Broker composition seam for one inventory-approved raw host executable. More...

#include <control_trusted_host_launcher.hpp>

Public Member Functions
	ControlTrustedHostLauncher (ControlTrustedHostInventory &inventory, ControlHostEnrollmentStore &enrollments, ControlTrustedHostLauncherConfig config)
	ControlTrustedHostLauncher (const ControlTrustedHostLauncher &)=delete
ControlTrustedHostLauncher &	operator= (const ControlTrustedHostLauncher &)=delete
ControlTrustedHostLaunchResult	launch (std::string_view inventory_id, platform::ProcessOptions options={})

Detailed Description

Broker composition seam for one inventory-approved raw host executable.

launch() consumes a broker-owned snapshot, spawns that staged executable on a private inherited channel, verifies the live child through kernel peer evidence, creates one endpoint enrollment for that exact process, and only then releases the enrollment bootstrap. It does not start the endpoint, grant a client, or install an executor.

Constructor & Destructor Documentation

◆ ControlTrustedHostLauncher() [1/2]

pulp::inspect::ControlTrustedHostLauncher::ControlTrustedHostLauncher	(	ControlTrustedHostInventory &	inventory,
		ControlHostEnrollmentStore &	enrollments,
		ControlTrustedHostLauncherConfig	config )

◆ ControlTrustedHostLauncher() [2/2]

pulp::inspect::ControlTrustedHostLauncher::ControlTrustedHostLauncher ( const ControlTrustedHostLauncher & )

delete

Member Function Documentation

◆ launch()

ControlTrustedHostLaunchResult pulp::inspect::ControlTrustedHostLauncher::launch	(	std::string_view	inventory_id,
		platform::ProcessOptions	options = {} )

◆ operator=()

ControlTrustedHostLauncher & pulp::inspect::ControlTrustedHostLauncher::operator= ( const ControlTrustedHostLauncher & )