Commands / kosa8 run
kosa8 run
Run a container in the kosa8 engine VM (auto-pulls on first use)
Usage
kosa8 run IMAGE [COMMAND] [ARG...]
Runs in kosa8's engine VM rather than on your host, so the container cannot see your filesystem unless you mount something into it.
The image is pulled automatically the first time you ask for it. If your organisation has installed a policy, the registry it comes from must be on the allowlist or the pull is refused before anything runs.
For work you want to isolate further — a coding assistant, an untrusted
script — put it in its own sandbox instead: kosa8 sandbox run.
Options
| Flag | Type | What it does | Default |
|---|---|---|---|
-i, --interactive | bool | keep stdin open | — |
--network | string | attach to a named network (default: kosa8) | — |
-p, --publish | stringArray | publish a container port to the host: [HOST:]CONTAINER | [] |
-t, --tty | bool | allocate a pseudo-TTY (implies -i) | — |