home.Home, error)

type Hyperlight struct{ Helper, Guest string } // -hyperlight-helper, -hyperlight-guest

type Node struct {
	ID         string        // -node-id
	StateDir   string        // -state
	CgroupRoot string        // -cgroup-root
	GrantsDir  string        // -grants-dir
	StaleTTL   time.Duration // -stale-ttl
	Devices    []string      // -devices
	AllCaps    bool          // -all-caps
	// DrainTimeout is how long a SIGTERM may spend parking named sessions
	// and ending anonymous fibers before fiberd stops. Zero, the default,
	// stops at once, so the drain is opt-in.
	DrainTimeout time.Duration // -drain-timeout
}

type OwnGranter interface{ OwnGrant() ([]byte, bool) }

type Registry struct {
	Templates string // -registry
	Deltas    string // -delta-registry
	Keys      DeltaKeys
}

type Runc struct{ Rootfs, UsernsPool string } // -runc-rootfs, -userns-pool

type Runtime struct {
	Name         string            // -runtime
	StubTier     string            // -runtime-tier
	Templates    map[string]string // -template
	Parity       string            // -parity
	GrantCeiling uint64            // -grant-ceiling
	FiberHide    []string          // -fiber-hide
	WorkspaceDir string            // -workspace-dir
	Engine       Engine
	Gvisor       Gvisor
	Runc         Runc
	Hyperlight   Hyperlight
	Cloudhv      Cloudhv
	Helpers      Helpers
}

type ScopeLoser interface {
	OnScopeLost(func(ctx context.Context, reason string))
}

type SelfAdmitter interface{ SelfAdmitUID() string }

type TLS struct {
	Cert, Key, ClientCA string // -tls-cert, -tls-key, -client-ca
	InsecurePlaintext   bool   // -insecure-plaintext
}

type Timing struct{ StatusEvery, PressureEvery time.Duration }

type Trust struct {
	Verifier     string        // -verifier
	Issuer       string        // -issuer
	JWKSMaxStale time.Duration // -jwks-max-stale
	MaxLease     time.Duration // -max-lease
}