`ch-run --set-env FOO=bar image -- true` (note space rather than equals after `--set-env` mis-parses `FOO=bar` as the image rather than the argument to `--set-env`.