--container-image=[REGISTRY]/[IMAGE]:[TAG] (and optional --container-mounts) to srun or sbatch.
For how to actually use Pyxis and Enroot to run containers, see Install software as containers using the Pyxis/enroot environment. For the AppArmor profile setup on managed Nodes, see Enroot apparmor.
Workload Scheduling