Per-Run Overrides

Command-line flags override kapsl.toml settings for a single invocation. They do not change your config or persist to future runs.

Security

Security flags select a less restrictive profile for one command. See Security Layers for the full list and what each enables:

kapsl --cap net curl https://example.com
kapsl --cap rw python -c "open('out.txt', 'w').write('hello')"
kapsl --cap ro python script.py          # force read-only, even if the image says readwrite

Runtime and platform

kapsl --runtime docker python --version      # force Docker over Podman
kapsl --platform linux/arm64 python --version

Non-interactive mode

kapsl --non-interactive python script.py

Equivalent to setting the CI environment variable. Disables TTY allocation for use in CI/CD pipelines. Auto-detected when CI is set or stdin is not a TTY.

Config file path

KAPSL_CONFIG=./project-kapsl.toml kapsl python script.py

See Environment Variables for KAPSL_CONFIG and CI.