Struct Systemd 

pub struct Systemd {
    txn_dir: PathBuf,
}

Fields

txn_dir: PathBuf

Implementations

impl Systemd

pub fn new(txn_dir: PathBuf) -> Systemd

fn ctl(&self, scope: &Scope, args: &[&str], timeout: Duration) -> Output

fn job(&self, verb: &str, id: &UnitId, op: &OpId) -> Outcome

Trait Implementations

impl Clone for Systemd

fn clone(&self) -> Systemd

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Systemd

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl UnitBackend for Systemd

fn protecting(&self, tools: &[UnitId]) -> Result<BTreeSet<UnitId>, Outcome>

§12d: netwatch’s footprints in /run/planarian/footprint, read with its own fail-closed rules, at the boot clock’s now.

fn observe(&self, id: &UnitId) -> Result<Observed, Outcome>

fn foreign_units(&self) -> Vec<String>

The boot report’s unit check (§10): active units whose definition does not come from the running generation (a file outside the store that is not a generator’s).

fn ended_by(&self, id: &UnitId) -> Option<Ending>

How the unit’s main process last ended; None if the backend cannot say.

fn auto_restarts(&self, id: &UnitId) -> Option<u32>

How many times systemd itself restarted the unit (NRestarts); None if the backend cannot say.

fn list(&self) -> Result<Vec<UnitId>, Outcome>

fn start_agent( &self, name: &str, argv: &[String], limits: &AgentLimits, ) -> Result<InstanceId, Outcome>

Start an agent (§11, §16): the transient unit planarian-agent-<name>, under a dynamic uid of its own. Returns the started unit’s instance (its InvocationID), read back once it has started (I24).

fn agent_running(&self, name: &str) -> bool

Whether an agent’s unit under this name is loaded and running (I24: agent run refuses a name in use).

fn restart(&self, id: &UnitId, op: &OpId) -> Outcome

fn stop(&self, id: &UnitId, op: &OpId) -> Outcome

fn hold(&self, unit: &UnitId, wait: Millis) -> Outcome

§12d Network security fails closed: hold the traffic a failed network-security unit protected (planarian-hold@<unit>). A failure posture response, not a transition: no Prepared, no lease (it only ever restricts traffic; docs/bypasses.md). Idempotent. Unlike the other mutations here it takes no OpId; the daemon journals HoldApplied before calling it.

fn lift_hold(&self, unit: &UnitId, wait: Millis) -> Outcome

Lift a unit’s hold, once it is Running and its Readiness probes pass (journaled HoldLifted first). Idempotent. At most wait.

fn held(&self) -> Result<BTreeSet<UnitId>, Outcome>

The units whose traffic is held now, as the host says (§12d: the hold survives a restart of planariad). An error means “cannot say”, never “none”.

fn release_hold( &self, unit: &UnitId, until: Option<Timestamp>, wait: Millis, ) -> Outcome

planarian hold release (an attested Override, decided before this): mark the unit’s hold released until until (None: the next boot), then lift it, waiting at most wait. While the mark stands, a new failure does not hold.

fn end_release(&self, unit: &UnitId) -> Outcome

The release ended (expired, or the override lifted): remove the mark.

fn hold_table_present(&self, wait: Millis) -> Result<bool, Outcome>

Whether the hold’s nftables table is in place. Anything else that flushes the ruleset (nft flush ruleset) removes it and would fail open; the daemon checks this while a hold is active. An error means “cannot say” (also past wait).

fn reapply_hold(&self, unit: &UnitId, wait: Millis) -> Outcome

Build a unit’s hold again (the table was removed under it): restart its hold unit, since starting an active one does nothing. At most wait.