{
  "slug": "nerdctl-container-run-adds-expose-and-publish-all-31693362a946",
  "title": "nerdctl container run adds --expose and --publish-all",
  "tools": [
    "nerdctl"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-09-20T05:01:55.000Z",
  "announced_at": "2026-09-20T05:01:55.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When running a container, use `--expose` to declare ports or `--publish-all` (`-P`) to publish exposed ports. The v2.4.0 release note confirms both flags were added; the v2.4.0 command reference does not document their syntax or behavior.",
    "gotchas": [
      "Version: v2.4.0",
      "Prerequisite: nerdctl v2.4.0 release expects containerd v1.7 or later; some features may not work with other releases."
    ]
  },
  "why_it_matters": "Configure exposed or automatically published container ports when running a container.",
  "sources": [
    "https://github.com/containerd/nerdctl/releases/tag/v2.4.0"
  ],
  "rank": 0.92036,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave1b-20261016",
    "verdict_id": "wave1b-20261016:wave1b-20261016-bb062a607fac224b-10:gate",
    "evidence_hash": "89fbd919679ed2949ec61c8062382515fb319dd4be9fdb247a315c9ae6e83512"
  },
  "review": {
    "draft_hash": "0c234cb1d352b62c42cb5154a804c4ec2341e7a108d7aef5cec0e0950f731839",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave1b-20261016:gate",
    "reason": "2 of 3 judge runs approved with p_yes >= 0.9 (mean 0.92 >= 0.9; 2 needed) and Jev gave 0.73 (>= 0.6 needed)."
  }
}