Docker CLI

Use it when

• package an application into a reproducible container image
• isolate an agent-generated command with explicit mounts, capabilities, and network policy

What it solves

Not the fit when

• the CLI requires a compatible container engine and is not a complete hostile-code sandbox

Install

brew install docker

Invoke

docker run --rm --network none --read-only your-image:tag

Alternatives

No reviewed alternatives recorded yet.