I don't know if it would be possible to call apply_landlock with the given config before assigning it to self and setting console_info.

The changes I made preserve the current execution order.

While on it: can we make this nicer with a if let Some(config) = self.vm_config.as_ref()).lock().unwrap() && config.landlock_enabled?

The problem is that the apply_landlock function requires a &Mutex<VmConfig>.

Should we refactor all &Mutex parmeters to instead consume a mutable reference to the underlying value? Sounds like a reasonable cleanup. Or would we lose something that way? This way callers must lock the Mutex therefore

My impression is that, in this case, the apply_landlock method was introduced in order to more ergonomically deal with the wrapping Mutex (i.e. avoid needing to write .lock().unwrap() all over the place).

FYI: I just set up #7555 which improves code IMHO a lot. I also tried to make this code a more idiomatic but eventually the borrow checker stopped me. Context.