#!/bin/sh

exec podman run \
	--cap-drop ALL \
	--cap-add NET_RAW \
	--security-opt no-new-privileges \
	--read-only \
	--tmpfs /home/trans \
	--volume "${XDG_CONFIG_HOME:-$HOME/.config}/translate-shell":/home/trans/.config/translate-shell:ro \
	--rm --interactive --tty \
	localhost/translate-shell:{{ translate_shell_version }} "$@"
