docker create

Create a new container

Aliases

docker container create, docker create

Options

NameTypeDefaultDescription
--add-hostlistAdd a custom host-to-IP mapping (host:ip)
--annotationmapmap[]Add an annotation to the container (passed through to the OCI runtime)
-a, --attachlistAttach to STDIN, STDOUT or STDERR
--blkio-weightuint160Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
--blkio-weight-devicelistBlock IO weight (relative device weight)
--cap-addlistAdd Linux capabilities
--cap-droplistDrop Linux capabilities
--cgroup-parentstringOptional parent cgroup for the container
--cgroupnsstringCgroup namespace to use (host|private)
‘host’: Run the container in the Docker host‘s cgroup namespace
‘private’: Run the container in its own private cgroup namespace
’': Use the cgroup namespace as configured by the
default-cgroupns-mode option on the daemon (default)
--cidfilestringWrite the container ID to the file
--cpu-countint640CPU count (Windows only)
--cpu-percentint640CPU percent (Windows only)
--cpu-periodint640Limit CPU CFS (Completely Fair Scheduler) period
--cpu-quotaint640Limit CPU CFS (Completely Fair Scheduler) quota
--cpu-rt-periodint640Limit CPU real-time period in microseconds
--cpu-rt-runtimeint640Limit CPU real-time runtime in microseconds
-c, --cpu-sharesint640CPU shares (relative weight)
--cpusdecimalNumber of CPUs
--cpuset-cpusstringCPUs in which to allow execution (0-3, 0,1)
--cpuset-memsstringMEMs in which to allow execution (0-3, 0,1)
--devicelistAdd a host device to the container
--device-cgroup-rulelistAdd a rule to the cgroup allowed devices list
--device-read-bpslistLimit read rate (bytes per second) from a device
--device-read-iopslistLimit read rate (IO per second) from a device
--device-write-bpslistLimit write rate (bytes per second) to a device
--device-write-iopslistLimit write rate (IO per second) to a device
--disable-content-trustbooltrueSkip image verification
--dnslistSet custom DNS servers
--dns-optionlistSet DNS options
--dns-searchlistSet custom DNS search domains
--domainnamestringContainer NIS domain name
--entrypointstringOverwrite the default ENTRYPOINT of the image
-e, --envlistSet environment variables
--env-filelistRead in a file of environment variables
--exposelistExpose a port or a range of ports
--gpusgpu-requestGPU devices to add to the container (‘all’ to pass all GPUs)
--group-addlistAdd additional groups to join
--health-cmdstringCommand to run to check health
--health-intervalduration0sTime between running the check (ms|s|m|h) (default 0s)
--health-retriesint0Consecutive failures needed to report unhealthy
--health-start-intervalduration0sTime between running the check during the start period (ms|s|m|h) (default 0s)
--health-start-periodduration0sStart period for the container to initialize before starting health-retries countdown (ms|s|m|h) (default 0s)
--health-timeoutduration0sMaximum time to allow one check to run (ms|s|m|h) (default 0s)
--helpboolPrint usage
-h, --hostnamestringContainer host name
--initboolRun an init inside the container that forwards signals and reaps processes
-i, --interactiveboolKeep STDIN open even if not attached
--io-maxbandwidthbytes0Maximum IO bandwidth limit for the system drive (Windows only)
--io-maxiopsuint640Maximum IOps limit for the system drive (Windows only)
--ipstringIPv4 address (e.g., 172.30.100.104)
--ip6stringIPv6 address (e.g., 2001:db8::33)
--ipcstringIPC mode to use
--isolationstringContainer isolation technology
--kernel-memorybytes0Kernel memory limit
-l, --labellistSet meta data on a container
--label-filelistRead in a line delimited file of labels
--linklistAdd link to another container
--link-local-iplistContainer IPv4/IPv6 link-local addresses
--log-driverstringLogging driver for the container
--log-optlistLog driver options
--mac-addressstringContainer MAC address (e.g., 92:d0:c6:0a:29:33)
-m, --memorybytes0Memory limit
--memory-reservationbytes0Memory soft limit
--memory-swapbytes0Swap limit equal to memory plus swap: ‘-1’ to enable unlimited swap
--memory-swappinessint64-1Tune container memory swappiness (0 to 100)
--mountmountAttach a filesystem mount to the container
--namestringAssign a name to the container
--networknetworkConnect a container to a network
--network-aliaslistAdd network-scoped alias for the container
--no-healthcheckboolDisable any container-specified HEALTHCHECK
--oom-kill-disableboolDisable OOM Killer
--oom-score-adjint0Tune host's OOM preferences (-1000 to 1000)
--pidstringPID namespace to use
--pids-limitint640Tune container pids limit (set -1 for unlimited)
--platformstringSet platform if server is multi-platform capable
--privilegedboolGive extended privileges to this container
-p, --publishlistPublish a container's port(s) to the host
-P, --publish-allboolPublish all exposed ports to random ports
--pullstringmissingPull image before creating (always, |missing, never)
-q, --quietboolSuppress the pull output
--read-onlyboolMount the container's root filesystem as read only
--restartstringnoRestart policy to apply when a container exits
--rmboolAutomatically remove the container and its associated anonymous volumes when it exits
--runtimestringRuntime to use for this container
--security-optlistSecurity Options
--shm-sizebytes0Size of /dev/shm
--stop-signalstringSignal to stop the container
--stop-timeoutint0Timeout (in seconds) to stop a container
--storage-optlistStorage driver options for the container
--sysctlmapmap[]Sysctl options
--tmpfslistMount a tmpfs directory
-t, --ttyboolAllocate a pseudo-TTY
--ulimitulimitUlimit options
--use-api-socketboolBind mount Docker API socket and required auth
-u, --userstringUsername or UID (format: <name|uid>[:<group|gid>])
--usernsstringUser namespace to use
--utsstringUTS namespace to use
-v, --volumelistBind mount a volume
--volume-driverstringOptional volume driver for the container
--volumes-fromlistMount volumes from the specified container(s)
-w, --workdirstringWorking directory inside the container