Versions in this module Expand all Collapse all v0 v0.7.23 Jul 23, 2026 v0.7.22 Jul 23, 2026 v0.7.21 Jul 21, 2026 v0.7.20 Jul 19, 2026 v0.7.19 Jul 19, 2026 v0.7.18 Jul 19, 2026 v0.7.17 Jul 19, 2026 v0.7.16 Jul 18, 2026 Changes in this version type Config + EgressPoolSize int v0.7.15 Jul 18, 2026 Changes in this version + const DefaultGroupKey + const GroupPerSandbox + const GroupPerTenant + func SanitizeGroupKey(key string) (string, error) + func SeccompAllowlist(jitless bool) []string + func SeccompNeverAllow() []string + type BundleResolver interface + Resolve func(ctx context.Context, tenant, ref string) (*jsbundle.Bundle, error) + func NewBundleResolver(inner *jsbundle.Resolver) BundleResolver + type Config struct + GroupGranularity string + IdleTTL time.Duration + JailChrootBase string + JailGID int + JailUID int + Jitless bool + RunDir string + UseJail bool + WorkerdPath string + func FromDaemonConfig(cfg config.Config) Config + type Driver struct + func New(cfg Config, logger *slog.Logger) *Driver + func (d *Driver) Create(ctx context.Context, req models.CreateSandboxRequest, ...) (*models.SandboxRuntimeState, error) + func (d *Driver) CreateSnapshot(ctx context.Context, sandboxID, imageRef string) (string, error) + func (d *Driver) Destroy(ctx context.Context, sandbox *models.Sandbox) error + func (d *Driver) DrainNetworkByteCounters() map[string]struct{ ... } + func (d *Driver) EnsureHTTPListener(ctx context.Context, sandboxID string, guestPort int) (string, error) + func (d *Driver) Inspect(ctx context.Context, sandboxID string) (*models.SandboxRuntimeState, error) + func (d *Driver) InvokeHTTP(ctx context.Context, sandboxID string, r *http.Request) (*http.Response, error) + func (d *Driver) ListManaged(ctx context.Context) (map[string]*models.SandboxRuntimeState, error) + func (d *Driver) Ping(ctx context.Context) error + func (d *Driver) ReleaseHTTPListener(sandboxID string, guestPort int) + func (d *Driver) RemoveImage(ctx context.Context, imageRef string) error + func (d *Driver) Resize(ctx context.Context, sandboxID string, req models.ResizeSandboxRequest) error + func (d *Driver) RunIdleReaper(ctx context.Context) + func (d *Driver) ServeToolbox(ctx context.Context, sandboxID, token string, w http.ResponseWriter, ...) + func (d *Driver) SetBundleResolver(r BundleResolver) + func (d *Driver) SetHostSupervisor(s HostSupervisor) + func (d *Driver) SetNetworkBlocks(sandboxID string, blockIngress, blockEgress bool) + func (d *Driver) SetWarmPool(p WarmPool) + func (d *Driver) Start(ctx context.Context, sandboxID string) (*models.SandboxRuntimeState, error) + func (d *Driver) Stop(ctx context.Context, sandboxID string) error + func (d *Driver) SyncAllowedPorts(sandboxID string, ports []int) + type EgressPolicy struct + Allow []string + BlockAll bool + Deny []string + type EgressPolicySetter interface + SetEgressPolicy func(sandboxID string, p EgressPolicy) + type GroupHost interface + Invoke func(ctx context.Context, id string, r *http.Request) (*http.Response, error) + Load func(id string, b *jsbundle.Bundle) error + LoadedCount func() int + Stop func() error + Unload func(id string) int + type HostSupervisor interface + SpawnGroup func(ctx context.Context, spec JailSpec) (GroupHost, error) + func NewHostSupervisor(cfg Config) HostSupervisor + type JailSpec struct + CPUQuota float64 + CgroupName string + ChrootDir string + GID int + GroupKey string + Jitless bool + MemoryLimitMB int + UID int + func BuildJailSpec(cfg Config, groupKey string, cpu float64, memoryMB int) (JailSpec, error) + func (s JailSpec) SeccompAllowlistFor() []string + func (s JailSpec) Validate() error + type NetworkByteCounter interface + DrainNetworkByteCounters func() map[string]struct{ ... } + type NetworkPolicySink interface + SetNetworkBlocks func(sandboxID string, blockIngress, blockEgress bool) + type PortGateway interface + EnsureHTTPListener func(ctx context.Context, sandboxID string, guestPort int) (dialAddr string, err error) + ReleaseHTTPListener func(sandboxID string, guestPort int) + SyncAllowedPorts func(sandboxID string, ports []int) + func AsPortGateway(rt any) (PortGateway, bool) + type ToolboxHost interface + ServeToolbox func(ctx context.Context, sandboxID, token string, w http.ResponseWriter, ...) + func AsToolboxHost(rt any) (ToolboxHost, bool) + type WarmPool interface + Acquire func(ctx context.Context) (GroupHost, bool)
Go to main page