NAME

       docker-create - Create a new container

SYNOPSIS

       docker  create [-a|--attach[=[]]] [--add-host[=[]]] [-c|--cpu-shares[=0]] [--cap-add[=[]]]
       [--cap-drop[=[]]]  [--cidfile[=CIDFILE]]   [--cpuset-cpus[=CPUSET-CPUS]]   [--device[=[]]]
       [--dns-search[=[]]]      [--dns[=[]]]      [-e|--env[=[]]]     [--entrypoint[=ENTRYPOINT]]
       [--env-file[=[]]]        [--expose[=[]]]        [-h|--hostname[=HOSTNAME]]        [--help]
       [-i|--interactive[=false]]     [--ipc[=IPC]]     [-l|--label[=[]]]     [--label-file[=[]]]
       [--link[=[]]]      [--lxc-conf[=[]]]      [--log-driver[=[]]]       [-m|--memory[=MEMORY]]
       [--memory-swap[=MEMORY-SWAP]]         [--mac-address[=MAC-ADDRESS]]        [--name[=NAME]]
       [--net[="bridge"]]     [-P|--publish-all[=false]]     [-p|--publish[=[]]]     [--pid[=[]]]
       [--privileged[=false]]  [--read-only[=false]]  [--restart[=RESTART]] [--security-opt[=[]]]
       [-t|--tty[=false]]     [-u|--user[=USER]]     [-v|--volume[=[]]]     [--volumes-from[=[]]]
       [-w|--workdir[=WORKDIR]] [--cgroup-parent[=CGROUP-PATH]] IMAGE [COMMAND] [ARG...]

OPTIONS

       -a, --attach=[]
          Attach to STDIN, STDOUT or STDERR.

       --add-host=[]
          Add a custom host-to-IP mapping (host:ip)

       -c, --cpu-shares=0
          CPU shares (relative weight)

       --cap-add=[]
          Add Linux capabilities

       --cap-drop=[]
          Drop Linux capabilities

       --cidfile=""
          Write the container ID to the file

       --cgroup-parent=""
          Path  to  cgroups under which the cgroup for the container will be created. If the path
       is not absolute, the path is considered to be relative to the cgroups  path  of  the  init
       process. Cgroups will be created if they do not already exist.

       --cpuset-cpus=""
          CPUs in which to allow execution (0-3, 0,1)

       --device=[]
          Add a host device to the container (e.g. --device=/dev/sdc:/dev/xvdc:rwm)

       --dns-search=[]
          Set  custom  DNS search domains (Use --dns-search=. if you don't wish to set the search
       domain)

       --dns=[]
          Set custom DNS servers

       -e, --env=[]
          Set environment variables

       --entrypoint=""
          Overwrite the default ENTRYPOINT of the image

       --env-file=[]
          Read in a line delimited file of environment variables

       --expose=[]
          Expose a port or a range of ports (e.g. --expose=3300-3310) from the container  without
       publishing it to your host

       -h, --hostname=""
          Container host name

       --help
         Print usage statement

       -i, --interactive=true|false
          Keep STDIN open even if not attached. The default is false.

       --ipc=""
          Default is to create a private IPC namespace (POSIX SysV IPC) for the container
                                      'container:':   reuses  another  container  shared  memory,
       semaphores and message queues
                                      'host': use the host shared memory,semaphores  and  message
       queues inside the container.  Note: the host mode gives the container full access to local
       shared memory and is therefore considered insecure.

       -l, --label=[]
          Adds metadata to a container (e.g., --label=com.example.key=value)

       --label-file=[]
          Read labels from a file. Delimit each label with an EOL.

       --link=[]
          Add link to another container in the form of :alias

       --lxc-conf=[]
          (lxc exec-driver only) Add custom lxc options --lxc-conf="lxc.cgroup.cpuset.cpus = 0,1"

       --log-driver="|json-file|syslog|none"
         Logging driver for container. Default is defined by daemon --log-driver flag.
         Warning: docker logs command works only for json-file logging driver.

       -m, --memory=""
          Memory limit (format: , where unit = b, k, m or g)

       Allows you to constrain the memory available to a container. If  the  host  supports  swap
       memory,  then  the  -m  memory setting can be larger than physical RAM. If a limit of 0 is
       specified (not using -m), the container's memory is not limited. The actual limit  may  be
       rounded  up  to  a  multiple  of the operating system's page size (the value would be very
       large, that's millions of trillions).

       --memory-swap=""
          Total memory limit (memory + swap)

       Set -1 to disable swap (format: , where unit = b, k, m or g).  This  value  should  always
       larger than -m, so you should alway use this with -m.

       --mac-address=""
          Container MAC address (e.g. 92:d0:c6:0a:29:33)

       --name=""
          Assign a name to the container

       --net="bridge"
          Set the Network mode for the container
                                      'bridge':  creates a new network stack for the container on
       the docker bridge
                                      'none': no networking for this container
                                      'container:': reuses another container network stack
                                      'host': use the host network stack  inside  the  container.
       Note: the host mode gives the container full access to local system services such as D-bus
       and is therefore considered insecure.

       -P, --publish-all=true|false
          Publish all exposed ports to random ports on the host interfaces. The default is false.

       -p, --publish=[]
          Publish a container's port, or a range of ports, to the host
                                      format:  ip:hostPort:containerPort  |  ip::containerPort  |
       hostPort:containerPort | containerPort
                                      Both hostPort and containerPort can be specified as a range
       of ports.
                                      When specifying ranges for both, the  number  of  container
       ports  in  the  range  must  match  the  number  of  host  ports  in  the range. (e.g., -p
       1234-1236:1234-1236/tcp)
                                      (use 'docker port' to see the actual mapping)

       --pid=host
          Set the PID mode for the container
            host: use the host's PID namespace inside the container.
            Note: the host mode gives the container full access to local  PID  and  is  therefore
       considered insecure.

       --privileged=true|false
          Give extended privileges to this container. The default is false.

       --read-only=true|false
          Mount the container's root filesystem as read only.

       --restart="no"
          Restart policy to apply when a container exits (no, on-failure[:max-retry], always)

       --security-opt=[]
          Security Options

       -t, --tty=true|false
          Allocate a pseudo-TTY. The default is false.

       -u, --user=""
          Username or UID

       -v, --volume=[]
          Bind  mount  a  volume  (e.g.,  from  the  host:  -v  /host:/container, from Docker: -v
       /container)

       --volumes-from=[]
          Mount volumes from the specified container(s)

       -w, --workdir=""
          Working directory inside the container

HISTORY

       August 2014, updated by Sven Dowideit ⟨SvenDowideit@home.org.au⟩ September  2014,  updated
       by  Sven  Dowideit  ⟨SvenDowideit@home.org.au⟩  November  2014,  updated  by Sven Dowideit
       ⟨SvenDowideit@home.org.au⟩