service

func (*Service) Capacity ¶

func (s *Service) Capacity() capacity.Snapshot

Capacity returns the admitter's current snapshot. Returns the zero value when no admitter is configured (e.g. in tests).

func (*Service) CreateSandbox ¶

func (s *Service) CreateSandbox(ctx context.Context, req models.CreateSandboxRequest) (*models.CreateSandboxResponse, error)

func (*Service) DestroySandbox ¶

func (s *Service) DestroySandbox(ctx context.Context, id string) error

func (*Service) ExposePort ¶

func (s *Service) ExposePort(ctx context.Context, id string, port int) (string, error)

func (*Service) GetSandbox ¶

func (s *Service) GetSandbox(ctx context.Context, id string) (*models.Sandbox, error)

func (*Service) Health ¶

func (s *Service) Health(ctx context.Context) (models.HealthStatus, error)

func (*Service) ListMounts ¶

func (s *Service) ListMounts(ctx context.Context, sandboxID string) ([]models.MountSpecRedacted, error)

ListMounts returns the redacted mount config for a sandbox. Credentials are never included in the response — they are write-only via CreateSandbox.

func (*Service) ListSandboxes ¶

func (s *Service) ListSandboxes(ctx context.Context) ([]*models.Sandbox, error)

func (*Service) Reconcile ¶

func (s *Service) Reconcile(ctx context.Context) error

func (*Service) ReplayReservations ¶

func (s *Service) ReplayReservations(ctx context.Context)

ReplayReservations re-populates the admitter from persistent state. Without this, after a daemon restart the admitter sees zero reservations and the host can be overcommitted on the first wave of new sandboxes. Destroyed sandboxes are skipped — they still occupy a row but no longer hold resources. Best-effort: a store error is logged, not returned, since admission control degrading to "unaware" is preferable to refusing to boot.

func (*Service) ResizeSandbox ¶

func (s *Service) ResizeSandbox(ctx context.Context, id string, req models.ResizeSandboxRequest) (*models.Sandbox, error)

func (*Service) StartEventMonitor ¶

func (s *Service) StartEventMonitor(ctx context.Context)

StartEventMonitor launches the Docker event consumer goroutine. It is the realtime counterpart to Reconcile() — when a container dies, OOM-kills, or is destroyed out-of-band, this loop updates the DB and tears down routes within ~1s instead of waiting for the next reconcile tick.

func (*Service) StartLifecycleSweep ¶

func (s *Service) StartLifecycleSweep(ctx context.Context)

StartLifecycleSweep launches the per-sandbox lifecycle ticker. Every minute it evaluates each sandbox's Lifecycle timers (StopIfIdleFor / DestroyIfIdleFor / StopAtAge / DestroyAtAge) plus the legacy global SB_IDLE_TIMEOUT_MIN fallback for sandboxes that don't declare any per-sandbox timers. Without either configured, the sweep still runs but is a no-op — kept on so a later UpdateLifecycle call doesn't need to start a goroutine.

func (*Service) StartReconcileLoop ¶

func (s *Service) StartReconcileLoop(ctx context.Context)

func (*Service) StartSandbox ¶

func (s *Service) StartSandbox(ctx context.Context, id string) (*models.Sandbox, error)

func (*Service) StopSandbox ¶

func (s *Service) StopSandbox(ctx context.Context, id string) (*models.Sandbox, error)

func (*Service) TLSDomainAllowed ¶

func (s *Service) TLSDomainAllowed(host string) bool

func (*Service) ToolboxTarget ¶

func (s *Service) ToolboxTarget(ctx context.Context, id string) (ToolboxEndpoint, error)

func (*Service) TouchSandbox ¶

func (s *Service) TouchSandbox(ctx context.Context, id string) error

func (*Service) UnexposePort ¶

func (s *Service) UnexposePort(ctx context.Context, id string, port int) error

func (*Service) UpdateLifecycle ¶

func (s *Service) UpdateLifecycle(ctx context.Context, id string, l models.Lifecycle) (*models.Sandbox, error)

UpdateLifecycle replaces the lifecycle timers on an existing sandbox. Full-replacement semantics: pass zero in any field to clear that timer. The sweep picks up the new values on its next tick (within ~1 minute), so a tightened deadline can fire as soon as the next sweep runs.