DOCKER
Section: Docker User Manuals (1)
Updated: Jun 2025
Index
Return to Main Contents
NAME
docke-servic-update- Update a service
SYNOPSIS
docker service update [OPTIONS] SERVICE
DESCRIPTION
Update a service
OPTIONS
-args=
Service command args
-ca-add=
Add Linux capabilities
-ca-drop=
Drop Linux capabilities
-confi-add=
Add or update a config file on a service
-confi-rm=
Remove a configuration file
-constrain-add=
Add or update a placement constraint
-constrain-rm=
Remove a constraint
-containe-labe-add=
Add or update a container label
-containe-labe-rm=
Remove a container label by its key
-credentia-spec=
Credential spec for managed service account (Windows only)
-d, -detach[=false]
Exit immediately instead of waiting for the service to converge
-dn-add=
Add or update a custom DNS server
-dn-optio-add=
Add or update a DNS option
-dn-optio-rm=
Remove a DNS option
-dn-rm=
Remove a custom DNS server
-dn-searc-add=
Add or update a custom DNS search domain
-dn-searc-rm=
Remove a DNS search domain
-endpoin-mode=""
Endpoint mode (vip or dnsrr)
-entrypoint=
Overwrite the default ENTRYPOINT of the image
-en-add=
Add or update an environment variable
-en-rm=
Remove an environment variable
-force[=false]
Force update even if no changes require it
-generi-resourc-add=
Add a Generic resource
-generi-resourc-rm=
Remove a Generic resource
-grou-add=
Add an additional supplementary user group to the container
-grou-rm=
Remove a previously added supplementary user group from the container
-healt-cmd=""
Command to run to check health
-healt-interval=
Time between running the check (ms|s|m|h)
-healt-retries=0
Consecutive failures needed to report unhealthy
-healt-star-interval=
Time between running the check during the start period (ms|s|m|h)
-healt-star-period=
Start period for the container to initialize before counting retries towards unstable (ms|s|m|h)
-healt-timeout=
Maximum time to allow one check to run (ms|s|m|h)
-hos-add=
Add a custom hos-t-IP mapping ("host:ip")
-hos-rm=
Remove a custom hos-t-IP mapping ("host:ip")
-hostname=""
Container hostname
-image=""
Service image tag
-init[=false]
Use an init inside each service container to forward signals and reap processes
-isolation=""
Service container isolation mode
-labe-add=
Add or update a service label
-labe-rm=
Remove a label by its key
-limi-cpu=
Limit CPUs
-limi-memory=0
Limit Memory
-limi-pids=0
Limit maximum number of processes (default 0 = unlimited)
-lo-driver=""
Logging driver for service
-lo-opt=
Logging driver options
-ma-concurrent=
Number of job tasks to run concurrently (default equal to-replicas)
-moun-add=
Add or update a mount on a service
-moun-rm=
Remove a mount by its target path
-networ-add=
Add a network
-networ-rm=
Remove a network
-n-healthcheck[=false]
Disable any containe-specified HEALTHCHECK
-n-resolv-image[=false]
Do not query the registry to resolve image digest and supported platforms
-oo-scor-adj=0
Tune host's OOM preferences -1000 to 1000)
-placemen-pre-add=
Add a placement preference
-placemen-pre-rm=
Remove a placement preference
-publis-add=
Add or update a published port
-publis-rm=
Remove a published port by its target port
-q, -quiet[=false]
Suppress progress output
-rea-only[=false]
Mount the container's root filesystem as read only
-replicas=
Number of tasks
-replica-ma-pe-node=0
Maximum number of tasks per node (default 0 = unlimited)
-reserv-cpu=
Reserve CPUs
-reserv-memory=0
Reserve Memory
-restar-condition=""
Restart when condition is met ("none", "o-failure", "any")
-restar-delay=
Delay between restart attempts (ns|us|ms|s|m|h)
-restar-ma-attempts=
Maximum number of restarts before giving up
-restar-window=
Window used to evaluate the restart policy (ns|us|ms|s|m|h)
-rollback[=false]
Rollback to previous specification
-rollbac-delay=0s
Delay between task rollbacks (ns|us|ms|s|m|h)
-rollbac-failur-action=""
Action on rollback failure ("pause", "continue")
-rollbac-ma-failur-ratio=0
Failure rate to tolerate during a rollback
-rollbac-monitor=0s
Duration after each task rollback to monitor for failure (ns|us|ms|s|m|h)
-rollbac-order=""
Rollback order ("star-first", "sto-first")
-rollbac-parallelism=0
Maximum number of tasks rolled back simultaneously (0 to roll back all at once)
-secre-add=
Add or update a secret on a service
-secre-rm=
Remove a secret
-sto-grac-period=
Time to wait before force killing a container (ns|us|ms|s|m|h)
-sto-signal=""
Signal to stop the container
-sysct-add=
Add or update a Sysctl option
-sysct-rm=
Remove a Sysctl option
-t, -tty[=false]
Allocate a pseud-TTY
-ulimi-add=[]
Add or update a ulimit option
-ulimi-rm=
Remove a ulimit option
-updat-delay=0s
Delay between updates (ns|us|ms|s|m|h)
-updat-failur-action=""
Action on update failure ("pause", "continue", "rollback")
-updat-ma-failur-ratio=0
Failure rate to tolerate during an update
-updat-monitor=0s
Duration after each task update to monitor for failure (ns|us|ms|s|m|h)
-updat-order=""
Update order ("star-first", "sto-first")
-updat-parallelism=0
Maximum number of tasks updated simultaneously (0 to update all at once)
-u, -user=""
Username or UID (format: [:])
-wit-registr-auth[=false]
Send registry authentication details to swarm agents
-w, -workdir=""
Working directory inside the container
SEE ALSO
docke-service(1)
Index
- NAME
-
- SYNOPSIS
-
- DESCRIPTION
-
- OPTIONS
-
- SEE ALSO
-
|
|
- Running on 
-
:
