Function build_environment

crates/openshell-driver-docker/src/lib.rs:2162–2252

(sandbox: &DriverSandbox, config: &DockerDriverRuntimeConfig)

}

fn build_environment(sandbox: &DriverSandbox, config: &DockerDriverRuntimeConfig) -> Vec<String> {
    let mut environment = HashMap::from([
        ("HOME".to_string(), "/root".to_string()),
        ("PATH".to_string(), SUPERVISOR_PATH.to_string()),
        ("TERM".to_string(), "xterm".to_string()),
        (
            "OPENSHELL_LOG_LEVEL".to_string(),
            openshell_core::driver_utils::sandbox_log_level(sandbox, &config.log_level),
        ),
    ]);

    if let Some(spec) = sandbox.spec.as_ref() {
        let mut user_env = HashMap::new();
        if let Some(template) = spec.template.as_ref() {
            user_env.extend(template.environment.clone());
        }
        user_env.extend(spec.environment.clone());
        environment.extend(user_env.clone());
        if !user_env.is_empty()
            && let Ok(json) = serde_json::to_string(&user_env)
        {
            environment.insert(
                openshell_core::sandbox_env::USER_ENVIRONMENT.to_string(),
                json,
            );
        }
    }

    environment.insert(
        openshell_core::sandbox_env::ENDPOINT.to_string(),
        config.grpc_endpoint.clone(),
    );
    environment.insert(
        openshell_core::sandbox_env::SANDBOX_ID.to_string(),
        sandbox.id.clone(),
    );
    environment.insert(
        openshell_core::sandbox_env::SANDBOX.to_string(),
        sandbox.name.clone(),
    );
    environment.insert(
        openshell_core::sandbox_env::SSH_SOCKET_PATH.to_string(),
        config.ssh_socket_path.clone(),
    );
    environment.insert(
        openshell_core::sandbox_env::SANDBOX_COMMAND.to_string(),
        SANDBOX_COMMAND.to_string(),
    );
    environment.insert(
        openshell_core::sandbox_env::TELEMETRY_ENABLED.to_string(),
        openshell_core::telemetry::enabled_env_value().to_string(),
    );
    // The root supervisor executes namespace helpers during bootstrap; keep
    // their search path driver-owned even when the template/spec set PATH.
    environment.insert("PATH".to_string(), SUPERVISOR_PATH.to_string());
    if config.guest_tls.is_some() {
        environment.insert(
            openshell_core::sandbox_env::TLS_CA.to_string(),