Docker cheatsheet

Usage:  docker attach [OPTIONS] CONTAINER

Attach local standard input, output, and error streams to a running container

Options:
	--detach-keys string   Override the key sequence for detaching a container
	--no-stdin             Do not attach STDIN
	--sig-proxy            Proxy all received signals to the process (default true)
		

Usage:  docker build [OPTIONS] PATH | URL | -

Build an image from a Dockerfile

Options:
	--add-host list           Add a custom host-to-IP mapping (host:ip)
	--build-arg list          Set build-time variables
	--cache-from strings      Images to consider as cache sources
	--cgroup-parent string    Optional parent cgroup for the container
	--compress                Compress the build context using gzip
	--cpu-period int          Limit the CPU CFS (Completely Fair Scheduler) period
	--cpu-quota int           Limit the CPU CFS (Completely Fair Scheduler) quota
-c, --cpu-shares int          CPU shares (relative weight)
	--cpuset-cpus string      CPUs in which to allow execution (0-3, 0,1)
	--cpuset-mems string      MEMs in which to allow execution (0-3, 0,1)
	--disable-content-trust   Skip image verification (default true)
-f, --file string             Name of the Dockerfile (Default is 'PATH/Dockerfile')
	--force-rm                Always remove intermediate containers
	--iidfile string          Write the image ID to the file
	--isolation string        Container isolation technology
	--label list              Set metadata for an image
-m, --memory bytes            Memory limit
	--memory-swap bytes       Swap limit equal to memory plus swap: '-1' to enable unlimited swap
	--network string          Set the networking mode for the RUN instructions during build (default "default")
	--no-cache                Do not use cache when building the image
	--pull                    Always attempt to pull a newer version of the image
-q, --quiet                   Suppress the build output and print image ID on success
	--rm                      Remove intermediate containers after a successful build (default true)
	--security-opt strings    Security options
	--shm-size bytes          Size of /dev/shm
	--squash                  Squash newly built layers into a single new layer
-t, --tag list                Name and optionally a tag in the 'name:tag' format
	--target string           Set the target build stage to build.
	--ulimit ulimit           Ulimit options (default [])
		

Usage:  docker commit [OPTIONS] CONTAINER [REPOSITORY[:TAG]]

Create a new image from a container's changes

Options:
-a, --author string    Author (e.g., "John Hannibal Smith ")
-c, --change list      Apply Dockerfile instruction to the created image
-m, --message string   Commit message
-p, --pause            Pause container during commit (default true)
		

Usage:  docker cp [OPTIONS] CONTAINER:SRC_PATH DEST_PATH|-
	docker cp [OPTIONS] SRC_PATH|- CONTAINER:DEST_PATH

Copy files/folders between a container and the local filesystem

Use '-' as the source to read a tar archive from stdin
and extract it to a directory destination in a container.
Use '-' as the destination to stream a tar archive of a
container source to stdout.

Options:
-a, --archive       Archive mode (copy all uid/gid information)
-L, --follow-link   Always follow symbol link in SRC_PATH
		

Usage:  docker create [OPTIONS] IMAGE [COMMAND] [ARG...]

Create a new container

Options:
	--add-host list                  Add a custom host-to-IP mapping (host:ip)
-a, --attach list                    Attach to STDIN, STDOUT or STDERR
	--blkio-weight uint16            Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
	--blkio-weight-device list       Block IO weight (relative device weight) (default [])
	--cap-add list                   Add Linux capabilities
	--cap-drop list                  Drop Linux capabilities
	--cgroup-parent string           Optional parent cgroup for the container
	--cgroupns string                Cgroup namespace to use (host|private) 'host':    Run the container in the Docker host's cgroup namespace 'private': Run the container in its own private cgroup namespace '':        Use the cgroup namespace as configured by the default-cgroupns-mode option on the daemon (default)
	--cidfile string                 Write the container ID to the file
	--cpu-period int                 Limit CPU CFS (Completely Fair Scheduler) period
	--cpu-quota int                  Limit CPU CFS (Completely Fair Scheduler) quota
	--cpu-rt-period int              Limit CPU real-time period in microseconds
	--cpu-rt-runtime int             Limit CPU real-time runtime in microseconds
-c, --cpu-shares int                 CPU shares (relative weight)
	--cpus decimal                   Number of CPUs
	--cpuset-cpus string             CPUs in which to allow execution (0-3, 0,1)
	--cpuset-mems string             MEMs in which to allow execution (0-3, 0,1)
	--device list                    Add a host device to the container
	--device-cgroup-rule list        Add a rule to the cgroup allowed devices list
	--device-read-bps list           Limit read rate (bytes per second) from a device (default [])
	--device-read-iops list          Limit read rate (IO per second) from a device (default [])
	--device-write-bps list          Limit write rate (bytes per second) to a device (default [])
	--device-write-iops list         Limit write rate (IO per second) to a device (default [])
	--disable-content-trust          Skip image verification (default true)
	--dns list                       Set custom DNS servers
	--dns-option list                Set DNS options
	--dns-search list                Set custom DNS search domains
	--domainname string              Container NIS domain name
	--entrypoint string              Overwrite the default ENTRYPOINT of the image
-e, --env list                       Set environment variables
	--env-file list                  Read in a file of environment variables
	--expose list                    Expose a port or a range of ports
	--gpus gpu-request               GPU devices to add to the container ('all' to pass all GPUs)
	--group-add list                 Add additional groups to join
	--health-cmd string              Command to run to check health
	--health-interval duration       Time between running the check (ms|s|m|h) (default 0s)
	--health-retries int             Consecutive failures needed to report unhealthy
	--health-start-period duration   Start period for the container to initialize before starting health-retries countdown (ms|s|m|h) (default 0s)
	--health-timeout duration        Maximum time to allow one check to run (ms|s|m|h) (default 0s)
	--help                           Print usage
-h, --hostname string                Container host name
	--init                           Run an init inside the container that forwards signals and reaps processes
-i, --interactive                    Keep STDIN open even if not attached
	--ip string                      IPv4 address (e.g., 172.30.100.104)
	--ip6 string                     IPv6 address (e.g., 2001:db8::33)
	--ipc string                     IPC mode to use
	--isolation string               Container isolation technology
	--kernel-memory bytes            Kernel memory limit
-l, --label list                     Set meta data on a container
	--label-file list                Read in a line delimited file of labels
	--link list                      Add link to another container
	--link-local-ip list             Container IPv4/IPv6 link-local addresses
	--log-driver string              Logging driver for the container
	--log-opt list                   Log driver options
	--mac-address string             Container MAC address (e.g., 92:d0:c6:0a:29:33)
-m, --memory bytes                   Memory limit
	--memory-reservation bytes       Memory soft limit
	--memory-swap bytes              Swap limit equal to memory plus swap: '-1' to enable unlimited swap
	--memory-swappiness int          Tune container memory swappiness (0 to 100) (default -1)
	--mount mount                    Attach a filesystem mount to the container
	--name string                    Assign a name to the container
	--network network                Connect a container to a network
	--network-alias list             Add network-scoped alias for the container
	--no-healthcheck                 Disable any container-specified HEALTHCHECK
	--oom-kill-disable               Disable OOM Killer
	--oom-score-adj int              Tune host's OOM preferences (-1000 to 1000)
	--pid string                     PID namespace to use
	--pids-limit int                 Tune container pids limit (set -1 for unlimited)
	--platform string                Set platform if server is multi-platform capable
	--privileged                     Give extended privileges to this container
-p, --publish list                   Publish a container's port(s) to the host
-P, --publish-all                    Publish all exposed ports to random ports
	--pull string                    Pull image before creating ("always"|"missing"|"never") (default "missing")
	--read-only                      Mount the container's root filesystem as read only
	--restart string                 Restart policy to apply when a container exits (default "no")
	--rm                             Automatically remove the container when it exits
	--runtime string                 Runtime to use for this container
	--security-opt list              Security Options
	--shm-size bytes                 Size of /dev/shm
	--stop-signal string             Signal to stop a container (default "15")
	--stop-timeout int               Timeout (in seconds) to stop a container
	--storage-opt list               Storage driver options for the container
	--sysctl map                     Sysctl options (default map[])
	--tmpfs list                     Mount a tmpfs directory
-t, --tty                            Allocate a pseudo-TTY
	--ulimit ulimit                  Ulimit options (default [])
-u, --user string                    Username or UID (format: [:])
	--userns string                  User namespace to use
	--uts string                     UTS namespace to use
-v, --volume list                    Bind mount a volume
	--volume-driver string           Optional volume driver for the container
	--volumes-from list              Mount volumes from the specified container(s)
-w, --workdir string                 Working directory inside the container
		

Usage:  docker diff CONTAINER

Inspect changes to files or directories on a container's filesystem
		

Usage:  docker events [OPTIONS]

Get real time events from the server

Options:
-f, --filter filter   Filter output based on conditions provided
	--format string   Format the output using the given Go template
	--since string    Show all events created since timestamp
	--until string    Stream events until this timestamp
		

Usage:  docker exec [OPTIONS] CONTAINER COMMAND [ARG...]

Run a command in a running container

Options:
-d, --detach               Detached mode: run command in the background
	--detach-keys string   Override the key sequence for detaching a container
-e, --env list             Set environment variables
	--env-file list        Read in a file of environment variables
-i, --interactive          Keep STDIN open even if not attached
	--privileged           Give extended privileges to the command
-t, --tty                  Allocate a pseudo-TTY
-u, --user string          Username or UID (format: [:])
-w, --workdir string       Working directory inside the container
		

Usage:  docker export [OPTIONS] CONTAINER

Export a container's filesystem as a tar archive

Options:
-o, --output string   Write to a file, instead of STDOUT
		

Usage:  docker history [OPTIONS] IMAGE

Show the history of an image

Options:
	--format string   Pretty-print images using a Go template
-H, --human           Print sizes and dates in human readable format (default true)
	--no-trunc        Don't truncate output
-q, --quiet           Only show image IDs
		

Usage:  docker images [OPTIONS] [REPOSITORY[:TAG]]

List images

Options:
-a, --all             Show all images (default hides intermediate images)
	--digests         Show digests
-f, --filter filter   Filter output based on conditions provided
	--format string   Pretty-print images using a Go template
	--no-trunc        Don't truncate output
-q, --quiet           Only show image IDs
		

Usage:  docker import [OPTIONS] file|URL|- [REPOSITORY[:TAG]]

Import the contents from a tarball to create a filesystem image

Options:
-c, --change list       Apply Dockerfile instruction to the created image
-m, --message string    Set commit message for imported image
	--platform string   Set platform if server is multi-platform capable
		

Usage:  docker info [OPTIONS]

Display system-wide information

Options:
-f, --format string   Format the output using the given Go template
		

Usage:  docker inspect [OPTIONS] NAME|ID [NAME|ID...]

Return low-level information on Docker objects

Options:
-f, --format string   Format the output using the given Go template
-s, --size            Display total file sizes if the type is container
	--type string     Return JSON for specified type
		

Usage:  docker kill [OPTIONS] CONTAINER [CONTAINER...]

Kill one or more running containers

Options:
-s, --signal string   Signal to send to the container (default "KILL")
		

Usage:  docker load [OPTIONS]

Load an image from a tar archive or STDIN

Options:
-i, --input string   Read from tar archive file, instead of STDIN
-q, --quiet          Suppress the load output
		

Log in to a Docker registry or cloud backend.
If no registry server is specified, the default is defined by the daemon.

Usage:
docker login [OPTIONS] [SERVER] [flags]
docker login [command]

Available Commands:
azure       Log in to azure

Flags:
-h, --help              Help for login
-p, --password string   password
	--password-stdin    Take the password from stdin
-u, --username string   username

Use "docker login [command] --help" for more information about a command.
		

Log out from a Docker registry or cloud backend.
If no server is specified, the default is defined by the daemon.

Usage:
docker logout [SERVER] [flags]
docker logout [command]

Available Commands:
azure       Logout from Azure

Flags:
-h, --help   Help for logout

Use "docker logout [command] --help" for more information about a command.
		

Usage:  docker logs [OPTIONS] CONTAINER

Fetch the logs of a container

Options:
	--details        Show extra details provided to logs
-f, --follow         Follow log output
	--since string   Show logs since timestamp (e.g. 2013-01-02T13:23:37Z) or relative (e.g. 42m for 42 minutes)
-n, --tail string    Number of lines to show from the end of the logs (default "all")
-t, --timestamps     Show timestamps
	--until string   Show logs before a timestamp (e.g. 2013-01-02T13:23:37Z) or relative (e.g. 42m for 42 minutes)
		

Usage:  docker pause CONTAINER [CONTAINER...]

Pause all processes within one or more containers
		

Usage:  docker port CONTAINER [PRIVATE_PORT[/PROTO]]

List port mappings or a specific mapping for the container
		

Usage:  docker ps [OPTIONS]

List containers

Options:
-a, --all             Show all containers (default shows just running)
-f, --filter filter   Filter output based on conditions provided
	--format string   Pretty-print containers using a Go template
-n, --last int        Show n last created containers (includes all states) (default -1)
-l, --latest          Show the latest created container (includes all states)
	--no-trunc        Don't truncate output
-q, --quiet           Only display container IDs
-s, --size            Display total file sizes
		

Usage:  docker pull [OPTIONS] NAME[:TAG|@DIGEST]

Pull an image or a repository from a registry

Options:
-a, --all-tags                Download all tagged images in the repository
	--disable-content-trust   Skip image verification (default true)
	--platform string         Set platform if server is multi-platform capable
-q, --quiet                   Suppress verbose output
		

Usage:  docker push [OPTIONS] NAME[:TAG]

Push an image or a repository to a registry

Options:
-a, --all-tags                Push all tagged images in the repository
	--disable-content-trust   Skip image signing (default true)
-q, --quiet                   Suppress verbose output
		

Usage:  docker rename CONTAINER NEW_NAME

Rename a container
		

Usage:  docker restart [OPTIONS] CONTAINER [CONTAINER...]

Restart one or more containers

Options:
-t, --time int   Seconds to wait for stop before killing the container (default 10)
		

Usage:  docker rm [OPTIONS] CONTAINER [CONTAINER...]

Remove one or more containers

Options:
-f, --force     Force the removal of a running container (uses SIGKILL)
-l, --link      Remove the specified link
-v, --volumes   Remove anonymous volumes associated with the container
		

Usage:  docker rmi [OPTIONS] IMAGE [IMAGE...]

Remove one or more images

Options:
-f, --force      Force removal of the image
	--no-prune   Do not delete untagged parents
		

Usage:  docker run [OPTIONS] IMAGE [COMMAND] [ARG...]

Run a command in a new container

Options:
	--add-host list                  Add a custom host-to-IP mapping (host:ip)
-a, --attach list                    Attach to STDIN, STDOUT or STDERR
	--blkio-weight uint16            Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
	--blkio-weight-device list       Block IO weight (relative device weight) (default [])
	--cap-add list                   Add Linux capabilities
	--cap-drop list                  Drop Linux capabilities
	--cgroup-parent string           Optional parent cgroup for the container
	--cgroupns string                Cgroup namespace to use (host|private) 'host':    Run the container in the Docker host's cgroup namespace 'private': Run the container in its own private cgroup namespace '':        Use the cgroup namespace as configured by the default-cgroupns-mode option on the daemon (default)
	--cidfile string                 Write the container ID to the file
	--cpu-period int                 Limit CPU CFS (Completely Fair Scheduler) period
	--cpu-quota int                  Limit CPU CFS (Completely Fair Scheduler) quota
	--cpu-rt-period int              Limit CPU real-time period in microseconds
	--cpu-rt-runtime int             Limit CPU real-time runtime in microseconds
-c, --cpu-shares int                 CPU shares (relative weight)
	--cpus decimal                   Number of CPUs
	--cpuset-cpus string             CPUs in which to allow execution (0-3, 0,1)
	--cpuset-mems string             MEMs in which to allow execution (0-3, 0,1)
-d, --detach                         Run container in background and print container ID
	--detach-keys string             Override the key sequence for detaching a container
	--device list                    Add a host device to the container
	--device-cgroup-rule list        Add a rule to the cgroup allowed devices list
	--device-read-bps list           Limit read rate (bytes per second) from a device (default [])
	--device-read-iops list          Limit read rate (IO per second) from a device (default [])
	--device-write-bps list          Limit write rate (bytes per second) to a device (default [])
	--device-write-iops list         Limit write rate (IO per second) to a device (default [])
	--disable-content-trust          Skip image verification (default true)
	--dns list                       Set custom DNS servers
	--dns-option list                Set DNS options
	--dns-search list                Set custom DNS search domains
	--domainname string              Container NIS domain name
	--entrypoint string              Overwrite the default ENTRYPOINT of the image
-e, --env list                       Set environment variables
	--env-file list                  Read in a file of environment variables
	--expose list                    Expose a port or a range of ports
	--gpus gpu-request               GPU devices to add to the container ('all' to pass all GPUs)
	--group-add list                 Add additional groups to join
	--health-cmd string              Command to run to check health
	--health-interval duration       Time between running the check (ms|s|m|h) (default 0s)
	--health-retries int             Consecutive failures needed to report unhealthy
	--health-start-period duration   Start period for the container to initialize before starting health-retries countdown (ms|s|m|h) (default 0s)
	--health-timeout duration        Maximum time to allow one check to run (ms|s|m|h) (default 0s)
	--help                           Print usage
-h, --hostname string                Container host name
	--init                           Run an init inside the container that forwards signals and reaps processes
-i, --interactive                    Keep STDIN open even if not attached
	--ip string                      IPv4 address (e.g., 172.30.100.104)
	--ip6 string                     IPv6 address (e.g., 2001:db8::33)
	--ipc string                     IPC mode to use
	--isolation string               Container isolation technology
	--kernel-memory bytes            Kernel memory limit
-l, --label list                     Set meta data on a container
	--label-file list                Read in a line delimited file of labels
	--link list                      Add link to another container
	--link-local-ip list             Container IPv4/IPv6 link-local addresses
	--log-driver string              Logging driver for the container
	--log-opt list                   Log driver options
	--mac-address string             Container MAC address (e.g., 92:d0:c6:0a:29:33)
-m, --memory bytes                   Memory limit
	--memory-reservation bytes       Memory soft limit
	--memory-swap bytes              Swap limit equal to memory plus swap: '-1' to enable unlimited swap
	--memory-swappiness int          Tune container memory swappiness (0 to 100) (default -1)
	--mount mount                    Attach a filesystem mount to the container
	--name string                    Assign a name to the container
	--network network                Connect a container to a network
	--network-alias list             Add network-scoped alias for the container
	--no-healthcheck                 Disable any container-specified HEALTHCHECK
	--oom-kill-disable               Disable OOM Killer
	--oom-score-adj int              Tune host's OOM preferences (-1000 to 1000)
	--pid string                     PID namespace to use
	--pids-limit int                 Tune container pids limit (set -1 for unlimited)
	--platform string                Set platform if server is multi-platform capable
	--privileged                     Give extended privileges to this container
-p, --publish list                   Publish a container's port(s) to the host
-P, --publish-all                    Publish all exposed ports to random ports
	--pull string                    Pull image before running ("always"|"missing"|"never") (default "missing")
	--read-only                      Mount the container's root filesystem as read only
	--restart string                 Restart policy to apply when a container exits (default "no")
	--rm                             Automatically remove the container when it exits
	--runtime string                 Runtime to use for this container
	--security-opt list              Security Options
	--shm-size bytes                 Size of /dev/shm
	--sig-proxy                      Proxy received signals to the process (default true)
	--stop-signal string             Signal to stop a container (default "15")
	--stop-timeout int               Timeout (in seconds) to stop a container
	--storage-opt list               Storage driver options for the container
	--sysctl map                     Sysctl options (default map[])
	--tmpfs list                     Mount a tmpfs directory
-t, --tty                            Allocate a pseudo-TTY
	--ulimit ulimit                  Ulimit options (default [])
-u, --user string                    Username or UID (format: [:])
	--userns string                  User namespace to use
	--uts string                     UTS namespace to use
-v, --volume list                    Bind mount a volume
	--volume-driver string           Optional volume driver for the container
	--volumes-from list              Mount volumes from the specified container(s)
-w, --workdir string                 Working directory inside the container
		

Usage:  docker save [OPTIONS] IMAGE [IMAGE...]

Save one or more images to a tar archive (streamed to STDOUT by default)

Options:
-o, --output string   Write to a file, instead of STDOUT
		

Usage:  docker search [OPTIONS] TERM

Search the Docker Hub for images

Options:
-f, --filter filter   Filter output based on conditions provided
	--format string   Pretty-print search using a Go template
	--limit int       Max number of search results (default 25)
	--no-trunc        Don't truncate output
		

Usage:  docker start [OPTIONS] CONTAINER [CONTAINER...]

Start one or more stopped containers

Options:
-a, --attach               Attach STDOUT/STDERR and forward signals
	--detach-keys string   Override the key sequence for detaching a container
-i, --interactive          Attach container's STDIN
		

Usage:  docker stats [OPTIONS] [CONTAINER...]

Display a live stream of container(s) resource usage statistics

Options:
-a, --all             Show all containers (default shows just running)
	--format string   Pretty-print images using a Go template
	--no-stream       Disable streaming stats and only pull the first result
	--no-trunc        Do not truncate output
		

Usage:  docker stop [OPTIONS] CONTAINER [CONTAINER...]

Stop one or more running containers

Options:
-t, --time int   Seconds to wait for stop before killing it (default 10)
		

Usage:  docker tag SOURCE_IMAGE[:TAG] TARGET_IMAGE[:TAG]

Create a tag TARGET_IMAGE that refers to SOURCE_IMAGE
		

Usage:  docker top CONTAINER [ps OPTIONS]

Display the running processes of a container
		

Usage:  docker unpause CONTAINER [CONTAINER...]

Unpause all processes within one or more containers
		

Usage:  docker update [OPTIONS] CONTAINER [CONTAINER...]

Update configuration of one or more containers

Options:
	--blkio-weight uint16        Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
	--cpu-period int             Limit CPU CFS (Completely Fair Scheduler) period
	--cpu-quota int              Limit CPU CFS (Completely Fair Scheduler) quota
	--cpu-rt-period int          Limit the CPU real-time period in microseconds
	--cpu-rt-runtime int         Limit the CPU real-time runtime in microseconds
-c, --cpu-shares int             CPU shares (relative weight)
	--cpus decimal               Number of CPUs
	--cpuset-cpus string         CPUs in which to allow execution (0-3, 0,1)
	--cpuset-mems string         MEMs in which to allow execution (0-3, 0,1)
	--kernel-memory bytes        Kernel memory limit
-m, --memory bytes               Memory limit
	--memory-reservation bytes   Memory soft limit
	--memory-swap bytes          Swap limit equal to memory plus swap: '-1' to enable unlimited swap
	--pids-limit int             Tune container pids limit (set -1 for unlimited)
	--restart string             Restart policy to apply when a container exits
		

Show the Docker version information

Usage:
docker version [flags]

Flags:
-f, --format string       Format the output. Values: [pretty | json]. (Default: pretty)
-h, --help                Help for version
	--kubeconfig string   Kubernetes config file
		

Usage:  docker wait CONTAINER [CONTAINER...]

Block until one or more containers stop, then print their exit codes
		

Usage:  docker builder build [OPTIONS] PATH | URL | -

Build an image from a Dockerfile

Options:
	--add-host list           Add a custom host-to-IP mapping (host:ip)
	--build-arg list          Set build-time variables
	--cache-from strings      Images to consider as cache sources
	--cgroup-parent string    Optional parent cgroup for the container
	--compress                Compress the build context using gzip
	--cpu-period int          Limit the CPU CFS (Completely Fair Scheduler) period
	--cpu-quota int           Limit the CPU CFS (Completely Fair Scheduler) quota
-c, --cpu-shares int          CPU shares (relative weight)
	--cpuset-cpus string      CPUs in which to allow execution (0-3, 0,1)
	--cpuset-mems string      MEMs in which to allow execution (0-3, 0,1)
	--disable-content-trust   Skip image verification (default true)
-f, --file string             Name of the Dockerfile (Default is 'PATH/Dockerfile')
	--force-rm                Always remove intermediate containers
	--iidfile string          Write the image ID to the file
	--isolation string        Container isolation technology
	--label list              Set metadata for an image
-m, --memory bytes            Memory limit
	--memory-swap bytes       Swap limit equal to memory plus swap: '-1' to enable unlimited swap
	--network string          Set the networking mode for the RUN instructions during build (default "default")
	--no-cache                Do not use cache when building the image
	--pull                    Always attempt to pull a newer version of the image
-q, --quiet                   Suppress the build output and print image ID on success
	--rm                      Remove intermediate containers after a successful build (default true)
	--security-opt strings    Security options
	--shm-size bytes          Size of /dev/shm
	--squash                  Squash newly built layers into a single new layer
-t, --tag list                Name and optionally a tag in the 'name:tag' format
	--target string           Set the target build stage to build.
	--ulimit ulimit           Ulimit options (default [])
		

Usage:  docker builder prune

Remove build cache

Options:
-a, --all                  Remove all unused build cache, not just dangling ones
	--filter filter        Provide filter values (e.g. 'until=24h')
-f, --force                Do not prompt for confirmation
	--keep-storage bytes   Amount of disk space to keep for cache
		

Usage:  docker buildx bake [OPTIONS] [TARGET...]

Build from a file

Aliases:
bake, f

Options:
	--builder string         Override the configured builder instance
-f, --file stringArray       Build definition file
	--load                   Shorthand for "--set=*.output=type=docker"
	--metadata-file string   Write build result metadata to the file
	--no-cache               Do not use cache when building the image
	--print                  Print the options without building
	--progress string        Set type of progress output ("auto", "plain", "tty"). Use plain to show container output (default "auto")
	--pull                   Always attempt to pull all referenced images
	--push                   Shorthand for "--set=*.output=type=registry"
	--set stringArray        Override target value (e.g., "targetpattern.key=value")
		

Usage:  docker buildx build [OPTIONS] PATH | URL | -

Start a build

Aliases:
build, b

Options:
	--add-host strings              Add a custom host-to-IP mapping (format: "host:ip")
	--allow strings                 Allow extra privileged entitlement (e.g., "network.host", "security.insecure")
	--build-arg stringArray         Set build-time variables
	--build-context stringArray     Additional build contexts (e.g., name=path)
	--builder string                Override the configured builder instance
	--cache-from stringArray        External cache sources (e.g., "user/app:cache", "type=local,src=path/to/dir")
	--cache-to stringArray          Cache export destinations (e.g., "user/app:cache", "type=local,dest=path/to/dir")
	--cgroup-parent string          Optional parent cgroup for the container
-f, --file string                   Name of the Dockerfile (default: "PATH/Dockerfile")
	--iidfile string                Write the image ID to the file
	--label stringArray             Set metadata for an image
	--load                          Shorthand for "--output=type=docker"
	--metadata-file string          Write build result metadata to the file
	--network string                Set the networking mode for the "RUN" instructions during build (default "default")
	--no-cache                      Do not use cache when building the image
	--no-cache-filter stringArray   Do not cache specified stages
-o, --output stringArray            Output destination (format: "type=local,dest=path")
	--platform stringArray          Set target platform for build
	--progress string               Set type of progress output ("auto", "plain", "tty"). Use plain to show container output (default "auto")
	--pull                          Always attempt to pull all referenced images
	--push                          Shorthand for "--output=type=registry"
-q, --quiet                         Suppress the build output and print image ID on success
	--secret stringArray            Secret to expose to the build (format: "id=mysecret[,src=/local/secret]")
	--shm-size bytes                Size of "/dev/shm"
	--ssh stringArray               SSH agent socket or keys to expose to the build (format: "default|[=|[,]]")
-t, --tag stringArray               Name and optionally a tag (format: "name:tag")
	--target string                 Set the target build stage to build
	--ulimit ulimit                 Ulimit options (default [])
		

Usage:  docker buildx create [OPTIONS] [CONTEXT|ENDPOINT]

Create a new builder instance

Options:
	--append                   Append a node to builder instead of changing it
	--bootstrap                Boot builder after creation
	--buildkitd-flags string   Flags for buildkitd daemon
	--config string            BuildKit config file
	--driver string            Driver to use (available: "docker", "docker-container", "kubernetes")
	--driver-opt stringArray   Options for the driver
	--leave                    Remove a node from builder instead of changing it
	--name string              Builder instance name
	--node string              Create/modify node with given name
	--platform stringArray     Fixed platforms for current node
	--use                      Set the current builder instance
		

Usage:  docker buildx du

Disk usage

Options:
	--builder string   Override the configured builder instance
	--filter filter    Provide filter values
	--verbose          Provide a more verbose output
		

Usage:  docker buildx inspect [NAME]

Inspect current builder instance

Options:
	--bootstrap        Ensure builder has booted before inspecting
	--builder string   Override the configured builder instance
		

Usage:  docker buildx ls

List builder instances
		

Usage:  docker buildx prune

Remove build cache

Options:
-a, --all                  Remove all unused images, not just dangling ones
	--builder string       Override the configured builder instance
	--filter filter        Provide filter values (e.g., "until=24h")
-f, --force                Do not prompt for confirmation
	--keep-storage bytes   Amount of disk space to keep for cache
	--verbose              Provide a more verbose output
		

Usage:  docker buildx rm [NAME]

Remove a builder instance

Options:
	--all-inactive     Remove all inactive builders
	--builder string   Override the configured builder instance
-f, --force            Do not prompt for confirmation
	--keep-daemon      Keep the buildkitd daemon running
	--keep-state       Keep BuildKit state
		

Usage:  docker buildx stop [NAME]

Stop builder instance

Options:
	--builder string   Override the configured builder instance
		

Usage:  docker buildx use [OPTIONS] NAME

Set the current builder instance

Options:
	--builder string   Override the configured builder instance
	--default          Set builder as default for current context
	--global           Builder persists context changes
		

Usage:  docker buildx version

Show buildx version information
		

Usage:  docker compose build [SERVICE...]

Build or rebuild services

Options:
	--build-arg stringArray   Set build-time variables for services.
	--no-cache                Do not use cache when building the image
	--progress string         Set type of progress output (auto, tty, plain, quiet) (default "auto")
	--pull                    Always attempt to pull a newer version of the image.
-q, --quiet                   Don't print anything to STDOUT
		

Usage:  docker compose convert SERVICES

Converts the compose file to platform's canonical format

Aliases:
convert, config

Options:
	--format string           Format the output. Values: [yaml | json] (default "yaml")
	--hash string             Print the service config hash, one per line.
	--images                  Print the image names, one per line.
	--no-interpolate          Don't interpolate environment variables.
	--no-normalize            Don't normalize compose model.
-o, --output string           Save to file (default to stdout)
	--profiles                Print the profile names, one per line.
-q, --quiet                   Only validate the configuration, don't print anything.
	--resolve-image-digests   Pin image tags to digests.
	--services                Print the service names, one per line.
	--volumes                 Print the volume names, one per line.
		

Usage:  docker compose cp [OPTIONS] SERVICE:SRC_PATH DEST_PATH|-
	docker compose cp [OPTIONS] SRC_PATH|- SERVICE:DEST_PATH

Copy files/folders between a service container and the local filesystem

Options:
	--all           Copy to all the containers of the service.
-a, --archive       Archive mode (copy all uid/gid information)
-L, --follow-link   Always follow symbol link in SRC_PATH
	--index int     Index of the container if there are multiple instances of a service [default: 1]. (default 1)
		

Usage:  docker compose create [SERVICE...]

Creates containers for a service.

Options:
	--build            Build images before starting containers.
	--force-recreate   Recreate containers even if their configuration and image haven't changed.
	--no-build         Don't build an image, even if it's missing.
	--no-recreate      If containers already exist, don't recreate them. Incompatible with --force-recreate.
		

Usage:  docker compose down

Stop and remove containers, networks

Options:
	--remove-orphans    Remove containers for services not defined in the Compose file.
	--rmi string        Remove images used by services. "local" remove only images that don't have a custom tag ("local"|"all")
-t, --timeout int       Specify a shutdown timeout in seconds (default 10)
-v, --volumes volumes    Remove named volumes declared in the volumes section of the Compose file and anonymous volumes attached to containers.
		

Usage:  docker compose events [options] [--] [SERVICE...]

Receive real time events from containers.

Options:
	--json   Output events as a stream of json objects
		

Usage:  docker compose exec [options] [-e KEY=VAL...] [--] SERVICE COMMAND [ARGS...]

Execute a command in a running container.

Options:
-d, --detach                       Detached mode: Run command in the background.
-e, --env stringArray              Set environment variables
	--index int                    index of the container if there are multiple instances of a service [default: 1]. (default 1)
-T, --no-TTY docker compose exec   Disable pseudo-TTY allocation. By default docker compose exec allocates a TTY.
	--privileged                   Give extended privileges to the process.
-u, --user string                  Run the command as this user.
-w, --workdir string               Path to workdir directory for this command.
		

Usage:  docker compose images [SERVICE...]

List images used by the created containers

Options:
-q, --quiet   Only display IDs
		

Usage:  docker compose kill [options] [SERVICE...]

Force stop service containers.

Options:
-s, --signal string   SIGNAL to send to the container. (default "SIGKILL")
		

Usage:  docker compose logs [SERVICE...]

View output from containers

Options:
-f, --follow          Follow log output.
	--no-color        Produce monochrome output.
	--no-log-prefix   Don't print prefix in logs.
	--since string    Show logs since timestamp (e.g. 2013-01-02T13:23:37Z) or relative (e.g. 42m for 42 minutes)
	--tail string     Number of lines to show from the end of the logs for each container. (default "all")
-t, --timestamps      Show timestamps.
	--until string    Show logs before a timestamp (e.g. 2013-01-02T13:23:37Z) or relative (e.g. 42m for 42 minutes)
		

Usage:  docker compose ls

List running compose projects

Options:
-a, --all             Show all stopped Compose projects
	--filter filter   Filter output based on conditions provided.
	--format string   Format the output. Values: [pretty | json]. (default "pretty")
-q, --quiet           Only display IDs.
		

Usage:  docker compose pause [SERVICE...]

Pause services
		

Usage:  docker compose port [options] [--] SERVICE PRIVATE_PORT

Print the public port for a port binding.

Options:
	--index int         index of the container if service has multiple replicas (default 1)
	--protocol string   tcp or udp (default "tcp")
		

Usage:  docker compose ps [SERVICE...]

List containers

Options:
-a, --all                  Show all stopped containers (including those created by the run command)
	--format string        Format the output. Values: [pretty | json] (default "pretty")
-q, --quiet                Only display IDs
	--services             Display services
	--status stringArray   Filter services by status. Values: [paused | restarting | removing | running | dead | created | exited]
		

Usage:  docker compose pull [SERVICE...]

Pull service images

Options:
	--ignore-pull-failures   Pull what it can and ignores images with pull failures
	--include-deps           Also pull services declared as dependencies
-q, --quiet                  Pull without printing progress information
		

Usage:  docker compose push [SERVICE...]

Push service images

Options:
	--ignore-push-failures   Push what it can and ignores images with push failures
		

Usage:  docker compose restart

Restart containers

Options:
-t, --timeout int   Specify a shutdown timeout in seconds (default 10)
		

Usage:  docker compose rm [SERVICE...]

Removes stopped service containers

By default, anonymous volumes attached to containers will not be removed. You
can override this with -v. To list all volumes, use "docker volume ls".

Any data which is not in a volume will be lost.

Options:
-f, --force     Don't ask to confirm removal
-s, --stop      Stop the containers, if required, before removing
-v, --volumes   Remove any anonymous volumes attached to containers
		

Usage:  docker compose run [options] [-v VOLUME...] [-p PORT...] [-e KEY=VAL...] [-l KEY=VALUE...] SERVICE [COMMAND] [ARGS...]

Run a one-off command on a service.

Options:
-d, --detach                Run container in background and print container ID
	--entrypoint string     Override the entrypoint of the image
-e, --env stringArray       Set environment variables
-i, --interactive           Keep STDIN open even if not attached. (default true)
-l, --label stringArray     Add or override a label
	--name string            Assign a name to the container
-T, --no-TTY                Disable pseudo-noTty allocation. By default docker compose run allocates a TTY
	--no-deps               Don't start linked services.
-p, --publish stringArray   Publish a container's port(s) to the host.
	--quiet-pull            Pull without printing progress information.
	--rm                    Automatically remove the container when it exits
	--service-ports         Run command with the service's ports enabled and mapped to the host.
	--use-aliases           Use the service's network useAliases in the network(s) the container connects to.
-u, --user string           Run as specified username or uid
-v, --volume stringArray    Bind mount a volume.
-w, --workdir string        Working directory inside the container
		

Usage:  docker compose start [SERVICE...]

Start services
		

Usage:  docker compose stop [SERVICE...]

Stop services

Options:
-t, --timeout int   Specify a shutdown timeout in seconds (default 10)
		

Usage:  docker compose top [SERVICES...]

Display the running processes
		

Usage:  docker compose unpause [SERVICE...]

Unpause services
		

Usage:  docker compose up [SERVICE...]

Create and start containers

Options:
	--abort-on-container-exit   Stops all containers if any container was stopped. Incompatible with -d
	--always-recreate-deps      Recreate dependent containers. Incompatible with --no-recreate.
	--attach stringArray        Attach to service output.
	--attach-dependencies       Attach to dependent containers.
	--build                     Build images before starting containers.
-d, --detach                    Detached mode: Run containers in the background
	--exit-code-from string     Return the exit code of the selected service container. Implies --abort-on-container-exit
	--force-recreate            Recreate containers even if their configuration and image haven't changed.
	--no-build                  Don't build an image, even if it's missing.
	--no-color                  Produce monochrome output.
	--no-deps                   Don't start linked services.
	--no-log-prefix             Don't print prefix in logs.
	--no-recreate               If containers already exist, don't recreate them. Incompatible with --force-recreate.
	--no-start                  Don't start the services after creating them.
	--quiet-pull                Pull without printing progress information.
	--remove-orphans            Remove containers for services not defined in the Compose file.
-V, --renew-anon-volumes        Recreate anonymous volumes instead of retrieving data from the previous containers.
	--scale scale               Scale SERVICE to NUM instances. Overrides the scale setting in the Compose file if present.
-t, --timeout int               Use this timeout in seconds for container shutdown when attached or when containers are already running. (default 10)
	--wait                      Wait for services to be running|healthy. Implies detached mode.
		

Usage:  docker compose version

Show the Docker Compose version information

Options:
-f, --format string   Format the output. Values: [pretty | json]. (Default: pretty)
	--short           Shows only Compose's version number.
		

Usage:  docker config create [OPTIONS] CONFIG file|-

Create a config from a file or STDIN

Options:
-l, --label list               Config labels
	--template-driver string   Template driver
		

Usage:  docker config inspect [OPTIONS] CONFIG [CONFIG...]

Display detailed information on one or more configs

Options:
-f, --format string   Format the output using the given Go template
	--pretty          Print the information in a human friendly format
		

Usage:  docker config ls [OPTIONS]

List configs

Aliases:
ls, list

Options:
-f, --filter filter   Filter output based on conditions provided
	--format string   Pretty-print configs using a Go template
-q, --quiet           Only display IDs
		

Usage:  docker config rm CONFIG [CONFIG...]

Remove one or more configs

Aliases:
rm, remove
		

Usage:  docker container attach [OPTIONS] CONTAINER

Attach local standard input, output, and error streams to a running container

Options:
	--detach-keys string   Override the key sequence for detaching a container
	--no-stdin             Do not attach STDIN
	--sig-proxy            Proxy all received signals to the process (default true)
		

Usage:  docker container commit [OPTIONS] CONTAINER [REPOSITORY[:TAG]]

Create a new image from a container's changes

Options:
-a, --author string    Author (e.g., "John Hannibal Smith ")
-c, --change list      Apply Dockerfile instruction to the created image
-m, --message string   Commit message
-p, --pause            Pause container during commit (default true)
		

Usage:  docker container cp [OPTIONS] CONTAINER:SRC_PATH DEST_PATH|-
	docker cp [OPTIONS] SRC_PATH|- CONTAINER:DEST_PATH

Copy files/folders between a container and the local filesystem

Use '-' as the source to read a tar archive from stdin
and extract it to a directory destination in a container.
Use '-' as the destination to stream a tar archive of a
container source to stdout.

Options:
-a, --archive       Archive mode (copy all uid/gid information)
-L, --follow-link   Always follow symbol link in SRC_PATH
		

Usage:  docker container create [OPTIONS] IMAGE [COMMAND] [ARG...]

Create a new container

Options:
	--add-host list                  Add a custom host-to-IP mapping (host:ip)
-a, --attach list                    Attach to STDIN, STDOUT or STDERR
	--blkio-weight uint16            Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
	--blkio-weight-device list       Block IO weight (relative device weight) (default [])
	--cap-add list                   Add Linux capabilities
	--cap-drop list                  Drop Linux capabilities
	--cgroup-parent string           Optional parent cgroup for the container
	--cgroupns string                Cgroup namespace to use (host|private) 'host':    Run the container in the Docker host's cgroup namespace 'private': Run the container in its own private cgroup namespace '':        Use the cgroup namespace as configured by the default-cgroupns-mode option on the daemon (default)
	--cidfile string                 Write the container ID to the file
	--cpu-period int                 Limit CPU CFS (Completely Fair Scheduler) period
	--cpu-quota int                  Limit CPU CFS (Completely Fair Scheduler) quota
	--cpu-rt-period int              Limit CPU real-time period in microseconds
	--cpu-rt-runtime int             Limit CPU real-time runtime in microseconds
-c, --cpu-shares int                 CPU shares (relative weight)
	--cpus decimal                   Number of CPUs
	--cpuset-cpus string             CPUs in which to allow execution (0-3, 0,1)
	--cpuset-mems string             MEMs in which to allow execution (0-3, 0,1)
	--device list                    Add a host device to the container
	--device-cgroup-rule list        Add a rule to the cgroup allowed devices list
	--device-read-bps list           Limit read rate (bytes per second) from a device (default [])
	--device-read-iops list          Limit read rate (IO per second) from a device (default [])
	--device-write-bps list          Limit write rate (bytes per second) to a device (default [])
	--device-write-iops list         Limit write rate (IO per second) to a device (default [])
	--disable-content-trust          Skip image verification (default true)
	--dns list                       Set custom DNS servers
	--dns-option list                Set DNS options
	--dns-search list                Set custom DNS search domains
	--domainname string              Container NIS domain name
	--entrypoint string              Overwrite the default ENTRYPOINT of the image
-e, --env list                       Set environment variables
	--env-file list                  Read in a file of environment variables
	--expose list                    Expose a port or a range of ports
	--gpus gpu-request               GPU devices to add to the container ('all' to pass all GPUs)
	--group-add list                 Add additional groups to join
	--health-cmd string              Command to run to check health
	--health-interval duration       Time between running the check (ms|s|m|h) (default 0s)
	--health-retries int             Consecutive failures needed to report unhealthy
	--health-start-period duration   Start period for the container to initialize before starting health-retries countdown (ms|s|m|h) (default 0s)
	--health-timeout duration        Maximum time to allow one check to run (ms|s|m|h) (default 0s)
	--help                           Print usage
-h, --hostname string                Container host name
	--init                           Run an init inside the container that forwards signals and reaps processes
-i, --interactive                    Keep STDIN open even if not attached
	--ip string                      IPv4 address (e.g., 172.30.100.104)
	--ip6 string                     IPv6 address (e.g., 2001:db8::33)
	--ipc string                     IPC mode to use
	--isolation string               Container isolation technology
	--kernel-memory bytes            Kernel memory limit
-l, --label list                     Set meta data on a container
	--label-file list                Read in a line delimited file of labels
	--link list                      Add link to another container
	--link-local-ip list             Container IPv4/IPv6 link-local addresses
	--log-driver string              Logging driver for the container
	--log-opt list                   Log driver options
	--mac-address string             Container MAC address (e.g., 92:d0:c6:0a:29:33)
-m, --memory bytes                   Memory limit
	--memory-reservation bytes       Memory soft limit
	--memory-swap bytes              Swap limit equal to memory plus swap: '-1' to enable unlimited swap
	--memory-swappiness int          Tune container memory swappiness (0 to 100) (default -1)
	--mount mount                    Attach a filesystem mount to the container
	--name string                    Assign a name to the container
	--network network                Connect a container to a network
	--network-alias list             Add network-scoped alias for the container
	--no-healthcheck                 Disable any container-specified HEALTHCHECK
	--oom-kill-disable               Disable OOM Killer
	--oom-score-adj int              Tune host's OOM preferences (-1000 to 1000)
	--pid string                     PID namespace to use
	--pids-limit int                 Tune container pids limit (set -1 for unlimited)
	--platform string                Set platform if server is multi-platform capable
	--privileged                     Give extended privileges to this container
-p, --publish list                   Publish a container's port(s) to the host
-P, --publish-all                    Publish all exposed ports to random ports
	--pull string                    Pull image before creating ("always"|"missing"|"never") (default "missing")
	--read-only                      Mount the container's root filesystem as read only
	--restart string                 Restart policy to apply when a container exits (default "no")
	--rm                             Automatically remove the container when it exits
	--runtime string                 Runtime to use for this container
	--security-opt list              Security Options
	--shm-size bytes                 Size of /dev/shm
	--stop-signal string             Signal to stop a container (default "15")
	--stop-timeout int               Timeout (in seconds) to stop a container
	--storage-opt list               Storage driver options for the container
	--sysctl map                     Sysctl options (default map[])
	--tmpfs list                     Mount a tmpfs directory
-t, --tty                            Allocate a pseudo-TTY
	--ulimit ulimit                  Ulimit options (default [])
-u, --user string                    Username or UID (format: [:])
	--userns string                  User namespace to use
	--uts string                     UTS namespace to use
-v, --volume list                    Bind mount a volume
	--volume-driver string           Optional volume driver for the container
	--volumes-from list              Mount volumes from the specified container(s)
-w, --workdir string                 Working directory inside the container
		

Usage:  docker container diff CONTAINER

Inspect changes to files or directories on a container's filesystem
		

Usage:  docker container exec [OPTIONS] CONTAINER COMMAND [ARG...]

Run a command in a running container

Options:
-d, --detach               Detached mode: run command in the background
	--detach-keys string   Override the key sequence for detaching a container
-e, --env list             Set environment variables
	--env-file list        Read in a file of environment variables
-i, --interactive          Keep STDIN open even if not attached
	--privileged           Give extended privileges to the command
-t, --tty                  Allocate a pseudo-TTY
-u, --user string          Username or UID (format: [:])
-w, --workdir string       Working directory inside the container
		

Usage:  docker container export [OPTIONS] CONTAINER

Export a container's filesystem as a tar archive

Options:
-o, --output string   Write to a file, instead of STDOUT
		

Usage:  docker container inspect [OPTIONS] CONTAINER [CONTAINER...]

Display detailed information on one or more containers

Options:
-f, --format string   Format the output using the given Go template
-s, --size            Display total file sizes
		

Usage:  docker container kill [OPTIONS] CONTAINER [CONTAINER...]

Kill one or more running containers

Options:
-s, --signal string   Signal to send to the container (default "KILL")
		

Usage:  docker container logs [OPTIONS] CONTAINER

Fetch the logs of a container

Options:
	--details        Show extra details provided to logs
-f, --follow         Follow log output
	--since string   Show logs since timestamp (e.g. 2013-01-02T13:23:37Z) or relative (e.g. 42m for 42 minutes)
-n, --tail string    Number of lines to show from the end of the logs (default "all")
-t, --timestamps     Show timestamps
	--until string   Show logs before a timestamp (e.g. 2013-01-02T13:23:37Z) or relative (e.g. 42m for 42 minutes)
		

Usage:  docker container ls [OPTIONS]

List containers

Aliases:
ls, ps, list

Options:
-a, --all             Show all containers (default shows just running)
-f, --filter filter   Filter output based on conditions provided
	--format string   Pretty-print containers using a Go template
-n, --last int        Show n last created containers (includes all states) (default -1)
-l, --latest          Show the latest created container (includes all states)
	--no-trunc        Don't truncate output
-q, --quiet           Only display container IDs
-s, --size            Display total file sizes
		

Usage:  docker container pause CONTAINER [CONTAINER...]

Pause all processes within one or more containers
		

Usage:  docker container port CONTAINER [PRIVATE_PORT[/PROTO]]

List port mappings or a specific mapping for the container
		

Usage:  docker container prune [OPTIONS]

Remove all stopped containers

Options:
	--filter filter   Provide filter values (e.g. 'until=')
-f, --force           Do not prompt for confirmation
		

Usage:  docker container rename CONTAINER NEW_NAME

Rename a container
		

Usage:  docker container restart [OPTIONS] CONTAINER [CONTAINER...]

Restart one or more containers

Options:
-t, --time int   Seconds to wait for stop before killing the container (default 10)
		

Usage:  docker container rm [OPTIONS] CONTAINER [CONTAINER...]

Remove one or more containers

Options:
-f, --force     Force the removal of a running container (uses SIGKILL)
-l, --link      Remove the specified link
-v, --volumes   Remove anonymous volumes associated with the container
		

Usage:  docker container run [OPTIONS] IMAGE [COMMAND] [ARG...]

Run a command in a new container

Options:
	--add-host list                  Add a custom host-to-IP mapping (host:ip)
-a, --attach list                    Attach to STDIN, STDOUT or STDERR
	--blkio-weight uint16            Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
	--blkio-weight-device list       Block IO weight (relative device weight) (default [])
	--cap-add list                   Add Linux capabilities
	--cap-drop list                  Drop Linux capabilities
	--cgroup-parent string           Optional parent cgroup for the container
	--cgroupns string                Cgroup namespace to use (host|private) 'host':    Run the container in the Docker host's cgroup namespace 'private': Run the container in its own private cgroup namespace '':        Use the cgroup namespace as configured by the default-cgroupns-mode option on the daemon (default)
	--cidfile string                 Write the container ID to the file
	--cpu-period int                 Limit CPU CFS (Completely Fair Scheduler) period
	--cpu-quota int                  Limit CPU CFS (Completely Fair Scheduler) quota
	--cpu-rt-period int              Limit CPU real-time period in microseconds
	--cpu-rt-runtime int             Limit CPU real-time runtime in microseconds
-c, --cpu-shares int                 CPU shares (relative weight)
	--cpus decimal                   Number of CPUs
	--cpuset-cpus string             CPUs in which to allow execution (0-3, 0,1)
	--cpuset-mems string             MEMs in which to allow execution (0-3, 0,1)
-d, --detach                         Run container in background and print container ID
	--detach-keys string             Override the key sequence for detaching a container
	--device list                    Add a host device to the container
	--device-cgroup-rule list        Add a rule to the cgroup allowed devices list
	--device-read-bps list           Limit read rate (bytes per second) from a device (default [])
	--device-read-iops list          Limit read rate (IO per second) from a device (default [])
	--device-write-bps list          Limit write rate (bytes per second) to a device (default [])
	--device-write-iops list         Limit write rate (IO per second) to a device (default [])
	--disable-content-trust          Skip image verification (default true)
	--dns list                       Set custom DNS servers
	--dns-option list                Set DNS options
	--dns-search list                Set custom DNS search domains
	--domainname string              Container NIS domain name
	--entrypoint string              Overwrite the default ENTRYPOINT of the image
-e, --env list                       Set environment variables
	--env-file list                  Read in a file of environment variables
	--expose list                    Expose a port or a range of ports
	--gpus gpu-request               GPU devices to add to the container ('all' to pass all GPUs)
	--group-add list                 Add additional groups to join
	--health-cmd string              Command to run to check health
	--health-interval duration       Time between running the check (ms|s|m|h) (default 0s)
	--health-retries int             Consecutive failures needed to report unhealthy
	--health-start-period duration   Start period for the container to initialize before starting health-retries countdown (ms|s|m|h) (default 0s)
	--health-timeout duration        Maximum time to allow one check to run (ms|s|m|h) (default 0s)
	--help                           Print usage
-h, --hostname string                Container host name
	--init                           Run an init inside the container that forwards signals and reaps processes
-i, --interactive                    Keep STDIN open even if not attached
	--ip string                      IPv4 address (e.g., 172.30.100.104)
	--ip6 string                     IPv6 address (e.g., 2001:db8::33)
	--ipc string                     IPC mode to use
	--isolation string               Container isolation technology
	--kernel-memory bytes            Kernel memory limit
-l, --label list                     Set meta data on a container
	--label-file list                Read in a line delimited file of labels
	--link list                      Add link to another container
	--link-local-ip list             Container IPv4/IPv6 link-local addresses
	--log-driver string              Logging driver for the container
	--log-opt list                   Log driver options
	--mac-address string             Container MAC address (e.g., 92:d0:c6:0a:29:33)
-m, --memory bytes                   Memory limit
	--memory-reservation bytes       Memory soft limit
	--memory-swap bytes              Swap limit equal to memory plus swap: '-1' to enable unlimited swap
	--memory-swappiness int          Tune container memory swappiness (0 to 100) (default -1)
	--mount mount                    Attach a filesystem mount to the container
	--name string                    Assign a name to the container
	--network network                Connect a container to a network
	--network-alias list             Add network-scoped alias for the container
	--no-healthcheck                 Disable any container-specified HEALTHCHECK
	--oom-kill-disable               Disable OOM Killer
	--oom-score-adj int              Tune host's OOM preferences (-1000 to 1000)
	--pid string                     PID namespace to use
	--pids-limit int                 Tune container pids limit (set -1 for unlimited)
	--platform string                Set platform if server is multi-platform capable
	--privileged                     Give extended privileges to this container
-p, --publish list                   Publish a container's port(s) to the host
-P, --publish-all                    Publish all exposed ports to random ports
	--pull string                    Pull image before running ("always"|"missing"|"never") (default "missing")
	--read-only                      Mount the container's root filesystem as read only
	--restart string                 Restart policy to apply when a container exits (default "no")
	--rm                             Automatically remove the container when it exits
	--runtime string                 Runtime to use for this container
	--security-opt list              Security Options
	--shm-size bytes                 Size of /dev/shm
	--sig-proxy                      Proxy received signals to the process (default true)
	--stop-signal string             Signal to stop a container (default "15")
	--stop-timeout int               Timeout (in seconds) to stop a container
	--storage-opt list               Storage driver options for the container
	--sysctl map                     Sysctl options (default map[])
	--tmpfs list                     Mount a tmpfs directory
-t, --tty                            Allocate a pseudo-TTY
	--ulimit ulimit                  Ulimit options (default [])
-u, --user string                    Username or UID (format: [:])
	--userns string                  User namespace to use
	--uts string                     UTS namespace to use
-v, --volume list                    Bind mount a volume
	--volume-driver string           Optional volume driver for the container
	--volumes-from list              Mount volumes from the specified container(s)
-w, --workdir string                 Working directory inside the container
		

Usage:  docker container start [OPTIONS] CONTAINER [CONTAINER...]

Start one or more stopped containers

Options:
-a, --attach               Attach STDOUT/STDERR and forward signals
	--detach-keys string   Override the key sequence for detaching a container
-i, --interactive          Attach container's STDIN
		

Usage:  docker container stats [OPTIONS] [CONTAINER...]

Display a live stream of container(s) resource usage statistics

Options:
-a, --all             Show all containers (default shows just running)
	--format string   Pretty-print images using a Go template
	--no-stream       Disable streaming stats and only pull the first result
	--no-trunc        Do not truncate output
		

Usage:  docker container stop [OPTIONS] CONTAINER [CONTAINER...]

Stop one or more running containers

Options:
-t, --time int   Seconds to wait for stop before killing it (default 10)
		

Usage:  docker container top CONTAINER [ps OPTIONS]

Display the running processes of a container
		

Usage:  docker container unpause CONTAINER [CONTAINER...]

Unpause all processes within one or more containers
		

Usage:  docker container update [OPTIONS] CONTAINER [CONTAINER...]

Update configuration of one or more containers

Options:
	--blkio-weight uint16        Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
	--cpu-period int             Limit CPU CFS (Completely Fair Scheduler) period
	--cpu-quota int              Limit CPU CFS (Completely Fair Scheduler) quota
	--cpu-rt-period int          Limit the CPU real-time period in microseconds
	--cpu-rt-runtime int         Limit the CPU real-time runtime in microseconds
-c, --cpu-shares int             CPU shares (relative weight)
	--cpus decimal               Number of CPUs
	--cpuset-cpus string         CPUs in which to allow execution (0-3, 0,1)
	--cpuset-mems string         MEMs in which to allow execution (0-3, 0,1)
	--kernel-memory bytes        Kernel memory limit
-m, --memory bytes               Memory limit
	--memory-reservation bytes   Memory soft limit
	--memory-swap bytes          Swap limit equal to memory plus swap: '-1' to enable unlimited swap
	--pids-limit int             Tune container pids limit (set -1 for unlimited)
	--restart string             Restart policy to apply when a container exits
		

Usage:  docker container wait CONTAINER [CONTAINER...]

Block until one or more containers stop, then print their exit codes
		

Create a new context

Create docker engine context:
$ docker context create CONTEXT [flags]


Create Azure Container Instances context:
$ docker context create aci CONTEXT [flags]
(see docker context create aci --help)


Create Amazon ECS context:
$ docker context create ecs CONTEXT [flags]
(see docker context create ecs --help)


Docker endpoint config:

NAME                DESCRIPTION
from                Copy named context's Docker endpoint configuration
host                Docker endpoint on which to connect
ca                  Trust certs signed only by this CA
cert                Path to TLS certificate file
key                 Path to TLS key file
skip-tls-verify     Skip TLS certificate validation

Kubernetes endpoint config:

NAME                 DESCRIPTION
from                 Copy named context's Kubernetes endpoint configuration
config-file          Path to a Kubernetes config file
context-override     Overrides the context set in the kubernetes config file
namespace-override   Overrides the namespace set in the kubernetes config file

Example:

$ docker context create my-context --description "some description" --docker "host=tcp://myserver:2376,ca=~/ca-file,cert=~/cert-file,key=~/key-file"

Usage:
docker context create CONTEXT [flags]
docker context create [command]

Available Commands:
aci         Create a context for Azure Container Instances
ecs         Create a context for Amazon ECS

Flags:
	--default-stack-orchestrator string   Default orchestrator for stack operations to use with this context (swarm|kubernetes|all)
	--description string                  Description of the context
	--docker stringToString               Set the docker endpoint (default [])
	--from string                         Create context from a named context
-h, --help                                Help for create
	--kubernetes stringToString           Set the kubernetes endpoint (default [])

Use "docker context create [command] --help" for more information about a command.
		

Export a context to a tar or kubeconfig file

Usage:
docker context export [flags]

Flags:
-h, --help         Help for export
	--kubeconfig   Export as a kubeconfig file
		

Import a context from a tar or zip file

Usage:
docker context import [flags]

Flags:
-h, --help   Help for import
		

Display detailed information on one or more contexts

Usage:
docker context inspect [flags]

Flags:
-f, --format string   Format the output using the given Go template
-h, --help            Help for inspect
		

List available contexts

Usage:
docker context list [flags]

Aliases:
list, ls

Flags:
	--format string   Format the output. Values: [pretty | json]. (Default: pretty)
-h, --help            Help for list
-q, --quiet           Only show context names
		

Remove one or more contexts

Usage:
docker context rm CONTEXT [CONTEXT...] [flags]

Aliases:
rm, remove

Flags:
-f, --force   Force removing current context
-h, --help    Help for rm
		

Print the current context

Usage:
docker context show [flags]

Flags:
-h, --help   Help for show
		

Update a context

Docker endpoint config:

NAME                DESCRIPTION
from                Copy named context's Docker endpoint configuration
host                Docker endpoint on which to connect
ca                  Trust certs signed only by this CA
cert                Path to TLS certificate file
key                 Path to TLS key file
skip-tls-verify     Skip TLS certificate validation

Kubernetes endpoint config:

NAME                 DESCRIPTION
from                 Copy named context's Kubernetes endpoint configuration
config-file          Path to a Kubernetes config file
context-override     Overrides the context set in the kubernetes config file
namespace-override   Overrides the namespace set in the kubernetes config file

Example:

$ docker context update my-context --description "some description" --docker "host=tcp://myserver:2376,ca=~/ca-file,cert=~/cert-file,key=~/key-file"

Usage:
docker context update [flags]

Flags:
	--default-stack-orchestrator string   Default orchestrator for stack operations to use with this context (swarm|kubernetes|all)
	--description string                  Description of the context
	--docker stringToString               Set the docker endpoint (default [])
-h, --help                                Help for update
	--kubernetes stringToString           Set the kubernetes endpoint (default [])
		

Set the default context

Usage:
docker context use CONTEXT [flags]

Flags:
-h, --help   Help for use
		

Usage:  docker image build [OPTIONS] PATH | URL | -

Build an image from a Dockerfile

Options:
	--add-host list           Add a custom host-to-IP mapping (host:ip)
	--build-arg list          Set build-time variables
	--cache-from strings      Images to consider as cache sources
	--cgroup-parent string    Optional parent cgroup for the container
	--compress                Compress the build context using gzip
	--cpu-period int          Limit the CPU CFS (Completely Fair Scheduler) period
	--cpu-quota int           Limit the CPU CFS (Completely Fair Scheduler) quota
-c, --cpu-shares int          CPU shares (relative weight)
	--cpuset-cpus string      CPUs in which to allow execution (0-3, 0,1)
	--cpuset-mems string      MEMs in which to allow execution (0-3, 0,1)
	--disable-content-trust   Skip image verification (default true)
-f, --file string             Name of the Dockerfile (Default is 'PATH/Dockerfile')
	--force-rm                Always remove intermediate containers
	--iidfile string          Write the image ID to the file
	--isolation string        Container isolation technology
	--label list              Set metadata for an image
-m, --memory bytes            Memory limit
	--memory-swap bytes       Swap limit equal to memory plus swap: '-1' to enable unlimited swap
	--network string          Set the networking mode for the RUN instructions during build (default "default")
	--no-cache                Do not use cache when building the image
	--pull                    Always attempt to pull a newer version of the image
-q, --quiet                   Suppress the build output and print image ID on success
	--rm                      Remove intermediate containers after a successful build (default true)
	--security-opt strings    Security options
	--shm-size bytes          Size of /dev/shm
	--squash                  Squash newly built layers into a single new layer
-t, --tag list                Name and optionally a tag in the 'name:tag' format
	--target string           Set the target build stage to build.
	--ulimit ulimit           Ulimit options (default [])
		

Usage:  docker image history [OPTIONS] IMAGE

Show the history of an image

Options:
	--format string   Pretty-print images using a Go template
-H, --human           Print sizes and dates in human readable format (default true)
	--no-trunc        Don't truncate output
-q, --quiet           Only show image IDs
		

Usage:  docker image import [OPTIONS] file|URL|- [REPOSITORY[:TAG]]

Import the contents from a tarball to create a filesystem image

Options:
-c, --change list       Apply Dockerfile instruction to the created image
-m, --message string    Set commit message for imported image
	--platform string   Set platform if server is multi-platform capable
		

Usage:  docker image inspect [OPTIONS] IMAGE [IMAGE...]

Display detailed information on one or more images

Options:
-f, --format string   Format the output using the given Go template
		

Usage:  docker image load [OPTIONS]

Load an image from a tar archive or STDIN

Options:
-i, --input string   Read from tar archive file, instead of STDIN
-q, --quiet          Suppress the load output
		

Usage:  docker image ls [OPTIONS] [REPOSITORY[:TAG]]

List images

Aliases:
ls, list

Options:
-a, --all             Show all images (default hides intermediate images)
	--digests         Show digests
-f, --filter filter   Filter output based on conditions provided
	--format string   Pretty-print images using a Go template
	--no-trunc        Don't truncate output
-q, --quiet           Only show image IDs
		

Usage:  docker image prune [OPTIONS]

Remove unused images

Options:
-a, --all             Remove all unused images, not just dangling ones
	--filter filter   Provide filter values (e.g. 'until=')
-f, --force           Do not prompt for confirmation
		

Usage:  docker image pull [OPTIONS] NAME[:TAG|@DIGEST]

Pull an image or a repository from a registry

Options:
-a, --all-tags                Download all tagged images in the repository
	--disable-content-trust   Skip image verification (default true)
	--platform string         Set platform if server is multi-platform capable
-q, --quiet                   Suppress verbose output
		

Usage:  docker image push [OPTIONS] NAME[:TAG]

Push an image or a repository to a registry

Options:
-a, --all-tags                Push all tagged images in the repository
	--disable-content-trust   Skip image signing (default true)
-q, --quiet                   Suppress verbose output
		

Usage:  docker image rm [OPTIONS] IMAGE [IMAGE...]

Remove one or more images

Aliases:
rm, rmi, remove

Options:
-f, --force      Force removal of the image
	--no-prune   Do not delete untagged parents
		

Usage:  docker image save [OPTIONS] IMAGE [IMAGE...]

Save one or more images to a tar archive (streamed to STDOUT by default)

Options:
-o, --output string   Write to a file, instead of STDOUT
		

Usage:  docker image tag SOURCE_IMAGE[:TAG] TARGET_IMAGE[:TAG]

Create a tag TARGET_IMAGE that refers to SOURCE_IMAGE
		

Usage:  docker manifest annotate [OPTIONS] MANIFEST_LIST MANIFEST

Add additional information to a local image manifest

EXPERIMENTAL:
docker manifest annotate is an experimental feature.
Experimental features provide early access to product functionality. These
features may change between releases without warning, or can be removed from a
future release. Learn more about experimental features in our documentation:
https://docs.docker.com/go/experimental/

Options:
	--arch string           Set architecture
	--os string             Set operating system
	--os-features strings   Set operating system feature
	--os-version string     Set operating system version
	--variant string        Set architecture variant
		

Usage:  docker manifest create MANIFEST_LIST MANIFEST [MANIFEST...]

Create a local manifest list for annotating and pushing to a registry

EXPERIMENTAL:
docker manifest create is an experimental feature.
Experimental features provide early access to product functionality. These
features may change between releases without warning, or can be removed from a
future release. Learn more about experimental features in our documentation:
https://docs.docker.com/go/experimental/

Options:
-a, --amend      Amend an existing manifest list
	--insecure   Allow communication with an insecure registry
		

Usage:  docker manifest inspect [OPTIONS] [MANIFEST_LIST] MANIFEST

Display an image manifest, or manifest list

EXPERIMENTAL:
docker manifest inspect is an experimental feature.
Experimental features provide early access to product functionality. These
features may change between releases without warning, or can be removed from a
future release. Learn more about experimental features in our documentation:
https://docs.docker.com/go/experimental/

Options:
	--insecure   Allow communication with an insecure registry
-v, --verbose    Output additional info including layers and platform
		

Usage:  docker manifest push [OPTIONS] MANIFEST_LIST

Push a manifest list to a repository

EXPERIMENTAL:
docker manifest push is an experimental feature.
Experimental features provide early access to product functionality. These
features may change between releases without warning, or can be removed from a
future release. Learn more about experimental features in our documentation:
https://docs.docker.com/go/experimental/

Options:
	--insecure   Allow push to an insecure registry
-p, --purge      Remove the local manifest list after push
		

Usage:  docker manifest rm MANIFEST_LIST [MANIFEST_LIST...]

Delete one or more manifest lists from local storage

EXPERIMENTAL:
docker manifest rm is an experimental feature.
Experimental features provide early access to product functionality. These
features may change between releases without warning, or can be removed from a
future release. Learn more about experimental features in our documentation:
https://docs.docker.com/go/experimental/
		

Usage:  docker network connect [OPTIONS] NETWORK CONTAINER

Connect a container to a network

Options:
	--alias strings           Add network-scoped alias for the container
	--driver-opt strings      driver options for the network
	--ip string               IPv4 address (e.g., 172.30.100.104)
	--ip6 string              IPv6 address (e.g., 2001:db8::33)
	--link list               Add link to another container
	--link-local-ip strings   Add a link-local address for the container
		

Usage:  docker network create [OPTIONS] NETWORK

Create a network

Options:
	--attachable           Enable manual container attachment
	--aux-address map      Auxiliary IPv4 or IPv6 addresses used by Network driver (default map[])
	--config-from string   The network from which to copy the configuration
	--config-only          Create a configuration only network
-d, --driver string        Driver to manage the Network (default "bridge")
	--gateway strings      IPv4 or IPv6 Gateway for the master subnet
	--ingress              Create swarm routing-mesh network
	--internal             Restrict external access to the network
	--ip-range strings     Allocate container ip from a sub-range
	--ipam-driver string   IP Address Management Driver (default "default")
	--ipam-opt map         Set IPAM driver specific options (default map[])
	--ipv6                 Enable IPv6 networking
	--label list           Set metadata on a network
-o, --opt map              Set driver specific options (default map[])
	--scope string         Control the network's scope
	--subnet strings       Subnet in CIDR format that represents a network segment
		

Usage:  docker network disconnect [OPTIONS] NETWORK CONTAINER

Disconnect a container from a network

Options:
-f, --force   Force the container to disconnect from a network
		

Usage:  docker network inspect [OPTIONS] NETWORK [NETWORK...]

Display detailed information on one or more networks

Options:
-f, --format string   Format the output using the given Go template
-v, --verbose         Verbose output for diagnostics
		

Usage:  docker network ls [OPTIONS]

List networks

Aliases:
ls, list

Options:
-f, --filter filter   Provide filter values (e.g. 'driver=bridge')
	--format string   Pretty-print networks using a Go template
	--no-trunc        Do not truncate the output
-q, --quiet           Only display network IDs
		

Usage:  docker network prune [OPTIONS]

Remove all unused networks

Options:
	--filter filter   Provide filter values (e.g. 'until=')
-f, --force           Do not prompt for confirmation
		

Usage:  docker network rm NETWORK [NETWORK...]

Remove one or more networks

Aliases:
rm, remove
		

Usage:  docker node demote NODE [NODE...]

Demote one or more nodes from manager in the swarm
		

Usage:  docker node inspect [OPTIONS] self|NODE [NODE...]

Display detailed information on one or more nodes

Options:
-f, --format string   Format the output using the given Go template
	--pretty          Print the information in a human friendly format
		

Usage:  docker node ls [OPTIONS]

List nodes in the swarm

Aliases:
ls, list

Options:
-f, --filter filter   Filter output based on conditions provided
	--format string   Pretty-print nodes using a Go template
-q, --quiet           Only display IDs
		

Usage:  docker node promote NODE [NODE...]

Promote one or more nodes to manager in the swarm
		

Usage:  docker node ps [OPTIONS] [NODE...]

List tasks running on one or more nodes, defaults to current node

Options:
-f, --filter filter   Filter output based on conditions provided
	--format string   Pretty-print tasks using a Go template
	--no-resolve      Do not map IDs to Names
	--no-trunc        Do not truncate output
-q, --quiet           Only display task IDs
		

Usage:  docker node rm [OPTIONS] NODE [NODE...]

Remove one or more nodes from the swarm

Aliases:
rm, remove

Options:
-f, --force   Force remove a node from the swarm
		

Usage:  docker node update [OPTIONS] NODE

Update a node

Options:
	--availability string   Availability of the node ("active"|"pause"|"drain")
	--label-add list        Add or update a node label (key=value)
	--label-rm list         Remove a node label if exists
	--role string           Role of the node ("worker"|"manager")
		

Usage:  docker plugin create [OPTIONS] PLUGIN PLUGIN-DATA-DIR

Create a plugin from a rootfs and configuration. Plugin data directory must contain config.json and rootfs directory.

Options:
	--compress   Compress the context using gzip
		

Usage:  docker plugin disable [OPTIONS] PLUGIN

Disable a plugin

Options:
-f, --force   Force the disable of an active plugin
		

Usage:  docker plugin enable [OPTIONS] PLUGIN

Enable a plugin

Options:
	--timeout int   HTTP client timeout (in seconds) (default 30)
		

Usage:  docker plugin inspect [OPTIONS] PLUGIN [PLUGIN...]

Display detailed information on one or more plugins

Options:
-f, --format string   Format the output using the given Go template
		

Usage:  docker plugin install [OPTIONS] PLUGIN [KEY=VALUE...]

Install a plugin

Options:
	--alias string            Local name for plugin
	--disable                 Do not enable the plugin on install
	--disable-content-trust   Skip image verification (default true)
	--grant-all-permissions   Grant all permissions necessary to run the plugin
		

Usage:  docker plugin ls [OPTIONS]

List plugins

Aliases:
ls, list

Options:
-f, --filter filter   Provide filter values (e.g. 'enabled=true')
	--format string   Pretty-print plugins using a Go template
	--no-trunc        Don't truncate output
-q, --quiet           Only display plugin IDs
		

Usage:  docker plugin push [OPTIONS] PLUGIN[:TAG]

Push a plugin to a registry

Options:
	--disable-content-trust   Skip image signing (default true)
		

Usage:  docker plugin rm [OPTIONS] PLUGIN [PLUGIN...]

Remove one or more plugins

Aliases:
rm, remove

Options:
-f, --force   Force the removal of an active plugin
		

Usage:  docker plugin set PLUGIN KEY=VALUE [KEY=VALUE...]

Change settings for a plugin
		

Usage:  docker plugin upgrade [OPTIONS] PLUGIN [REMOTE]

Upgrade an existing plugin

Options:
	--disable-content-trust   Skip image verification (default true)
	--grant-all-permissions   Grant all permissions necessary to run the plugin
	--skip-remote-check       Do not check if specified remote plugin matches existing plugin image
		

Usage:  docker secret create [OPTIONS] SECRET [file|-]

Create a secret from a file or STDIN as content

Options:
-d, --driver string            Secret driver
-l, --label list               Secret labels
	--template-driver string   Template driver
		

Usage:  docker secret inspect [OPTIONS] SECRET [SECRET...]

Display detailed information on one or more secrets

Options:
-f, --format string   Format the output using the given Go template
	--pretty          Print the information in a human friendly format
		

Usage:  docker secret ls [OPTIONS]

List secrets

Aliases:
ls, list

Options:
-f, --filter filter   Filter output based on conditions provided
	--format string   Pretty-print secrets using a Go template
-q, --quiet           Only display IDs
		

Usage:  docker secret rm SECRET [SECRET...]

Remove one or more secrets

Aliases:
rm, remove
		

Usage:  docker service create [OPTIONS] IMAGE [COMMAND] [ARG...]

Create a new service

Options:
	--cap-add list                       Add Linux capabilities
	--cap-drop list                      Drop Linux capabilities
	--config config                      Specify configurations to expose to the service
	--constraint list                    Placement constraints
	--container-label list               Container labels
	--credential-spec credential-spec    Credential spec for managed service account (Windows only)
-d, --detach                             Exit immediately instead of waiting for the service to converge
	--dns list                           Set custom DNS servers
	--dns-option list                    Set DNS options
	--dns-search list                    Set custom DNS search domains
	--endpoint-mode string               Endpoint mode (vip or dnsrr) (default "vip")
	--entrypoint command                 Overwrite the default ENTRYPOINT of the image
-e, --env list                           Set environment variables
	--env-file list                      Read in a file of environment variables
	--generic-resource list              User defined resources
	--group list                         Set one or more supplementary user groups for the container
	--health-cmd string                  Command to run to check health
	--health-interval duration           Time between running the check (ms|s|m|h)
	--health-retries int                 Consecutive failures needed to report unhealthy
	--health-start-period duration       Start period for the container to initialize before counting retries towards unstable (ms|s|m|h)
	--health-timeout duration            Maximum time to allow one check to run (ms|s|m|h)
	--host list                          Set one or more custom host-to-IP mappings (host:ip)
	--hostname string                    Container hostname
	--init                               Use an init inside each service container to forward signals and reap processes
	--isolation string                   Service container isolation mode
-l, --label list                         Service labels
	--limit-cpu decimal                  Limit CPUs
	--limit-memory bytes                 Limit Memory
	--limit-pids int                     Limit maximum number of processes (default 0 = unlimited)
	--log-driver string                  Logging driver for service
	--log-opt list                       Logging driver options
	--max-concurrent uint                Number of job tasks to run concurrently (default equal to --replicas)
	--mode string                        Service mode (replicated, global, replicated-job, or global-job) (default "replicated")
	--mount mount                        Attach a filesystem mount to the service
	--name string                        Service name
	--network network                    Network attachments
	--no-healthcheck                     Disable any container-specified HEALTHCHECK
	--no-resolve-image                   Do not query the registry to resolve image digest and supported platforms
	--placement-pref pref                Add a placement preference
-p, --publish port                       Publish a port as a node port
-q, --quiet                              Suppress progress output
	--read-only                          Mount the container's root filesystem as read only
	--replicas uint                      Number of tasks
	--replicas-max-per-node uint         Maximum number of tasks per node (default 0 = unlimited)
	--reserve-cpu decimal                Reserve CPUs
	--reserve-memory bytes               Reserve Memory
	--restart-condition string           Restart when condition is met ("none"|"on-failure"|"any") (default "any")
	--restart-delay duration             Delay between restart attempts (ns|us|ms|s|m|h) (default 5s)
	--restart-max-attempts uint          Maximum number of restarts before giving up
	--restart-window duration            Window used to evaluate the restart policy (ns|us|ms|s|m|h)
	--rollback-delay duration            Delay between task rollbacks (ns|us|ms|s|m|h) (default 0s)
	--rollback-failure-action string     Action on rollback failure ("pause"|"continue") (default "pause")
	--rollback-max-failure-ratio float   Failure rate to tolerate during a rollback (default 0)
	--rollback-monitor duration          Duration after each task rollback to monitor for failure (ns|us|ms|s|m|h) (default 5s)
	--rollback-order string              Rollback order ("start-first"|"stop-first") (default "stop-first")
	--rollback-parallelism uint          Maximum number of tasks rolled back simultaneously (0 to roll back all at once) (default 1)
	--secret secret                      Specify secrets to expose to the service
	--stop-grace-period duration         Time to wait before force killing a container (ns|us|ms|s|m|h) (default 10s)
	--stop-signal string                 Signal to stop the container
	--sysctl list                        Sysctl options
-t, --tty                                Allocate a pseudo-TTY
	--ulimit ulimit                      Ulimit options (default [])
	--update-delay duration              Delay between updates (ns|us|ms|s|m|h) (default 0s)
	--update-failure-action string       Action on update failure ("pause"|"continue"|"rollback") (default "pause")
	--update-max-failure-ratio float     Failure rate to tolerate during an update (default 0)
	--update-monitor duration            Duration after each task update to monitor for failure (ns|us|ms|s|m|h) (default 5s)
	--update-order string                Update order ("start-first"|"stop-first") (default "stop-first")
	--update-parallelism uint            Maximum number of tasks updated simultaneously (0 to update all at once) (default 1)
-u, --user string                        Username or UID (format: [:])
	--with-registry-auth                 Send registry authentication details to swarm agents
-w, --workdir string                     Working directory inside the container
		

Usage:  docker service inspect [OPTIONS] SERVICE [SERVICE...]

Display detailed information on one or more services

Options:
-f, --format string   Format the output using the given Go template
	--pretty          Print the information in a human friendly format
		

Usage:  docker service logs [OPTIONS] SERVICE|TASK

Fetch the logs of a service or task

Options:
	--details        Show extra details provided to logs
-f, --follow         Follow log output
	--no-resolve     Do not map IDs to Names in output
	--no-task-ids    Do not include task IDs in output
	--no-trunc       Do not truncate output
	--raw            Do not neatly format logs
	--since string   Show logs since timestamp (e.g. 2013-01-02T13:23:37Z) or relative (e.g. 42m for 42 minutes)
-n, --tail string    Number of lines to show from the end of the logs (default "all")
-t, --timestamps     Show timestamps
		

Usage:  docker service ls [OPTIONS]

List services

Aliases:
ls, list

Options:
-f, --filter filter   Filter output based on conditions provided
	--format string   Pretty-print services using a Go template
-q, --quiet           Only display IDs
		

Usage:  docker service ps [OPTIONS] SERVICE [SERVICE...]

List the tasks of one or more services

Options:
-f, --filter filter   Filter output based on conditions provided
	--format string   Pretty-print tasks using a Go template
	--no-resolve      Do not map IDs to Names
	--no-trunc        Do not truncate output
-q, --quiet           Only display task IDs
		

Usage:  docker service rm SERVICE [SERVICE...]

Remove one or more services

Aliases:
rm, remove
		

Usage:  docker service rollback [OPTIONS] SERVICE

Revert changes to a service's configuration

Options:
-d, --detach   Exit immediately instead of waiting for the service to converge
-q, --quiet    Suppress progress output
		

Usage:  docker service scale SERVICE=REPLICAS [SERVICE=REPLICAS...]

Scale one or multiple replicated services

Options:
-d, --detach   Exit immediately instead of waiting for the service to converge
		

Usage:  docker service update [OPTIONS] SERVICE

Update a service

Options:
	--args command                       Service command args
	--cap-add list                       Add Linux capabilities
	--cap-drop list                      Drop Linux capabilities
	--config-add config                  Add or update a config file on a service
	--config-rm list                     Remove a configuration file
	--constraint-add list                Add or update a placement constraint
	--constraint-rm list                 Remove a constraint
	--container-label-add list           Add or update a container label
	--container-label-rm list            Remove a container label by its key
	--credential-spec credential-spec    Credential spec for managed service account (Windows only)
-d, --detach                             Exit immediately instead of waiting for the service to converge
	--dns-add list                       Add or update a custom DNS server
	--dns-option-add list                Add or update a DNS option
	--dns-option-rm list                 Remove a DNS option
	--dns-rm list                        Remove a custom DNS server
	--dns-search-add list                Add or update a custom DNS search domain
	--dns-search-rm list                 Remove a DNS search domain
	--endpoint-mode string               Endpoint mode (vip or dnsrr)
	--entrypoint command                 Overwrite the default ENTRYPOINT of the image
	--env-add list                       Add or update an environment variable
	--env-rm list                        Remove an environment variable
	--force                              Force update even if no changes require it
	--generic-resource-add list          Add a Generic resource
	--generic-resource-rm list           Remove a Generic resource
	--group-add list                     Add an additional supplementary user group to the container
	--group-rm list                      Remove a previously added supplementary user group from the container
	--health-cmd string                  Command to run to check health
	--health-interval duration           Time between running the check (ms|s|m|h)
	--health-retries int                 Consecutive failures needed to report unhealthy
	--health-start-period duration       Start period for the container to initialize before counting retries towards unstable (ms|s|m|h)
	--health-timeout duration            Maximum time to allow one check to run (ms|s|m|h)
	--host-add list                      Add a custom host-to-IP mapping (host:ip)
	--host-rm list                       Remove a custom host-to-IP mapping (host:ip)
	--hostname string                    Container hostname
	--image string                       Service image tag
	--init                               Use an init inside each service container to forward signals and reap processes
	--isolation string                   Service container isolation mode
	--label-add list                     Add or update a service label
	--label-rm list                      Remove a label by its key
	--limit-cpu decimal                  Limit CPUs
	--limit-memory bytes                 Limit Memory
	--limit-pids int                     Limit maximum number of processes (default 0 = unlimited)
	--log-driver string                  Logging driver for service
	--log-opt list                       Logging driver options
	--max-concurrent uint                Number of job tasks to run concurrently (default equal to --replicas)
	--mount-add mount                    Add or update a mount on a service
	--mount-rm list                      Remove a mount by its target path
	--network-add network                Add a network
	--network-rm list                    Remove a network
	--no-healthcheck                     Disable any container-specified HEALTHCHECK
	--no-resolve-image                   Do not query the registry to resolve image digest and supported platforms
	--placement-pref-add pref            Add a placement preference
	--placement-pref-rm pref             Remove a placement preference
	--publish-add port                   Add or update a published port
	--publish-rm port                    Remove a published port by its target port
-q, --quiet                              Suppress progress output
	--read-only                          Mount the container's root filesystem as read only
	--replicas uint                      Number of tasks
	--replicas-max-per-node uint         Maximum number of tasks per node (default 0 = unlimited)
	--reserve-cpu decimal                Reserve CPUs
	--reserve-memory bytes               Reserve Memory
	--restart-condition string           Restart when condition is met ("none"|"on-failure"|"any")
	--restart-delay duration             Delay between restart attempts (ns|us|ms|s|m|h)
	--restart-max-attempts uint          Maximum number of restarts before giving up
	--restart-window duration            Window used to evaluate the restart policy (ns|us|ms|s|m|h)
	--rollback                           Rollback to previous specification
	--rollback-delay duration            Delay between task rollbacks (ns|us|ms|s|m|h)
	--rollback-failure-action string     Action on rollback failure ("pause"|"continue")
	--rollback-max-failure-ratio float   Failure rate to tolerate during a rollback
	--rollback-monitor duration          Duration after each task rollback to monitor for failure (ns|us|ms|s|m|h)
	--rollback-order string              Rollback order ("start-first"|"stop-first")
	--rollback-parallelism uint          Maximum number of tasks rolled back simultaneously (0 to roll back all at once)
	--secret-add secret                  Add or update a secret on a service
	--secret-rm list                     Remove a secret
	--stop-grace-period duration         Time to wait before force killing a container (ns|us|ms|s|m|h)
	--stop-signal string                 Signal to stop the container
	--sysctl-add list                    Add or update a Sysctl option
	--sysctl-rm list                     Remove a Sysctl option
-t, --tty                                Allocate a pseudo-TTY
	--ulimit-add ulimit                  Add or update a ulimit option (default [])
	--ulimit-rm list                     Remove a ulimit option
	--update-delay duration              Delay between updates (ns|us|ms|s|m|h)
	--update-failure-action string       Action on update failure ("pause"|"continue"|"rollback")
	--update-max-failure-ratio float     Failure rate to tolerate during an update
	--update-monitor duration            Duration after each task update to monitor for failure (ns|us|ms|s|m|h)
	--update-order string                Update order ("start-first"|"stop-first")
	--update-parallelism uint            Maximum number of tasks updated simultaneously (0 to update all at once)
-u, --user string                        Username or UID (format: [:])
	--with-registry-auth                 Send registry authentication details to swarm agents
-w, --workdir string                     Working directory inside the container
		

Usage:  docker stack deploy [OPTIONS] STACK

Deploy a new stack or update an existing stack

Aliases:
deploy, up

Options:
-c, --compose-file strings   Path to a Compose file, or "-" to read from stdin
	--orchestrator string    Orchestrator to use (swarm|kubernetes|all)
	--prune                  Prune services that are no longer referenced
	--resolve-image string   Query the registry to resolve image digest and supported platforms ("always"|"changed"|"never") (default "always")
	--with-registry-auth     Send registry authentication details to Swarm agents
		

Usage:  docker stack ls [OPTIONS]

List stacks

Aliases:
ls, list

Options:
	--format string         Pretty-print stacks using a Go template
	--orchestrator string   Orchestrator to use (swarm|kubernetes|all)
		

Usage:  docker stack ps [OPTIONS] STACK

List the tasks in the stack

Options:
-f, --filter filter         Filter output based on conditions provided
	--format string         Pretty-print tasks using a Go template
	--no-resolve            Do not map IDs to Names
	--no-trunc              Do not truncate output
	--orchestrator string   Orchestrator to use (swarm|kubernetes|all)
-q, --quiet                 Only display task IDs
		

Usage:  docker stack rm [OPTIONS] STACK [STACK...]

Remove one or more stacks

Aliases:
rm, remove, down

Options:
	--orchestrator string   Orchestrator to use (swarm|kubernetes|all)
		

Usage:  docker stack services [OPTIONS] STACK

List the services in the stack

Options:
-f, --filter filter         Filter output based on conditions provided
	--format string         Pretty-print services using a Go template
	--orchestrator string   Orchestrator to use (swarm|kubernetes|all)
-q, --quiet                 Only display IDs
		

Usage:  docker swarm ca [OPTIONS]

Display and rotate the root CA

Options:
	--ca-cert pem-file          Path to the PEM-formatted root CA certificate to use for the new cluster
	--ca-key pem-file           Path to the PEM-formatted root CA key to use for the new cluster
	--cert-expiry duration      Validity period for node certificates (ns|us|ms|s|m|h) (default 2160h0m0s)
-d, --detach                    Exit immediately instead of waiting for the root rotation to converge
	--external-ca external-ca   Specifications of one or more certificate signing endpoints
-q, --quiet                     Suppress progress output
	--rotate                    Rotate the swarm CA - if no certificate or key are provided, new ones will be generated
		

Usage:  docker swarm init [OPTIONS]

Initialize a swarm

Options:
	--advertise-addr string                  Advertised address (format: [:port])
	--autolock                               Enable manager autolocking (requiring an unlock key to start a stopped manager)
	--availability string                    Availability of the node ("active"|"pause"|"drain") (default "active")
	--cert-expiry duration                   Validity period for node certificates (ns|us|ms|s|m|h) (default 2160h0m0s)
	--data-path-addr string                  Address or interface to use for data path traffic (format: )
	--data-path-port uint32                  Port number to use for data path traffic (1024 - 49151). If no value is set or is set to 0, the default port (4789) is used.
	--default-addr-pool ipNetSlice           default address pool in CIDR format (default [])
	--default-addr-pool-mask-length uint32   default address pool subnet mask length (default 24)
	--dispatcher-heartbeat duration          Dispatcher heartbeat period (ns|us|ms|s|m|h) (default 5s)
	--external-ca external-ca                Specifications of one or more certificate signing endpoints
	--force-new-cluster                      Force create a new cluster from current state
	--listen-addr node-addr                  Listen address (format: [:port]) (default 0.0.0.0:2377)
	--max-snapshots uint                     Number of additional Raft snapshots to retain
	--snapshot-interval uint                 Number of log entries between Raft snapshots (default 10000)
	--task-history-limit int                 Task history retention limit (default 5)
		

Usage:  docker swarm join [OPTIONS] HOST:PORT

Join a swarm as a node and/or manager

Options:
	--advertise-addr string   Advertised address (format: [:port])
	--availability string     Availability of the node ("active"|"pause"|"drain") (default "active")
	--data-path-addr string   Address or interface to use for data path traffic (format: )
	--listen-addr node-addr   Listen address (format: [:port]) (default 0.0.0.0:2377)
	--token string            Token for entry into the swarm
		

Usage:  docker swarm join-token [OPTIONS] (worker|manager)

Manage join tokens

Options:
-q, --quiet    Only display token
	--rotate   Rotate join token
		

Usage:  docker swarm leave [OPTIONS]

Leave the swarm

Options:
-f, --force   Force this node to leave the swarm, ignoring warnings
		

Usage:  docker swarm unlock

Unlock swarm
		

Usage:  docker swarm unlock-key [OPTIONS]

Manage the unlock key

Options:
-q, --quiet    Only display token
	--rotate   Rotate unlock key
		

Usage:  docker swarm update [OPTIONS]

Update the swarm

Options:
	--autolock                        Change manager autolocking setting (true|false)
	--cert-expiry duration            Validity period for node certificates (ns|us|ms|s|m|h) (default 2160h0m0s)
	--dispatcher-heartbeat duration   Dispatcher heartbeat period (ns|us|ms|s|m|h) (default 5s)
	--external-ca external-ca         Specifications of one or more certificate signing endpoints
	--max-snapshots uint              Number of additional Raft snapshots to retain
	--snapshot-interval uint          Number of log entries between Raft snapshots (default 10000)
	--task-history-limit int          Task history retention limit (default 5)
		

Usage:  docker system df [OPTIONS]

Show docker disk usage

Options:
	--format string   Pretty-print images using a Go template
-v, --verbose         Show detailed information on space usage
		

Usage:  docker system events [OPTIONS]

Get real time events from the server

Options:
-f, --filter filter   Filter output based on conditions provided
	--format string   Format the output using the given Go template
	--since string    Show all events created since timestamp
	--until string    Stream events until this timestamp
		

Usage:  docker system info [OPTIONS]

Display system-wide information

Options:
-f, --format string   Format the output using the given Go template
		

Usage:  docker system prune [OPTIONS]

Remove unused data

Options:
-a, --all             Remove all unused images not just dangling ones
	--filter filter   Provide filter values (e.g. 'label==')
-f, --force           Do not prompt for confirmation
	--volumes         Prune volumes
		

Usage:  docker trust inspect IMAGE[:TAG] [IMAGE[:TAG]...]

Return low-level information about keys and signatures

Options:
	--pretty   Print the information in a human friendly format
		

Usage:  docker trust revoke [OPTIONS] IMAGE[:TAG]

Remove trust for an image

Options:
-y, --yes   Do not prompt for confirmation
		

Usage:  docker trust sign IMAGE:TAG

Sign an image

Options:
	--local   Sign a locally tagged image
		

Usage:  docker volume create [OPTIONS] [VOLUME]

Create a volume

Options:
-d, --driver string   Specify volume driver name (default "local")
	--label list      Set metadata for a volume
-o, --opt map         Set driver specific options (default map[])
		

Usage:  docker volume inspect [OPTIONS] VOLUME [VOLUME...]

Display detailed information on one or more volumes

Options:
-f, --format string   Format the output using the given Go template
		

Usage:  docker volume ls [OPTIONS]

List volumes

Aliases:
ls, list

Options:
-f, --filter filter   Provide filter values (e.g. 'dangling=true')
	--format string   Pretty-print volumes using a Go template
-q, --quiet           Only display volume names
		

Usage:  docker volume prune [OPTIONS]

Remove all unused local volumes

Options:
	--filter filter   Provide filter values (e.g. 'label=')
-f, --force           Do not prompt for confirmation
		

Usage:  docker volume rm [OPTIONS] VOLUME [VOLUME...]

Remove one or more volumes. You cannot remove a volume that is in use by a container.

Aliases:
rm, remove

Examples:

$ docker volume rm hello
hello


Options:
-f, --force   Force the removal of one or more volumes