# Run from container

|     |     |
| --- | --- |
|  | This documentation is for<br>a previous<br>version of Cerbos. Choose 0.53.0 from the version picker at the top right or navigate to [https://docs.cerbos.dev](https://docs.cerbos.dev/) for the latest version. |

```sh
docker run --rm --name cerbos -p 3592:3592 ghcr.io/cerbos/cerbos:0.46.0
```

shCopied!

|     |     |
| --- | --- |
|  | Cerbos images can be verified using [sigstore](https://www.sigstore.dev/) tools as follows:<br>```sh<br>cosign verify \<br>  --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \<br>  --certificate-identity="https://github.com/cerbos/cerbos/.github/workflows/release.yaml@refs/tags/v0.46.0" \<br>  ghcr.io/cerbos/cerbos:0.46.0<br>```<br>shCopied! |

By default, the container is configured to listen on ports 3592 (HTTP) and 3593 (gRPC) and watch for policy files on the volume mounted at `/policies`. You can override these by creating a new [configuration file](https://docs.cerbos.dev/cerbos/0.46.0/configuration/).

Create a directory to hold the config file and policies.

```sh
mkdir -p cerbos-quickstart/policies
```

shCopied!

Create a config file.

```sh
cat > cerbos-quickstart/.cerbos.yaml <<EOF
server:
  httpListenAddr: ":3592"

storage:
  driver: "disk"
  disk:
    directory: /quickstart/policies
    watchForChanges: true
EOF
```

shCopied!

Launch the container with the new config file.

```sh
docker run --rm --name cerbos -d -v $(pwd)/cerbos-quickstart:/quickstart -p 3592:3592 ghcr.io/cerbos/cerbos:0.46.0 server --config=/quickstart/.cerbos.yaml
```

shCopied!

|     |     |
| --- | --- |
|  | Cerbos container images are mirrored to Docker Hub and the latest version is available at docker.io/cerbos/cerbos:0.46.0 as well.