Every template runs on the same gVisor sandbox with the same default-deny egress policy — the only thing that changes is what's preinstalled on the PATH.
run().
Pass a setup list of shell commands run once at boot, before your first run() call.
Every template is a `create()` call away.