www.LinuxHowtos.org

DOCKER

Section: Docker User Manuals (1)
Updated: Jun 2025
Index Return to Main Contents

NAME

docke-containe-run- Create and run a new container from an image

SYNOPSIS

docker container run [OPTIONS] IMAGE [COMMAND] [ARG...]

DESCRIPTION

Alias for docker run.

OPTIONS

-ad-host= Add a custom hos-t-IP mapping (host:ip)

-annotation=map[] Add an annotation to the container (passed through to the OCI runtime)

-a, -attach= Attach to STDIN, STDOUT or STDERR

-blki-weight=0 Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)

-blki-weigh-device=[] Block IO weight (relative device weight)

-ca-add= Add Linux capabilities

-ca-drop= Drop Linux capabilities

-cgrou-parent="" Optional parent cgroup for the container

-cgroupns="" Cgroup namespace to use (host|private)
'host': Run the container in the Docker host's cgroup namespace 'private': Run the container in its own private cgroup namespace '': Use the cgroup namespace as configured by the
defaul-cgroupn-mode option on the daemon (default)

-cidfile="" Write the container ID to the file

-cp-count=0 CPU count (Windows only)

-cp-percent=0 CPU percent (Windows only)

-cp-period=0 Limit CPU CFS (Completely Fair Scheduler) period

-cp-quota=0 Limit CPU CFS (Completely Fair Scheduler) quota

-cp-r-period=0 Limit CPU rea-time period in microseconds

-cp-r-runtime=0 Limit CPU rea-time runtime in microseconds

-c, -cp-shares=0 CPU shares (relative weight)

-cpus= Number of CPUs

-cpuse-cpus="" CPUs in which to allow execution (-3, 0,1)

-cpuse-mems="" MEMs in which to allow execution (-3, 0,1)

-d, -detach[=false] Run container in background and print container ID

-detac-keys="" Override the key sequence for detaching a container

-device= Add a host device to the container

-devic-cgrou-rule= Add a rule to the cgroup allowed devices list

-devic-rea-bps=[] Limit read rate (bytes per second) from a device

-devic-rea-iops=[] Limit read rate (IO per second) from a device

-devic-writ-bps=[] Limit write rate (bytes per second) to a device

-devic-writ-iops=[] Limit write rate (IO per second) to a device

-disabl-conten-trust[=true] Skip image verification

-dns= Set custom DNS servers

-dn-option= Set DNS options

-dn-search= Set custom DNS search domains

-domainname="" Container NIS domain name

-entrypoint="" Overwrite the default ENTRYPOINT of the image

-e, -env= Set environment variables

-en-file= Read in a file of environment variables

-expose= Expose a port or a range of ports

-gpus= GPU devices to add to the container ('all' to pass all GPUs)

-grou-add= Add additional groups to join

-healt-cmd="" Command to run to check health

-healt-interval=0s Time between running the check (ms|s|m|h) (default 0s)

-healt-retries=0 Consecutive failures needed to report unhealthy

-healt-star-interval=0s Time between running the check during the start period (ms|s|m|h) (default 0s)

-healt-star-period=0s Start period for the container to initialize before starting healt-retries countdown (ms|s|m|h) (default 0s)

-healt-timeout=0s Maximum time to allow one check to run (ms|s|m|h) (default 0s)

-help[=false] Print usage

-h, -hostname="" Container host name

-init[=false] Run an init inside the container that forwards signals and reaps processes

-i, -interactive[=false] Keep STDIN open even if not attached

-i-maxbandwidth=0 Maximum IO bandwidth limit for the system drive (Windows only)

-i-maxiops=0 Maximum IOps limit for the system drive (Windows only)

-ip="" IPv4 address (e.g., 172.30.100.104)

-ip6="" IPv6 address (e.g., 2001:db8::33)

-ipc="" IPC mode to use

-isolation="" Container isolation technology

-kerne-memory=0 Kernel memory limit

-l, -label= Set meta data on a container

-labe-file= Read in a line delimited file of labels

-link= Add link to another container

-lin-loca-ip= Container IPv4/IPv6 lin-local addresses

-lo-driver="" Logging driver for the container

-lo-opt= Log driver options

-ma-address="" Container MAC address (e.g., 92:d0:c6:0a:29:33)

-m, -memory=0 Memory limit

-memor-reservation=0 Memory soft limit

-memor-swap=0 Swap limit equal to memory plus swap: -1' to enable unlimited swap

-memor-swappiness-1 Tune container memory swappiness (0 to 100)

-mount= Attach a filesystem mount to the container

-name="" Assign a name to the container

-network= Connect a container to a network

-networ-alias= Add networ-scoped alias for the container

-n-healthcheck[=false] Disable any containe-specified HEALTHCHECK

-oo-kil-disable[=false] Disable OOM Killer

-oo-scor-adj=0 Tune host's OOM preferences -1000 to 1000)

-pid="" PID namespace to use

-pid-limit=0 Tune container pids limit (set-1 for unlimited)

-platform="" Set platform if server is mult-platform capable

-privileged[=false] Give extended privileges to this container

-p, -publish= Publish a container's port(s) to the host

-P, -publis-all[=false] Publish all exposed ports to random ports

-pull="missing" Pull image before running ("always", "missing", "never")

-q, -quiet[=false] Suppress the pull output

-rea-only[=false] Mount the container's root filesystem as read only

-restart="no" Restart policy to apply when a container exits

-rm[=false] Automatically remove the container and its associated anonymous volumes when it exits

-runtime="" Runtime to use for this container

-securit-opt= Security Options

-sh-size=0 Size of /dev/shm

-si-proxy[=true] Proxy received signals to the process

-sto-signal="" Signal to stop the container

-sto-timeout=0 Timeout (in seconds) to stop a container

-storag-opt= Storage driver options for the container

-sysctl=map[] Sysctl options

-tmpfs= Mount a tmpfs directory

-t, -tty[=false] Allocate a pseud-TTY

-ulimit=[] Ulimit options

-us-ap-socket[=false] Bind mount Docker API socket and required auth

-u, -user="" Username or UID (format: [:])

-userns="" User namespace to use

-uts="" UTS namespace to use

-v, -volume= Bind mount a volume

-volum-driver="" Optional volume driver for the container

-volume-from= Mount volumes from the specified container(s)

-w, -workdir="" Working directory inside the container