2014-08-20 01:10:42 +00:00
% DOCKER(1) Docker User Manuals
% Docker Community
% JUNE 2014
# NAME
docker-create - Create a new container
# SYNOPSIS
**docker create**
[**-a**|**--attach**[=*[]*]]
2014-09-25 06:07:55 +00:00
[**--add-host**[=*[]*]]
2015-05-07 03:55:58 +00:00
[**--blkio-weight**[=*[BLKIO-WEIGHT]*]]
2014-08-20 01:10:42 +00:00
[**-c**|**--cpu-shares**[=*0*]]
[**--cap-add**[=*[]*]]
[**--cap-drop**[=*[]*]]
2015-07-14 01:26:59 +00:00
[**--cgroup-parent**[=*CGROUP-PATH*]]
2014-08-20 01:10:42 +00:00
[**--cidfile**[=*CIDFILE*]]
2015-04-08 08:58:59 +00:00
[**--cpu-period**[=*0*]]
2015-07-14 01:26:59 +00:00
[**--cpu-quota**[=*0*]]
move resources from Config to HostConfig
Cgroup resources are host dependent, they should be in hostConfig.
For backward compatibility, we just copy it to hostConfig, and leave it in
Config for now, so there is no regressions, but the right way to use this
throught json is to put it in HostConfig, like:
{
"Hostname": "",
...
"HostConfig": {
"CpuShares": 512,
"Memory": 314572800,
...
}
}
As we will add CpusetMems, CpusetCpus is definitely a better name, but some
users are already using Cpuset in their http APIs, we also make it compatible.
The main idea is keep using Cpuset in Config Struct, and make it has the same
value as CpusetCpus, but not always, some scenarios:
- Users use --cpuset in docker command, it can setup cpuset.cpus and can
get Cpuset field from docker inspect or other http API which will get
config info.
- Users use --cpuset-cpus in docker command, ditto.
- Users use Cpuset field in their http APIs, ditto.
- Users use CpusetCpus field in their http APIs, they won't get Cpuset field
in Config info, because by then, they should already know what happens
to Cpuset.
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2015-03-11 01:31:18 +00:00
[**--cpuset-cpus**[=*CPUSET-CPUS*]]
2015-04-15 01:33:46 +00:00
[**--cpuset-mems**[=*CPUSET-MEMS*]]
2014-08-20 01:10:42 +00:00
[**--device**[=*[]*]]
[**--dns**[=*[]*]]
2015-07-14 01:26:59 +00:00
[**--dns-search**[=*[]*]]
2014-08-20 01:10:42 +00:00
[**-e**|**--env**[=*[]*]]
[**--entrypoint**[=*ENTRYPOINT*]]
[**--env-file**[=*[]*]]
[**--expose**[=*[]*]]
2015-06-17 20:25:53 +00:00
[**--group-add**[=*[]*]]
2014-08-20 01:10:42 +00:00
[**-h**|**--hostname**[=*HOSTNAME*]]
2014-10-15 21:14:12 +00:00
[**--help**]
2014-08-20 01:10:42 +00:00
[**-i**|**--interactive**[=*false*]]
2014-11-28 04:21:55 +00:00
[**--ipc**[=*IPC*]]
2015-08-19 15:56:55 +00:00
[**--kernel-memory**[=*KERNEL-MEMORY*]]
2015-02-17 00:36:03 +00:00
[**-l**|**--label**[=*[]*]]
[**--label-file**[=*[]*]]
2014-08-20 01:10:42 +00:00
[**--link**[=*[]*]]
2015-02-06 00:24:47 +00:00
[**--log-driver**[=*[]*]]
2015-05-21 20:20:25 +00:00
[**--log-opt**[=*[]*]]
2015-07-14 01:26:59 +00:00
[**--lxc-conf**[=*[]*]]
2014-08-20 01:10:42 +00:00
[**-m**|**--memory**[=*MEMORY*]]
2014-11-28 04:21:55 +00:00
[**--mac-address**[=*MAC-ADDRESS*]]
2015-07-14 01:26:59 +00:00
[**--memory-swap**[=*MEMORY-SWAP*]]
[**--memory-swappiness**[=*MEMORY-SWAPPINESS*]]
2014-08-20 01:10:42 +00:00
[**--name**[=*NAME*]]
[**--net**[=*"bridge"*]]
2015-02-26 11:53:55 +00:00
[**--oom-kill-disable**[=*false*]]
2014-08-20 01:10:42 +00:00
[**-P**|**--publish-all**[=*false*]]
[**-p**|**--publish**[=*[]*]]
2014-11-25 20:10:53 +00:00
[**--pid**[=*[]*]]
2014-08-20 01:10:42 +00:00
[**--privileged**[=*false*]]
2015-01-13 21:52:51 +00:00
[**--read-only**[=*false*]]
2014-09-25 06:07:55 +00:00
[**--restart**[=*RESTART*]]
2014-11-28 04:21:55 +00:00
[**--security-opt**[=*[]*]]
2014-08-20 01:10:42 +00:00
[**-t**|**--tty**[=*false*]]
[**-u**|**--user**[=*USER*]]
2015-07-14 01:26:59 +00:00
[**--ulimit**[=*[]*]]
[**--uts**[=*[]*]]
2014-08-20 01:10:42 +00:00
[**-v**|**--volume**[=*[]*]]
[**--volumes-from**[=*[]*]]
[**-w**|**--workdir**[=*WORKDIR*]]
2014-11-28 04:21:55 +00:00
IMAGE [COMMAND] [ARG...]
2014-08-20 01:10:42 +00:00
2015-05-20 21:51:58 +00:00
# DESCRIPTION
Creates a writeable container layer over the specified image and prepares it for
running the specified command. The container ID is then printed to STDOUT. This
is similar to **docker run -d** except the container is never started. You can
then use the **docker start <container_id>** command to start the container at
any point.
The initial status of the container created with **docker create** is 'created'.
2014-08-20 01:10:42 +00:00
# OPTIONS
**-a**, ** --attach**=[]
Attach to STDIN, STDOUT or STDERR.
2014-09-25 06:07:55 +00:00
**--add-host**=[]
Add a custom host-to-IP mapping (host:ip)
2015-05-07 03:55:58 +00:00
**--blkio-weight**=0
Block IO weight (relative weight) accepts a weight value between 10 and 1000.
2014-08-20 01:10:42 +00:00
**-c**, ** --cpu-shares**=0
CPU shares (relative weight)
**--cap-add**=[]
Add Linux capabilities
**--cap-drop**=[]
Drop Linux capabilities
2015-03-16 23:06:47 +00:00
**--cgroup-parent**=""
Path to cgroups under which the cgroup for the container will be created. If the path is not absolute, the path is considered to be relative to the cgroups path of the init process. Cgroups will be created if they do not already exist.
2015-08-18 12:16:57 +00:00
**--cidfile**=""
Write the container ID to the file
2015-06-13 16:21:50 +00:00
**--cpu-period**=0
2015-04-08 08:58:59 +00:00
Limit the CPU CFS (Completely Fair Scheduler) period
move resources from Config to HostConfig
Cgroup resources are host dependent, they should be in hostConfig.
For backward compatibility, we just copy it to hostConfig, and leave it in
Config for now, so there is no regressions, but the right way to use this
throught json is to put it in HostConfig, like:
{
"Hostname": "",
...
"HostConfig": {
"CpuShares": 512,
"Memory": 314572800,
...
}
}
As we will add CpusetMems, CpusetCpus is definitely a better name, but some
users are already using Cpuset in their http APIs, we also make it compatible.
The main idea is keep using Cpuset in Config Struct, and make it has the same
value as CpusetCpus, but not always, some scenarios:
- Users use --cpuset in docker command, it can setup cpuset.cpus and can
get Cpuset field from docker inspect or other http API which will get
config info.
- Users use --cpuset-cpus in docker command, ditto.
- Users use Cpuset field in their http APIs, ditto.
- Users use CpusetCpus field in their http APIs, they won't get Cpuset field
in Config info, because by then, they should already know what happens
to Cpuset.
Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
2015-03-11 01:31:18 +00:00
**--cpuset-cpus**=""
2014-08-20 01:10:42 +00:00
CPUs in which to allow execution (0-3, 0,1)
2015-04-15 01:33:46 +00:00
**--cpuset-mems**=""
Memory nodes (MEMs) in which to allow execution (0-3, 0,1). Only effective on NUMA systems.
If you have four memory nodes on your system (0-3), use `--cpuset-mems=0,1`
then processes in your Docker container will only use memory from the first
two memory nodes.
2015-08-18 12:16:57 +00:00
**--cpu-quota**=0
2015-04-20 15:16:47 +00:00
Limit the CPU CFS (Completely Fair Scheduler) quota
2014-08-20 01:10:42 +00:00
**--device**=[]
2014-10-08 03:10:31 +00:00
Add a host device to the container (e.g. --device=/dev/sdc:/dev/xvdc:rwm)
2014-08-20 01:10:42 +00:00
**--dns**=[]
Set custom DNS servers
2015-08-18 12:16:57 +00:00
**--dns-search**=[]
Set custom DNS search domains (Use --dns-search=. if you don't wish to set the search domain)
2014-08-20 01:10:42 +00:00
**-e**, ** --env**=[]
Set environment variables
**--entrypoint**=""
Overwrite the default ENTRYPOINT of the image
**--env-file**=[]
2015-08-18 12:16:57 +00:00
Read in a line-delimited file of environment variables
2014-08-20 01:10:42 +00:00
**--expose**=[]
2014-09-17 01:08:30 +00:00
Expose a port or a range of ports (e.g. --expose=3300-3310) from the container without publishing it to your host
2014-08-20 01:10:42 +00:00
2015-06-17 20:25:53 +00:00
**--group-add**=[]
Add additional groups to run as
2014-08-20 01:10:42 +00:00
**-h**, ** --hostname**=""
Container host name
2014-10-15 21:14:12 +00:00
**--help**
Print usage statement
2014-08-20 01:10:42 +00:00
**-i**, ** --interactive**=*true*|*false*
Keep STDIN open even if not attached. The default is *false* .
2014-11-28 04:21:55 +00:00
**--ipc**=""
Default is to create a private IPC namespace (POSIX SysV IPC) for the container
'container:< name | id > ': reuses another container shared memory, semaphores and message queues
'host': use the host shared memory,semaphores and message queues inside the container. Note: the host mode gives the container full access to local shared memory and is therefore considered insecure.
2015-08-19 15:56:55 +00:00
**--kernel-memory**=""
Kernel memory limit (format: `<number>[<unit>]` , where unit = b, k, m or g)
Constrains the kernel memory available to a container. If a limit of 0
is specified (not using `--kernel-memory` ), the container's kernel memory
is not limited. If you specify a limit, it may be rounded up to a multiple
of the operating system's page size and the value can be very large,
millions of trillions.
2015-02-17 00:36:03 +00:00
**-l**, ** --label**=[]
2015-03-17 04:49:33 +00:00
Adds metadata to a container (e.g., --label=com.example.key=value)
2015-02-17 00:36:03 +00:00
**--label-file**=[]
2015-03-17 04:49:33 +00:00
Read labels from a file. Delimit each label with an EOL.
2015-02-17 00:36:03 +00:00
2014-08-20 01:10:42 +00:00
**--link**=[]
2015-05-07 20:02:14 +00:00
Add link to another container in the form of < name or id > :alias or just
< name or id > in which case the alias will match the name.
2014-08-20 01:10:42 +00:00
2015-06-20 04:07:50 +00:00
**--log-driver**="|*json-file*|*syslog*|*journald*|*gelf*|*fluentd*|*none*"
2015-02-06 00:24:47 +00:00
Logging driver for container. Default is defined by daemon `--log-driver` flag.
**Warning** : `docker logs` command works only for `json-file` logging driver.
2015-05-21 20:20:25 +00:00
**--log-opt**=[]
Logging driver specific options.
2015-08-18 12:16:57 +00:00
**--lxc-conf**=[]
(lxc exec-driver only) Add custom lxc options --lxc-conf="lxc.cgroup.cpuset.cpus = 0,1"
2014-08-20 01:10:42 +00:00
**-m**, ** --memory**=""
2015-08-22 04:29:52 +00:00
Memory limit (format: < number > [< unit > ], where unit = b, k, m or g)
2014-08-20 01:10:42 +00:00
2015-02-05 01:12:56 +00:00
Allows you to constrain the memory available to a container. If the host
supports swap memory, then the ** -m** memory setting can be larger than physical
RAM. If a limit of 0 is specified (not using ** -m**), the container's memory is
not limited. The actual limit may be rounded up to a multiple of the operating
system's page size (the value would be very large, that's millions of trillions).
2015-08-18 12:16:57 +00:00
**--mac-address**=""
Container MAC address (e.g. 92:d0:c6:0a:29:33)
2015-02-05 01:12:56 +00:00
**--memory-swap**=""
Total memory limit (memory + swap)
2015-08-22 04:29:52 +00:00
Set `-1` to disable swap (format: < number > [< unit > ], where unit = b, k, m or g).
2015-05-25 17:39:56 +00:00
This value should always larger than ** -m**, so you should always use this with ** -m**.
2015-02-05 01:12:56 +00:00
2015-08-18 12:16:57 +00:00
**--memory-swappiness**=""
Tune a container's memory swappiness behavior. Accepts an integer between 0 and 100.
2014-11-28 04:21:55 +00:00
2014-08-20 01:10:42 +00:00
**--name**=""
Assign a name to the container
**--net**="bridge"
Set the Network mode for the container
'bridge': creates a new network stack for the container on the docker bridge
'none': no networking for this container
'container:< name | id > ': reuses another container network stack
'host': use the host network stack inside the container. Note: the host mode gives the container full access to local system services such as D-bus and is therefore considered insecure.
2015-02-26 11:53:55 +00:00
**--oom-kill-disable**=*true*|*false*
Whether to disable OOM Killer for the container or not.
2014-08-20 01:10:42 +00:00
**-P**, ** --publish-all**=*true*|*false*
2015-01-06 07:01:10 +00:00
Publish all exposed ports to random ports on the host interfaces. The default is *false* .
2014-08-20 01:10:42 +00:00
**-p**, ** --publish**=[]
2014-11-03 18:15:55 +00:00
Publish a container's port, or a range of ports, to the host
2014-09-25 06:07:55 +00:00
format: ip:hostPort:containerPort | ip::containerPort | hostPort:containerPort | containerPort
2014-11-03 18:15:55 +00:00
Both hostPort and containerPort can be specified as a range of ports.
When specifying ranges for both, the number of container ports in the range must match the number of host ports in the range. (e.g., `-p 1234-1236:1234-1236/tcp` )
2014-08-20 01:10:42 +00:00
(use 'docker port' to see the actual mapping)
2014-11-25 20:10:53 +00:00
**--pid**=host
Set the PID mode for the container
**host** : use the host's PID namespace inside the container.
Note: the host mode gives the container full access to local PID and is therefore considered insecure.
2014-08-20 01:10:42 +00:00
**--privileged**=*true*|*false*
Give extended privileges to this container. The default is *false* .
2015-01-13 21:52:51 +00:00
**--read-only**=*true*|*false*
2015-02-05 01:12:56 +00:00
Mount the container's root filesystem as read only.
2015-01-13 21:52:51 +00:00
2015-03-10 02:09:12 +00:00
**--restart**="no"
2015-08-05 21:09:08 +00:00
Restart policy to apply when a container exits (no, on-failure[:max-retry], always, unless-stopped).
2014-09-25 06:07:55 +00:00
2014-11-28 04:21:55 +00:00
**--security-opt**=[]
Security Options
2014-08-20 01:10:42 +00:00
**-t**, ** --tty**=*true*|*false*
Allocate a pseudo-TTY. The default is *false* .
**-u**, ** --user**=""
Username or UID
2015-07-14 01:26:59 +00:00
**--ulimit**=[]
Ulimit options
2015-08-18 12:16:57 +00:00
**--uts**=host
Set the UTS mode for the container
**host** : use the host's UTS namespace inside the container.
Note: the host mode gives the container access to changing the host's hostname and is therefore considered insecure.
2014-08-20 01:10:42 +00:00
**-v**, ** --volume**=[]
Bind mount a volume (e.g., from the host: -v /host:/container, from Docker: -v /container)
**--volumes-from**=[]
Mount volumes from the specified container(s)
**-w**, ** --workdir**=""
Working directory inside the container
# HISTORY
August 2014, updated by Sven Dowideit < SvenDowideit @ home . org . au >
2014-09-25 06:07:55 +00:00
September 2014, updated by Sven Dowideit < SvenDowideit @ home . org . au >
2014-11-28 04:21:55 +00:00
November 2014, updated by Sven Dowideit < SvenDowideit @ home . org . au >