Hyper.Cfg.Jails (Hyper v0.1.0)

Copy Markdown View Source

VM confinement settings from the [jails] table — config.toml-only because the setuid helper enforces the same uid_gid_range it reads from this file.

Summary

Functions

cgroup()

Parent cgroup for every VM cgroup. [jails] cgroup, default "hyper".

uid_gid_range()

UID/GID allocation band each VM jail draws from ([jails] uid_gid_range, a required [min, max] integer array). Raises Hyper.Cfg.MissingError when it is unset, and ArgumentError when it is not a pair of integers — a bogus band must never silently confine a VM.

Functions

cgroup()

@spec cgroup() :: String.t()

Parent cgroup for every VM cgroup. [jails] cgroup, default "hyper".

uid_gid_range()

@spec uid_gid_range() :: {integer(), integer()}

UID/GID allocation band each VM jail draws from ([jails] uid_gid_range, a required [min, max] integer array). Raises Hyper.Cfg.MissingError when it is unset, and ArgumentError when it is not a pair of integers — a bogus band must never silently confine a VM.