mirror of
https://github.com/safedep/pmg.git
synced 2026-08-03 07:24:09 +02:00
Abhisek DattaandGitHub
b8588e3df4
* feat: add sandbox DX commands * fix: Linter errors * fix: Sandbox deny log parsing * fix: Sandbox docs * refactor: Maintain SSOT across pkg dependencies * fix: Linter errors
33 lines
1.1 KiB
Go
33 lines
1.1 KiB
Go
// Package platform exposes Render for translating a SandboxPolicy into a
|
|
// driver-specific representation. Each driver's renderer is OS-gated (it
|
|
// imports OS-specific syscalls), so Render returns an error on a non-native
|
|
// host rather than silently producing an inaccurate result.
|
|
package platform
|
|
|
|
import (
|
|
"fmt"
|
|
"runtime"
|
|
|
|
"github.com/safedep/pmg/sandbox"
|
|
)
|
|
|
|
// Render dispatches to the OS-native renderer for driver. On a non-native
|
|
// host it returns a descriptive error so callers (e.g. `profile show
|
|
// --driver=...`) can surface it cleanly.
|
|
func Render(driver sandbox.DriverName, policy *sandbox.SandboxPolicy) ([]byte, error) {
|
|
switch driver {
|
|
case sandbox.DriverSeatbelt:
|
|
return renderSeatbelt(policy)
|
|
case sandbox.DriverBubblewrap:
|
|
return renderBubblewrap(policy)
|
|
case sandbox.DriverLandlock:
|
|
return renderLandlock(policy)
|
|
default:
|
|
return nil, fmt.Errorf("unknown sandbox driver: %s", driver)
|
|
}
|
|
}
|
|
|
|
func driverUnavailable(driver sandbox.DriverName) error {
|
|
return fmt.Errorf("driver %s is not available on %s/%s", driver, runtime.GOOS, runtime.GOARCH)
|
|
}
|