It pulls down the latest official Rust docker image from dockerhub, mounts your CWD into it and then runs your cargo commands inside the docker container. -f- <<EOF FROM rust:latest RUN rustup component add rust-src RUN curl -L https://github.com/rust-analyzer/rust-analyzer/releases/latest/download/rust-analyzer-linux -o /rust-analyzer RUN chmod 755 /rust-analyzer ENTRYPOINT ["/rust-analyzer"] EOF fi docker run \ -u $( stat -c '%u:%g' . ) I can continue to run cargo inside a sandboxed environment, and use rust-analyzer inside another sandboxed environment, whilst using my IDE on the host to do development.