Feature request: Add option to disable network access

[joshua-stone]

There doesn't appear to be a way to pass --network=none for limiting network access:

ramalama/ramalama/model.py

Line 140 in 4851d60

def setup_container(self, args):

I believe that having a straightforward way to confine locally-running AI models would be useful for guaranteeing privacy and security in general.

[rhatdan]

I think it makes sense to default to --network=none, to help alleviate fears from people using random AI Models (deepseek for example).

Care to open a PR?

[rhjostone]

@rhatdan Should I make this a global option for subcommands like serve, or should it be made exclusive for run for now since serve implicitly requires network access anyway?

#674

[rhatdan]

Anything that runs a container should have this.

run, serve, convert, and push off the top of my head.

[rhatdan]

--network=mode is merged.