Name, shorthandDefaultDescriptionAdd a custom host-to-IP mapping (host:ip)Attach to STDIN, STDOUT or STDERRBlock IO (relative weight), between 10 and 1000, or 0 to disable (default 0)Block IO weight (relative device weight)Add Linux capabilitiesDrop Linux capabilitiesOptional parent cgroup for the containerWrite the container ID to the fileCPU count (Windows only)CPU percent (Windows only)Limit CPU CFS (Completely Fair Scheduler) periodLimit CPU CFS (Completely Fair Scheduler) quotaAPI 1.25+
Limit CPU real-time period in microsecondsAPI 1.25+
Limit CPU real-time runtime in microsecondsCPU shares (relative weight)API 1.25+
Number of CPUsCPUs in which to allow execution (0-3, 0,1)MEMs in which to allow execution (0-3, 0,1)Run container in background and print container IDOverride the key sequence for detaching a containerAdd a host device to the containerAdd a rule to the cgroup allowed devices listLimit read rate (bytes per second) from a deviceLimit read rate (IO per second) from a deviceLimit write rate (bytes per second) to a deviceLimit write rate (IO per second) to a deviceSkip image verificationSet custom DNS serversSet DNS optionsSet DNS optionsSet custom DNS search domainsContainer NIS domain nameOverwrite the default ENTRYPOINT of the imageSet environment variablesRead in a file of environment variablesExpose a port or a range of portsAPI 1.40+
GPU devices to add to the container (‘all’ to pass all GPUs)Add additional groups to joinCommand to run to check healthTime between running the check (ms|s|m|h) (default 0s)Consecutive failures needed to report unhealthyAPI 1.29+
Start period for the container to initialize before starting health-retries countdown (ms|s|m|h) (default 0s)Maximum time to allow one check to run (ms|s|m|h) (default 0s)Print usageContainer host nameAPI 1.25+
Run an init inside the container that forwards signals and reaps processesKeep STDIN open even if not attachedMaximum IO bandwidth limit for the system drive (Windows only)Maximum IOps limit for the system drive (Windows only)IPv4 address (e.g., 172.30.100.104)IPv6 address (e.g., 2001:db8::33)IPC mode to useContainer isolation technologyKernel memory limitSet meta data on a containerRead in a line delimited file of labelsAdd link to another containerContainer IPv4/IPv6 link-local addressesLogging driver for the containerLog driver optionsContainer MAC address (e.g., 92:d0:c6:0a:29:33)Memory limitMemory soft limitSwap limit equal to memory plus swap: ‘-1’ to enable unlimited swapTune container memory swappiness (0 to 100)Attach a filesystem mount to the containerAssign a name to the containerConnect a container to a networkAdd network-scoped alias for the containerConnect a container to a networkAdd network-scoped alias for the containerDisable any container-specified HEALTHCHECKDisable OOM KillerTune host’s OOM preferences (-1000 to 1000)PID namespace to useTune container pids limit (set -1 for unlimited)experimental (daemon)API 1.32+
Set platform if server is multi-platform capableGive extended privileges to this containerPublish a container’s port(s) to the hostPublish all exposed ports to random portsMount the container’s root filesystem as read onlyRestart policy to apply when a container exitsAutomatically remove the container when it exitsRuntime to use for this containerSecurity OptionsSize of /dev/shmProxy received signals to the processSignal to stop a containerAPI 1.25+