Method delete_sandbox

crates/openshell-driver-podman/src/driver.rs:626–702

Delete a sandbox container and its workspace volume.

(
        &self,
        sandbox_id: &str,
        sandbox_name: &str,
    )

    /// Delete a sandbox container and its workspace volume.
    pub async fn delete_sandbox(
        &self,
        sandbox_id: &str,
        sandbox_name: &str,
    ) -> Result<bool, ComputeDriverError> {
        if sandbox_id.is_empty() {
            return Err(ComputeDriverError::Precondition(
                "sandbox id is required".into(),
            ));
        }
        let name = validated_container_name(sandbox_name)?;
        info!(
            sandbox_id = %sandbox_id,
            sandbox_name = %sandbox_name,
            container = %name,
            "Deleting sandbox container"
        );

        // Use the request's stable sandbox ID as the source of truth for
        // cleanup. Inspect is only used as a best-effort cross-check so
        // cleanup still works if the container is already gone or mislabeled.
        match self.client.inspect_container(&name).await {
            Ok(inspect) => match inspect.config.labels.get(LABEL_SANDBOX_ID) {
                Some(label_id) if label_id != sandbox_id => {
                    warn!(
                        sandbox_id = %sandbox_id,
                        sandbox_name = %sandbox_name,
                        container = %name,
                        label_sandbox_id = %label_id,
                        "Container label sandbox ID did not match delete request; cleaning up using request sandbox_id"
                    );
                }
                None => {
                    warn!(
                        sandbox_id = %sandbox_id,
                        sandbox_name = %sandbox_name,
                        container = %name,
                        "Container missing '{}' label; cleaning up using request sandbox_id",
                        LABEL_SANDBOX_ID,
                    );
                }
                Some(_) => {}
            },
            Err(PodmanApiError::NotFound(_)) => {}
            Err(e) => return Err(ComputeDriverError::from(e)),
        }

        // Stop (best-effort).
        let _ = self
            .client
            .stop_container(&name, self.config.stop_timeout_secs)
            .await;

        // Remove container. If NotFound, the container was removed between
        // inspect and here (TOCTOU race); proceed with volume cleanup
        // since the workspace volume is idempotent to remove.
        let container_existed = match self.client.remove_container(&name).await {
            Ok(()) => true,