jailfs

type Paths struct {
	// Cwd is the directory where Drop was started.
	Cwd string
	// DropHome is the top-level directory where Drop files are stored
	// (e.g. /home/alice/.local/share/drop).
	DropHome string
	// Env is the entry point for all paths specific to the current
	// environment. For example, if envId is 'project-foo', Env is
	// /home/alice/.local/share/drop/envs/project-foo.
	Env string
	// FsRoot is where the root filesystem is assembled before chroot.
	FsRoot string
	// HostHome is the user's home directory on the host system
	// (e.g. /home/alice).
	HostHome string
	// Home is the directory mounted as the home directory in the jail
	// (e.g. /home/alice/.local/share/drop/envs/project-foo/home).
	Home string
	// Etc is the directory mounted as read-only overlay over /etc in the jail
	// (e.g. /home/alice/.local/share/drop/envs/project-foo/etc).
	Etc string
	// Var is the directory mounted as /var in the jail. The original
	// /var is hidden
	// (e.g. /home/alice/.local/share/drop/envs/project-foo/var).
	Var string
	// Tmp is the directory mounted as /tmp in the jail. It is placed as a
	// subdir of the host $TMPDIR to allow standard cleanup mechanisms.
	Tmp string
	// Run holds temporary files and dirs for the current jail instance.
	// It can be safely removed once the jailed process terminates.
	// Run is located within Paths.DropHome.
	Run string
	// Like Run dir, but located in /tmp/drop-{username}/run/.
	//
	// Stores pasta runtime files (pid and log). This ensures no
	// extra configuration is needed on systems where SELinux
	// or AppArmor configs allow pasta to write files only to /tmp.
	//
	// Stores PtySocket. Has a limited total path length (unlike
	// Paths.Run) to mitigate problems with unix socket path length
	// limit (although these can still be hit with custom TMPDIR or very
	// long username).
	RunInTmp string
	// PtySocket is a path to a named socket that the child uses to send
	// pty to the parent.
	PtySocket string
	// EmptyDir is an empty directory used to hide directories in the jail.
	EmptyDir string
	// EmptyFile is an empty file used to hide files in the jail.
	EmptyFile string
}