docker container create
docker container create
Description
Create a new container
Usage
docker container create [OPTIONS] IMAGE [COMMAND] [ARG...]
Options
| Name, shorthand | Default | Description |
|---|---|---|
--add-host | Add a custom host-to-IP mapping (host:ip) | |
--attach, -a | Attach to STDIN, STDOUT or STDERR | |
--blkio-weight | 0 | Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0) |
--blkio-weight-device | Block IO weight (relative device weight) | |
--cap-add | Add Linux capabilities | |
--cap-drop | Drop Linux capabilities | |
--cgroup-parent | Optional parent cgroup for the container | |
--cidfile | Write the container ID to the file | |
--cpu-count | 0 | CPU count (Windows only) |
--cpu-percent | 0 | CPU percent (Windows only) |
--cpu-period | 0 | Limit CPU CFS (Completely Fair Scheduler) period |
--cpu-quota | 0 | Limit CPU CFS (Completely Fair Scheduler) quota |
--cpu-rt-period | 0 | Limit CPU real-time period in microseconds |
--cpu-rt-runtime | 0 | Limit CPU real-time runtime in microseconds |
--cpu-shares, -c | 0 | CPU shares (relative weight) |
--cpus | 0.000 | Number of CPUs |
--cpuset-cpus | CPUs in which to allow execution (0-3, 0,1) | |
--cpuset-mems | MEMs in which to allow execution (0-3, 0,1) | |
--credentialspec | Credential spec for managed service account (Windows only) | |
--device | Add a host device to the container | |
--device-read-bps | Limit read rate (bytes per second) from a device | |
--device-read-iops | Limit read rate (IO per second) from a device | |
--device-write-bps | Limit write rate (bytes per second) to a device | |
--device-write-iops | Limit write rate (IO per second) to a device | |
--disable-content-trust | true | Skip image verification |
--dns | Set custom DNS servers | |
--dns-opt | Set DNS options | |
--dns-option | Set DNS options | |
--dns-search | Set custom DNS search domains | |
--entrypoint | Overwrite the default ENTRYPOINT of the image | |
--env, -e | Set environment variables | |
--env-file | Read in a file of environment variables | |
--expose | Expose a port or a range of ports | |
--group-add | Add additional groups to join | |
--health-cmd | Command to run to check health | |
--health-interval | 0 | Time between running the check (ns|us|ms|s|m|h) (default 0s) |
--health-retries | 0 | Consecutive failures needed to report unhealthy |
--health-timeout | 0 | Maximum time to allow one check to run (ns|us|ms|s|m|h) (default 0s) |
--help | false | Print usage |
--hostname, -h | Container host name | |
--init | false | Run an init inside the container that forwards signals and reaps processes |
--init-path | Path to the docker-init binary | |
--interactive, -i | false | Keep STDIN open even if not attached |
--io-maxbandwidth | Maximum IO bandwidth limit for the system drive (Windows only) | |
--io-maxiops | 0 | Maximum IOps limit for the system drive (Windows only) |
--ip | Container IPv4 address (e.g. 172.30.100.104) | |
--ip6 | Container IPv6 address (e.g. 2001:db8::33) | |
--ipc | IPC namespace to use | |
--isolation | Container isolation technology | |
--kernel-memory | Kernel memory limit | |
--label, -l | Set meta data on a container | |
--label-file | Read in a line delimited file of labels | |
--link | Add link to another container | |
--link-local-ip | Container IPv4/IPv6 link-local addresses | |
--log-driver | Logging driver for the container | |
--log-opt | Log driver options | |
--mac-address | Container MAC address (e.g. 92:d0:c6:0a:29:33) | |
--memory, -m | Memory limit | |
--memory-reservation | Memory soft limit | |
--memory-swap | Swap limit equal to memory plus swap: ‘-1’ to enable unlimited swap | |
--memory-swappiness | -1 | Tune container memory swappiness (0 to 100) |
--name | Assign a name to the container | |
--net | default | Connect a container to a network |
--net-alias | Add network-scoped alias for the container | |
--network | default | Connect a container to a network |
--network-alias | Add network-scoped alias for the container | |
--no-healthcheck | false | Disable any container-specified HEALTHCHECK |
--oom-kill-disable | false | Disable OOM Killer |
--oom-score-adj | 0 | Tune host’s OOM preferences (-1000 to 1000) |
--pid | PID namespace to use | |
--pids-limit | 0 | Tune container pids limit (set -1 for unlimited) |
--privileged | false | Give extended privileges to this container |
--publish, -p | Publish a container’s port(s) to the host | |
--publish-all, -P | false | Publish all exposed ports to random ports |
--read-only | false | Mount the container’s root filesystem as read only |
--restart | no | Restart policy to apply when a container exits |
--rm | false | Automatically remove the container when it exits |
--runtime | Runtime to use for this container | |
--security-opt | Security Options | |
--shm-size | Size of /dev/shm, default value is 64MB | |
--stop-signal | SIGTERM | Signal to stop a container, SIGTERM by default |
--stop-timeout | 0 | Timeout (in seconds) to stop a container |
--storage-opt | Storage driver options for the container | |
--sysctl | map[] | Sysctl options |
--tmpfs | Mount a tmpfs directory | |
--tty, -t | false | Allocate a pseudo-TTY |
--ulimit | Ulimit options | |
--user, -u | Username or UID (format: <name|uid>[:<group|gid>]) | |
--userns | User namespace to use | |
--uts | UTS namespace to use | |
--volume, -v | Bind mount a volume | |
--volume-driver | Optional volume driver for the container | |
--volumes-from | Mount volumes from the specified container(s) | |
--workdir, -w | Working directory inside the container |
Parent command
| Command | Description |
|---|---|
| docker container | Manage containers |
Examples
Specify isolation technology for container (–isolation)
This option is useful in situations where you are running Docker containers on Windows. The --isolation=<value> option sets a container’s isolation technology. On Linux, the only supported is the default option which uses Linux namespaces. On Microsoft Windows, you can specify these values:
-
default: Use the value specified by the Docker daemon’s--exec-opt. If thedaemondoes not specify an isolation technology, Microsoft Windows usesprocessas its default value. -
process: Namespace isolation only. -
hyperv: Hyper-V hypervisor partition-based isolation.
Specifying the --isolation flag without a value is the same as setting --isolation="default".
© 2013–2016 Docker, Inc.
Licensed under the Apache License, Version 2.0.
Docker and the Docker logo are trademarks or registered trademarks of Docker, Inc. in the United States and/or other countries.
Docker, Inc. and other parties may also have trademark rights in other terms used herein.
https://docs.docker.com/engine/reference/commandline/container_create/
