Runs a command inside an already-running container — the way in when you need to poke around live.
docker logs, or start a debug copy with docker run --rm -it --entrypoint sh <image>bash; distroless has no shell at allexec starts a new process next to PID 1; exiting the shell does not stop the container.