run a container, including port mappings