Per-Run Overrides

Command-line flags override boks.toml settings for a single invocation. They do not change your config or persist to future runs.

Security

Security flags select a less restrictive profile for one command. See Security Layers for the full list and what each enables:

boks --cap net curl https://example.com
boks --cap rw python -c "open('out.txt', 'w').write('hello')"
boks --cap ro python script.py          # force read-only, even if the image says readwrite

Runtime and platform

boks --runtime docker python --version      # force Docker over Podman
boks --platform linux/arm64 python --version

Non-interactive mode

boks --non-interactive python script.py

Equivalent to setting the CI environment variable. Disables TTY allocation for use in CI/CD pipelines. Auto-detected when CI is set or stdin is not a TTY.

Config file path

BOKS_CONFIG=./project-boks.toml boks python script.py

See Environment Variables for BOKS_CONFIG and CI.