Add --network-mode option

ramalama/cli.py

@@ -721,6 +721,15 @@ def run_parser(subparsers):
     parser.add_argument(
         "ARGS", nargs="*", help="Overrides the default prompt, and the output is returned without entering the chatbot"
     )
+    # Disable network access by default, and give the option to pass any supported network mode into
+    # podman if needed:
+    # https://docs.podman.io/en/latest/markdown/podman-run.1.html#network-mode-net
+    parser.add_argument(
+        "--network-mode",
+        type=str,
+        default="none",
+        help="Set the network mode for the container.",
+    )
     parser.set_defaults(func=run_cli)
 
 

ramalama/model.py

@@ -158,6 +158,9 @@ def setup_container(self, args):
             name,
         ]
 
+        if args.subcommand == 'run':
+            conman_args += [f"--network={args.network_mode}"]
+
         if os.path.basename(args.engine) == "podman":
             conman_args += ["--pull=newer"]
         elif os.path.basename(args.engine) == "docker":