Commands / kosa8 run
kosa8 run
Run a container in the kosa8 engine VM (auto-pulls on first use)
Usage
kosa8 run IMAGE [COMMAND] [ARG...]
Runs in kosa8's engine VM rather than on your host, so the container cannot see your filesystem unless you mount something into it.
The image is pulled automatically the first time you ask for it. If your organisation has installed a policy, the registry it comes from must be on the allowlist or the pull is refused before anything runs.
For work you want to isolate further — a coding assistant, an untrusted
script — put it in its own sandbox instead: kosa8 sandbox run.
Options
| Flag | Type | What it does | Default |
|---|---|---|---|
-d, --detach | bool | run in the background and print the container id | — |
-e, --env | stringArray | set an environment variable: KEY=VALUE (repeatable) | [] |
-i, --interactive | bool | keep stdin open | — |
--name | string | assign a name to the container | — |
--network | string | attach to a named network (default: kosa8) | — |
-p, --publish | stringArray | publish a container port to the host: [HOST:]CONTAINER | [] |
--rm | bool | remove the container when it exits (the default for a foreground run) | — |
-t, --tty | bool | allocate a pseudo-TTY (implies -i) | — |