docker run

CLI command that creates a read-write container layer over an image, configures network/port mappings (`-p`), binds environment variables (`-e`), mounts volumes (`-v`), and executes the container's entrypoint process inside new kernel namespaces.