NamespaceBuildOpts

Defined in: packages/runtime/src/platform/boot.ts:73

Container-specific overrides applied on top of a base BootContext.

Remarks

Passed to buildNamespace. When every field is omitted, the result is equivalent to the plain boot path — NamespaceBuildOpts only exists so the container runtime can share buildNamespace with the top-level boot path without duplicating mount-ordering logic.

See

buildNamespace

Properties

allow?

readonly optional allow?: NamespacePermissions

Defined in: packages/runtime/src/platform/boot.ts:86

Permission gating — controls which kernel callbacks are wired (mount, srv, spawn, signal). Defaults to all allowed.

---

binds?

readonly optional binds?: readonly BindSpec[]

Defined in: packages/runtime/src/platform/boot.ts:79

Union binds applied AFTER all mounts (Plan 9 bind(2) semantics — before / after / replace). Load-bearing last step.

---

devices?

readonly optional devices?: DeviceSpec

Defined in: packages/runtime/src/platform/boot.ts:83

Device gating — which synthetic fileservers (/dev, /proc, /srv, /dev/user, /dev/container, /mnt/factotum, /net/http*) to mount. Defaults to all enabled.

---

specEnv?

readonly optional specEnv?: Readonly<Record<string, string>>

Defined in: packages/runtime/src/platform/boot.ts:91

Env overrides from ContainerSpec.process.env, merged last — precedence is DEFAULT_ENV (lowest), then ctx.env, then specEnv (highest).

---

specMounts?

readonly optional specMounts?: Readonly<Record<string, MountSpec>>

Defined in: packages/runtime/src/platform/boot.ts:76

Container-specific mount overrides, dispatched by mountSpec.kind (volume / bridge / fresh / none). Applied after image mounts.

---

volumes?

readonly optional volumes?: Record<string, Fileserver>

Defined in: packages/runtime/src/platform/boot.ts:88

Direct volume mounts (used by the top-level boot path’s BootOpts.volumes).