kosa8 docs

Every command

All 134 of them, generated from the binary itself, so what you read here is what your copy actually does.

Start here

The handful you need on day one.

kosa8 runRun a container in the kosa8 engine VM (auto-pulls on first use) kosa8 psList containers kosa8 imagesList images in the engine kosa8 pullPull an image into the kosa8 engine kosa8 logsFetch the logs of a container kosa8 execRun a command in a running container kosa8 stopStop a running container (SIGTERM, then SIGKILL) kosa8 rmRemove a container

Sandboxes

Sealed machines: the thing kosa8 is built around.

kosa8 sandboxManage isolated microVM sandboxes kosa8 agentRun coding agents in isolated sandboxes

Save, copy, undo

The part no other container tool does.

kosa8 snapshotSnapshot and restore sandbox state kosa8 checkpointSave a restore point you can rewind to kosa8 rewindPut a sandbox back to a saved restore point kosa8 forkFork a running sandbox into N live copies with process state intact kosa8 exploreFork a sandbox per approach, run each, and report which worked

The Mac app

A window onto everything running.

kosa8 deskOpen the local dashboard in a browser

AI

Local models, the assistant, and the approval gate.

kosa8 modelPull and serve local models (OpenAI- and Anthropic-compatible) kosa8 aiChat with kosa8's embedded assistant (approval-first, live state) kosa8 approveSee what an action would do, and decide what may run unprompted kosa8 mcpRun kosa8 as an MCP server so AI agents can drive it kosa8 mcp-policyGovern which MCP servers and tools each team may use

Governance

Company-wide rules and the record of what happened.

kosa8 policyOrg policy profiles: signed, verified, enforced client-side kosa8 auditInspect what was done, by whom kosa8 licenseActivate and inspect your kosa8 subscription kosa8 usageShow metered usage, derived from the audit log

Images and builds

Building, tagging and moving images.

kosa8 buildBuild an image from a Dockerfile kosa8 builderManage the BuildKit builder kosa8 commitCreate an image from a container's filesystem kosa8 tagGive an existing image another name kosa8 pushPush an image to a registry kosa8 saveSave an image to an OCI archive kosa8 loadLoad an image from an OCI archive kosa8 importCreate an image from a rootfs tar archive kosa8 exportExport a container's filesystem as a tar archive kosa8 historyShow the layer history of an image kosa8 manifestInspect image manifests in a registry kosa8 searchSearch Docker Hub for images kosa8 rmiRemove an image from the engine

Containers

Everything else a container needs.

kosa8 createCreate a container without starting it kosa8 startStart a created container kosa8 restartRestart a container kosa8 killKill a running container kosa8 pausePause all processes in a container kosa8 unpauseResume a paused container kosa8 waitBlock until a container stops, then print its exit code kosa8 attachAttach to a running container's output kosa8 cpCopy files between the host and a container (CONTAINER:PATH) kosa8 diffShow filesystem changes made to a container kosa8 inspectShow detailed container state kosa8 portShow published ports for a container kosa8 renameRename a container kosa8 topList processes running inside a container kosa8 statsShow resource usage of a running container kosa8 eventsStream engine events kosa8 updateUpdate a running container's resource limits

Host and daemon

The background service, networking and storage.

kosa8 daemonManage the kosa8d daemon kosa8 systemManage kosa8 itself kosa8 infoShow engine and system information kosa8 versionShow kosa8 client and daemon version kosa8 doctorCheck that this machine can run kosa8 kosa8 networkManage container networks kosa8 volumeManage named volumes kosa8 loginLog in to a registry kosa8 logoutRemove stored registry credentials kosa8 remoteManage remote (Cloudflare R2) snapshot storage kosa8 upDetect, build and run a project — no Dockerfile required