run
--rm
-i
--name=boxmaker-s1-1-7
--label=boxmaker=tool
--network=none
--pull=never
--read-only
--cap-drop=all
--security-opt=no-new-privileges
--userns=keep-id
--pids-limit=128
--memory=512m
--tmpfs=/tmp:rw,size=64m,mode=1777
--volume=/home/kyle/notes:/home/kyle/notes:ro
localhost/boxmaker-tools@sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef
/bin/toolkit
read_file