Host file read

CTR=$(sudo buildah from scratch)
sudo buildah add $CTR /etc/shadow /shadow
sudo buildah run $CTR -- cat /shadow

Command execution

CTR=$(sudo buildah from docker.io/library/alpine)
sudo buildah run $CTR -- id