runc-run(8)

🌸 NAME 🌸

okay bestie, gather round 💖 runc-run — create and start a container. that's it, that's the whole vibe. this is the page for runc-run(8) from the System Manager's Manual, and we're gonna read it together, no skimming, i'm watching 👀

---

✨ SYNOPSIS ✨

runc run [option ...] container-id

that's the whole summoning ritual, bestie 🕯️✨

---

🦋 DESCRIPTION 🦋

so the run command creates an instance of a container from a bundle, and starts it. simple. iconic. no notes.

and if you wanna think of it in girl-math: run is literally just a shortcut for create and then start back to back 🫶 like when you buy the outfit AND the shoes in one checkout. same energy. one command.

---

💅 OPTIONS 💅

• --bundle, -b path — the path to the root of the bundle directory. default is the current directory, so if you're already standing in your bundle, you're good 🎀
• --console-socket path — the path to an AF_UNIX socket that's gonna receive a file descriptor pointing at the master end of the console's pseudoterminal. wanna know more? go read docs/terminals ⟨https://github.com/opencontainers/runc/blob/master/docs/terminals.md⟩ 📖
• --detach, -d — detach from the container's process. you go your way, it goes its way, no strings 💫
• --pid-file path — tell it which file to write the initial container process' PID to. very "leave a note on the fridge" of you.
• --no-subreaper — disables the use of the subreaper that's normally used to reap reparented processes. bye subreaper 👋
• --no-pivot — do not use pivot root to jail the process inside the rootfs. like, listen: this should not be used except in exceptional circumstances, and it may be unsafe from the security standpoint ⚠️ so don't just casually hit it because you're feeling spicy. this is not the spicy one. this is the danger one. 💀
• --no-new-keyring — don't create a new session keyring for the container. consequence: the container will inherit the calling processes session key. lowkey passing down the family keyring 😭
• --preserve-fds N — pass N additional file descriptors into the container. the math is stdio + $LISTEN_FDS + N in total, and the default is 0 🧮
• --keep — keep the container's state directory and cgroup. this is genuinely helpful if you wanna check the state afterwards, like peeking at cgroup controllers once the container has exited 👑 but heads up: if you use this option, you're gonna need a manual runc delete afterwards to clean up an exited container's artefacts. it's the price of keeping receipts, fr fr 🧾

---

🌈 SEE ALSO 🌈

• runc(8). go read the parent page, iykyk 💜

---

and that's the whole page, bestie!! 🎀✨ this was runc-run(8) from the System Manager's Manual — runc's very own manual, periodt 💅🦋 go create and start something iconic, ily, bye 👑