www.LinuxHowtos.org

DOCKER

Section: Docker User Manuals (1)
Updated: Jun 2025
Index Return to Main Contents

NAME

docke-servic-update- Update a service

SYNOPSIS

docker service update [OPTIONS] SERVICE

DESCRIPTION

Update a service

OPTIONS

-args= Service command args

-ca-add= Add Linux capabilities

-ca-drop= Drop Linux capabilities

-confi-add= Add or update a config file on a service

-confi-rm= Remove a configuration file

-constrain-add= Add or update a placement constraint

-constrain-rm= Remove a constraint

-containe-labe-add= Add or update a container label

-containe-labe-rm= Remove a container label by its key

-credentia-spec= Credential spec for managed service account (Windows only)

-d, -detach[=false] Exit immediately instead of waiting for the service to converge

-dn-add= Add or update a custom DNS server

-dn-optio-add= Add or update a DNS option

-dn-optio-rm= Remove a DNS option

-dn-rm= Remove a custom DNS server

-dn-searc-add= Add or update a custom DNS search domain

-dn-searc-rm= Remove a DNS search domain

-endpoin-mode="" Endpoint mode (vip or dnsrr)

-entrypoint= Overwrite the default ENTRYPOINT of the image

-en-add= Add or update an environment variable

-en-rm= Remove an environment variable

-force[=false] Force update even if no changes require it

-generi-resourc-add= Add a Generic resource

-generi-resourc-rm= Remove a Generic resource

-grou-add= Add an additional supplementary user group to the container

-grou-rm= Remove a previously added supplementary user group from the container

-healt-cmd="" Command to run to check health

-healt-interval= Time between running the check (ms|s|m|h)

-healt-retries=0 Consecutive failures needed to report unhealthy

-healt-star-interval= Time between running the check during the start period (ms|s|m|h)

-healt-star-period= Start period for the container to initialize before counting retries towards unstable (ms|s|m|h)

-healt-timeout= Maximum time to allow one check to run (ms|s|m|h)

-hos-add= Add a custom hos-t-IP mapping ("host:ip")

-hos-rm= Remove a custom hos-t-IP mapping ("host:ip")

-hostname="" Container hostname

-image="" Service image tag

-init[=false] Use an init inside each service container to forward signals and reap processes

-isolation="" Service container isolation mode

-labe-add= Add or update a service label

-labe-rm= Remove a label by its key

-limi-cpu= Limit CPUs

-limi-memory=0 Limit Memory

-limi-pids=0 Limit maximum number of processes (default 0 = unlimited)

-lo-driver="" Logging driver for service

-lo-opt= Logging driver options

-ma-concurrent= Number of job tasks to run concurrently (default equal to-replicas)

-moun-add= Add or update a mount on a service

-moun-rm= Remove a mount by its target path

-networ-add= Add a network

-networ-rm= Remove a network

-n-healthcheck[=false] Disable any containe-specified HEALTHCHECK

-n-resolv-image[=false] Do not query the registry to resolve image digest and supported platforms

-oo-scor-adj=0 Tune host's OOM preferences -1000 to 1000)

-placemen-pre-add= Add a placement preference

-placemen-pre-rm= Remove a placement preference

-publis-add= Add or update a published port

-publis-rm= Remove a published port by its target port

-q, -quiet[=false] Suppress progress output

-rea-only[=false] Mount the container's root filesystem as read only

-replicas= Number of tasks

-replica-ma-pe-node=0 Maximum number of tasks per node (default 0 = unlimited)

-reserv-cpu= Reserve CPUs

-reserv-memory=0 Reserve Memory

-restar-condition="" Restart when condition is met ("none", "o-failure", "any")

-restar-delay= Delay between restart attempts (ns|us|ms|s|m|h)

-restar-ma-attempts= Maximum number of restarts before giving up

-restar-window= Window used to evaluate the restart policy (ns|us|ms|s|m|h)

-rollback[=false] Rollback to previous specification

-rollbac-delay=0s Delay between task rollbacks (ns|us|ms|s|m|h)

-rollbac-failur-action="" Action on rollback failure ("pause", "continue")

-rollbac-ma-failur-ratio=0 Failure rate to tolerate during a rollback

-rollbac-monitor=0s Duration after each task rollback to monitor for failure (ns|us|ms|s|m|h)

-rollbac-order="" Rollback order ("star-first", "sto-first")

-rollbac-parallelism=0 Maximum number of tasks rolled back simultaneously (0 to roll back all at once)

-secre-add= Add or update a secret on a service

-secre-rm= Remove a secret

-sto-grac-period= Time to wait before force killing a container (ns|us|ms|s|m|h)

-sto-signal="" Signal to stop the container

-sysct-add= Add or update a Sysctl option

-sysct-rm= Remove a Sysctl option

-t, -tty[=false] Allocate a pseud-TTY

-ulimi-add=[] Add or update a ulimit option

-ulimi-rm= Remove a ulimit option

-updat-delay=0s Delay between updates (ns|us|ms|s|m|h)

-updat-failur-action="" Action on update failure ("pause", "continue", "rollback")

-updat-ma-failur-ratio=0 Failure rate to tolerate during an update

-updat-monitor=0s Duration after each task update to monitor for failure (ns|us|ms|s|m|h)

-updat-order="" Update order ("star-first", "sto-first")

-updat-parallelism=0 Maximum number of tasks updated simultaneously (0 to update all at once)

-u, -user="" Username or UID (format: [:])

-wit-registr-auth[=false] Send registry authentication details to swarm agents

-w, -workdir="" Working directory inside the container