docker命令大全英文版在线手册

docker命令大全英文版在线手册

attach Attach local standard input, output, and error streams to a running container
build Build an image from a Dockerfile
commit Create a new image from a container’s changes
cp Copy files/folders between a container and the local filesystem
create Create a new container
diff Inspect changes to files or directories on a container’s filesystem
events Get real time events from the server
exec Run a command in a running container
export Export a container’s filesystem as a tar archive
history Show the history of an image
images List images
import Import the contents from a tarball to create a filesystem image
info Display system-wide information
inspect Return low-level information on Docker objects
kill Kill one or more running containers
load Load an image from a tar archive or STDIN
login Log in to a Docker registry
logout Log out from a Docker registry
logs Fetch the logs of a container
pause Pause all processes within one or more containers
port List port mappings or a specific mapping for the container
ps List containers
pull Pull an image or a repository from a registry
push Push an image or a repository to a registry
rename Rename a container
restart Restart one or more containers
rm Remove one or more containers
rmi Remove one or more images
run Run a command in a new container
save Save one or more images to a tar archive (streamed to STDOUT by default)
search Search the Docker Hub for images
start Start one or more stopped containers
stats Display a live stream of container(s) resource usage statistics
stop Stop one or more running containers
tag Create a tag TARGET_IMAGE that refers to SOURCE_IMAGE
top Display the running processes of a container
unpause Unpause all processes within one or more containers
update Update configuration of one or more containers
version Show the Docker version information
wait Block until one or more containers stop, then print their exit codes

attach Attach local standard input, output, and error streams to a running container

Usage: docker attach [OPTIONS] CONTAINER
Attach local standard input, output, and error streams to a running container
Options:
–detach-keys string Override the key sequence for detaching a container
–no-stdin Do not attach STDIN
–sig-proxy Proxy all received signals to the process (default true)

build Build an image from a Dockerfile

Usage: docker build [OPTIONS] PATH | URL | -
Build an image from a Dockerfile
Options:
–add-host list Add a custom host-to-IP mapping (host:ip)
–build-arg list Set build-time variables
–cache-from strings Images to consider as cache sources
–cgroup-parent string Optional parent cgroup for the container
–compress Compress the build context using gzip
–cpu-period int Limit the CPU CFS (Completely Fair Scheduler) period
–cpu-quota int Limit the CPU CFS (Completely Fair Scheduler) quota
-c, --cpu-shares int CPU shares (relative weight)
–cpuset-cpus string CPUs in which to allow execution (0-3, 0,1)
–cpuset-mems string MEMs in which to allow execution (0-3, 0,1)
–disable-content-trust Skip image verification (default true)
-f, --file string Name of the Dockerfile (Default is ‘PATH/Dockerfile’)
–force-rm Always remove intermediate containers
–iidfile string Write the image ID to the file
–isolation string Container isolation technology
–label list Set metadata for an image
-m, --memory bytes Memory limit
–memory-swap bytes Swap limit equal to memory plus swap: ‘-1’ to enable unlimited swap
–network string Set the networking mode for the RUN instructions during build (default “default”)
–no-cache Do not use cache when building the image
–pull Always attempt to pull a newer version of the image
-q, --quiet Suppress the build output and print image ID on success
–rm Remove intermediate containers after a successful build (default true)
–security-opt strings Security options
–shm-size bytes Size of /dev/shm
-t, --tag list Name and optionally a tag in the ‘name:tag’ format
–target string Set the target build stage to build.
–ulimit ulimit Ulimit options (default [])

commit Create a new image from a container’s changes

Usage: docker commit [OPTIONS] CONTAINER [REPOSITORY[:TAG]]
Create a new image from a container’s changes
Options:
-a, --author string Author (e.g., “John Hannibal Smith hannibal@a-team.com”)
-c, --change list Apply Dockerfile instruction to the created image
-m, --message string Commit message
-p, --pause Pause container during commit (default true)

cp Copy files/folders between a container and the local filesystem

Usage: docker cp [OPTIONS] CONTAINER:SRC_PATH DEST_PATH|-
docker cp [OPTIONS] SRC_PATH|- CONTAINER:DEST_PATH
Copy files/folders between a container and the local filesystem
Use ‘-’ as the source to read a tar archive from stdin
and extract it to a directory destination in a container.
Use ‘-’ as the destination to stream a tar archive of a
container source to stdout.
Options:
-a, --archive Archive mode (copy all uid/gid information)
-L, --follow-link Always follow symbol link in SRC_PATH

create Create a new container

Usage: docker create [OPTIONS] IMAGE [COMMAND] [ARG…]
Create a new container
Options:
–add-host list Add a custom host-to-IP mapping (host:ip)
-a, --attach list Attach to STDIN, STDOUT or STDERR
–blkio-weight uint16 Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
–blkio-weight-device list Block IO weight (relative device weight) (default [])
–cap-add list Add Linux capabilities
–cap-drop list Drop Linux capabilities
–cgroup-parent string Optional parent cgroup for the container
–cgroupns string Cgroup namespace to use (host|private)
‘host’: Run the container in the Docker host’s cgroup namespace
‘private’: Run the container in its own private cgroup namespace
‘’: Use the cgroup namespace as configured by the
default-cgroupns-mode option on the daemon (default)
–cidfile string Write the container ID to the file
–cpu-period int Limit CPU CFS (Completely Fair Scheduler) period
–cpu-quota int Limit CPU CFS (Completely Fair Scheduler) quota
–cpu-rt-period int Limit CPU real-time period in microseconds
–cpu-rt-runtime int Limit CPU real-time runtime in microseconds
-c, --cpu-shares int CPU shares (relative weight)
–cpus decimal Number of CPUs
–cpuset-cpus string CPUs in which to allow execution (0-3, 0,1)
–cpuset-mems string MEMs in which to allow execution (0-3, 0,1)
–device list Add a host device to the container
–device-cgroup-rule list Add a rule to the cgroup allowed devices list
–device-read-bps list Limit read rate (bytes per second) from a device (default [])
–device-read-iops list Limit read rate (IO per second) from a device (default [])
–device-write-bps list Limit write rate (bytes per second) to a device (default [])
–device-write-iops list Limit write rate (IO per second) to a device (default [])
–disable-content-trust Skip image verification (default true)
–dns list Set custom DNS servers
–dns-option list Set DNS options
–dns-search list Set custom DNS search domains
–domainname string Container NIS domain name
–entrypoint string Overwrite the default ENTRYPOINT of the image
-e, --env list Set environment variables
–env-file list Read in a file of environment variables
–expose list Expose a port or a range of ports
–gpus gpu-request GPU devices to add to the container (‘all’ to pass all GPUs)
–group-add list Add additional groups to join
–health-cmd string Command to run to check health
–health-interval duration Time between running the check (ms|s|m|h) (default 0s)
–health-retries int Consecutive failures needed to report unhealthy
–health-start-period duration Start period for the container to initialize before starting health-retries countdown (ms|s|m|h) (default 0s)
–health-timeout duration Maximum time to allow one check to run (ms|s|m|h) (default 0s)
–help Print usage
-h, --hostname string Container host name
–init Run an init inside the container that forwards signals and reaps processes
-i, --interactive Keep STDIN open even if not attached
–ip string IPv4 address (e.g., 172.30.100.104)
–ip6 string IPv6 address (e.g., 2001:db8::33)
–ipc string IPC mode to use
–isolation string Container isolation technology
–kernel-memory bytes Kernel memory limit
-l, --label list Set meta data on a container
–label-file list Read in a line delimited file of labels
–link list Add link to another container
–link-local-ip list Container IPv4/IPv6 link-local addresses
–log-driver string Logging driver for the container
–log-opt list Log driver options
–mac-address string Container MAC address (e.g., 92:d0:c6:0a:29:33)
-m, --memory bytes Memory limit
–memory-reservation bytes Memory soft limit
–memory-swap bytes Swap limit equal to memory plus swap: ‘-1’ to enable unlimited swap
–memory-swappiness int Tune container memory swappiness (0 to 100) (default -1)
–mount mount Attach a filesystem mount to the container
–name string Assign a name to the container
–network network Connect a container to a network
–network-alias list Add network-scoped alias for the container
–no-healthcheck Disable any container-specified HEALTHCHECK
–oom-kill-disable Disable OOM Killer
–oom-score-adj int Tune host’s OOM preferences (-1000 to 1000)
–pid string PID namespace to use
–pids-limit int Tune container pids limit (set -1 for unlimited)
–platform string Set platform if server is multi-platform capable
–privileged Give extended privileges to this container
-p, --publish list Publish a container’s port(s) to the host
-P, --publish-all Publish all exposed ports to random ports
–pull string Pull image before creating (“always”|“missing”|“never”) (default “missing”)
–read-only Mount the container’s root filesystem as read only
–restart string Restart policy to apply when a container exits (default “no”)
–rm Automatically remove the container when it exits
–runtime string Runtime to use for this container
–security-opt list Security Options
–shm-size bytes Size of /dev/shm
–stop-signal string Signal to stop a container (default “SIGTERM”)
–stop-timeout int Timeout (in seconds) to stop a container
–storage-opt list Storage driver options for the container
–sysctl map Sysctl options (default map[])
–tmpfs list Mount a tmpfs directory
-t, --tty Allocate a pseudo-TTY
–ulimit ulimit Ulimit options (default [])
-u, --user string Username or UID (format: [:])
–userns string User namespace to use
–uts string UTS namespace to use
-v, --volume list Bind mount a volume
–volume-driver string Optional volume driver for the container
–volumes-from list Mount volumes from the specified container(s)
-w, --workdir string Working directory inside the container

diff Inspect changes to files or directories on a container’s filesystem

Usage: docker diff CONTAINER
Inspect changes to files or directories on a container’s filesystem

events Get real time events from the server

Usage: docker events [OPTIONS]
Get real time events from the server
Options:
-f, --filter filter Filter output based on conditions provided
–format string Format the output using the given Go template
–since string Show all events created since timestamp
–until string Stream events until this timestamp

exec Run a command in a running container

Usage: docker exec [OPTIONS] CONTAINER COMMAND [ARG…]
Run a command in a running container
Options:
-d, --detach Detached mode: run command in the background
–detach-keys string Override the key sequence for detaching a container
-e, --env list Set environment variables
–env-file list Read in a file of environment variables
-i, --interactive Keep STDIN open even if not attached
–privileged Give extended privileges to the command
-t, --tty Allocate a pseudo-TTY
-u, --user string Username or UID (format: [:])
-w, --workdir string Working directory inside the container

export Export a container’s filesystem as a tar archive

Usage: docker export [OPTIONS] CONTAINER
Export a container’s filesystem as a tar archive
Options:
-o, --output string Write to a file, instead of STDOUT

history Show the history of an image

Usage: docker history [OPTIONS] IMAGE
Show the history of an image
Options:
–format string Pretty-print images using a Go template
-H, --human Print sizes and dates in human readable format (default true)
–no-trunc Don’t truncate output
-q, --quiet Only show image IDs

images List images

Usage: docker images [OPTIONS] [REPOSITORY[:TAG]]
List images
Options:
-a, --all Show all images (default hides intermediate images)
–digests Show digests
-f, --filter filter Filter output based on conditions provided
–format string Pretty-print images using a Go template
–no-trunc Don’t truncate output
-q, --quiet Only show image IDs

import Import the contents from a tarball to create a filesystem image

Usage: docker import [OPTIONS] file|URL|- [REPOSITORY[:TAG]]
Import the contents from a tarball to create a filesystem image
Options:
-c, --change list Apply Dockerfile instruction to the created image
-m, --message string Set commit message for imported image
–platform string Set platform if server is multi-platform capable

info Display system-wide information

Usage: docker info [OPTIONS]
Display system-wide information
Options:
-f, --format string Format the output using the given Go template

inspect Return low-level information on Docker objects

Usage: docker inspect [OPTIONS] NAME|ID [NAME|ID…]
Return low-level information on Docker objects
Options:
-f, --format string Format the output using the given Go template
-s, --size Display total file sizes if the type is container
–type string Return JSON for specified type

kill Kill one or more running containers

Usage: docker kill [OPTIONS] CONTAINER [CONTAINER…]
Kill one or more running containers
Options:
-s, --signal string Signal to send to the container (default “KILL”)

load Load an image from a tar archive or STDIN

Usage: docker load [OPTIONS]
Load an image from a tar archive or STDIN
Options:
-i, --input string Read from tar archive file, instead of STDIN
-q, --quiet Suppress the load output

login Log in to a Docker registry

Usage: docker login [OPTIONS] [SERVER]
Log in to a Docker registry.
If no server is specified, the default is defined by the daemon.
Options:
-p, --password string Password
–password-stdin Take the password from stdin
-u, --username string Username

logout Log out from a Docker registry

Usage: docker logout [SERVER]
Log out from a Docker registry.
If no server is specified, the default is defined by the daemon.

logs Fetch the logs of a container

Usage: docker logs [OPTIONS] CONTAINER
Fetch the logs of a container
Options:
–details Show extra details provided to logs
-f, --follow Follow log output
–since string Show logs since timestamp (e.g. 2013-01-02T13:23:37Z) or relative (e.g. 42m for 42 minutes)
-n, --tail string Number of lines to show from the end of the logs (default “all”)
-t, --timestamps Show timestamps
–until string Show logs before a timestamp (e.g. 2013-01-02T13:23:37Z) or relative (e.g. 42m for 42 minutes)

pause Pause all processes within one or more containers

Usage: docker pause CONTAINER [CONTAINER…]
Pause all processes within one or more containers

port List port mappings or a specific mapping for the container

Usage: docker port CONTAINER [PRIVATE_PORT[/PROTO]]
List port mappings or a specific mapping for the container

ps List containers

Usage: docker ps [OPTIONS]
List containers
Options:
-a, --all Show all containers (default shows just running)
-f, --filter filter Filter output based on conditions provided
–format string Pretty-print containers using a Go template
-n, --last int Show n last created containers (includes all states) (default -1)
-l, --latest Show the latest created container (includes all states)
–no-trunc Don’t truncate output
-q, --quiet Only display container IDs
-s, --size Display total file sizes

pull Pull an image or a repository from a registry

Usage: docker pull [OPTIONS] NAME[:TAG|@DIGEST]
Pull an image or a repository from a registry
Options:
-a, --all-tags Download all tagged images in the repository
–disable-content-trust Skip image verification (default true)
–platform string Set platform if server is multi-platform capable
-q, --quiet Suppress verbose output

push Push an image or a repository to a registry

Usage: docker push [OPTIONS] NAME[:TAG]
Push an image or a repository to a registry
Options:
-a, --all-tags Push all tagged images in the repository
–disable-content-trust Skip image signing (default true)
-q, --quiet Suppress verbose output

rename Rename a container

Usage: docker rename CONTAINER NEW_NAME
Rename a container

restart Restart one or more containers

Usage: docker restart [OPTIONS] CONTAINER [CONTAINER…]
Restart one or more containers
Options:
-t, --time int Seconds to wait for stop before killing the container (default 10)

rm Remove one or more containers

Usage: docker rm [OPTIONS] CONTAINER [CONTAINER…]
Remove one or more containers
Options:
-f, --force Force the removal of a running container (uses SIGKILL)
-l, --link Remove the specified link
-v, --volumes Remove anonymous volumes associated with the container

rmi Remove one or more images

Usage: docker rmi [OPTIONS] IMAGE [IMAGE…]
Remove one or more images
Options:
-f, --force Force removal of the image
–no-prune Do not delete untagged parents

run Run a command in a new container

Usage: docker run [OPTIONS] IMAGE [COMMAND] [ARG…]
Run a command in a new container
Options:
–add-host list Add a custom host-to-IP mapping (host:ip)
-a, --attach list Attach to STDIN, STDOUT or STDERR
–blkio-weight uint16 Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
–blkio-weight-device list Block IO weight (relative device weight) (default [])
–cap-add list Add Linux capabilities
–cap-drop list Drop Linux capabilities
–cgroup-parent string Optional parent cgroup for the container
–cgroupns string Cgroup namespace to use (host|private)
‘host’: Run the container in the Docker host’s cgroup namespace
‘private’: Run the container in its own private cgroup namespace
‘’: Use the cgroup namespace as configured by the
default-cgroupns-mode option on the daemon (default)
–cidfile string Write the container ID to the file
–cpu-period int Limit CPU CFS (Completely Fair Scheduler) period
–cpu-quota int Limit CPU CFS (Completely Fair Scheduler) quota
–cpu-rt-period int Limit CPU real-time period in microseconds
–cpu-rt-runtime int Limit CPU real-time runtime in microseconds
-c, --cpu-shares int CPU shares (relative weight)
–cpus decimal Number of CPUs
–cpuset-cpus string CPUs in which to allow execution (0-3, 0,1)
–cpuset-mems string MEMs in which to allow execution (0-3, 0,1)
-d, --detach Run container in background and print container ID
–detach-keys string Override the key sequence for detaching a container
–device list Add a host device to the container
–device-cgroup-rule list Add a rule to the cgroup allowed devices list
–device-read-bps list Limit read rate (bytes per second) from a device (default [])
–device-read-iops list Limit read rate (IO per second) from a device (default [])
–device-write-bps list Limit write rate (bytes per second) to a device (default [])
–device-write-iops list Limit write rate (IO per second) to a device (default [])
–disable-content-trust Skip image verification (default true)
–dns list Set custom DNS servers
–dns-option list Set DNS options
–dns-search list Set custom DNS search domains
–domainname string Container NIS domain name
–entrypoint string Overwrite the default ENTRYPOINT of the image
-e, --env list Set environment variables
–env-file list Read in a file of environment variables
–expose list Expose a port or a range of ports
–gpus gpu-request GPU devices to add to the container (‘all’ to pass all GPUs)
–group-add list Add additional groups to join
–health-cmd string Command to run to check health
–health-interval duration Time between running the check (ms|s|m|h) (default 0s)
–health-retries int Consecutive failures needed to report unhealthy
–health-start-period duration Start period for the container to initialize before starting health-retries countdown (ms|s|m|h) (default 0s)
–health-timeout duration Maximum time to allow one check to run (ms|s|m|h) (default 0s)
–help Print usage
-h, --hostname string Container host name
–init Run an init inside the container that forwards signals and reaps processes
-i, --interactive Keep STDIN open even if not attached
–ip string IPv4 address (e.g., 172.30.100.104)
–ip6 string IPv6 address (e.g., 2001:db8::33)
–ipc string IPC mode to use
–isolation string Container isolation technology
–kernel-memory bytes Kernel memory limit
-l, --label list Set meta data on a container
–label-file list Read in a line delimited file of labels
–link list Add link to another container
–link-local-ip list Container IPv4/IPv6 link-local addresses
–log-driver string Logging driver for the container
–log-opt list Log driver options
–mac-address string Container MAC address (e.g., 92:d0:c6:0a:29:33)
-m, --memory bytes Memory limit
–memory-reservation bytes Memory soft limit
–memory-swap bytes Swap limit equal to memory plus swap: ‘-1’ to enable unlimited swap
–memory-swappiness int Tune container memory swappiness (0 to 100) (default -1)
–mount mount Attach a filesystem mount to the container
–name string Assign a name to the container
–network network Connect a container to a network
–network-alias list Add network-scoped alias for the container
–no-healthcheck Disable any container-specified HEALTHCHECK
–oom-kill-disable Disable OOM Killer
–oom-score-adj int Tune host’s OOM preferences (-1000 to 1000)
–pid string PID namespace to use
–pids-limit int Tune container pids limit (set -1 for unlimited)
–platform string Set platform if server is multi-platform capable
–privileged Give extended privileges to this container
-p, --publish list Publish a container’s port(s) to the host
-P, --publish-all Publish all exposed ports to random ports
–pull string Pull image before running (“always”|“missing”|“never”) (default “missing”)
–read-only Mount the container’s root filesystem as read only
–restart string Restart policy to apply when a container exits (default “no”)
–rm Automatically remove the container when it exits
–runtime string Runtime to use for this container
–security-opt list Security Options
–shm-size bytes Size of /dev/shm
–sig-proxy Proxy received signals to the process (default true)
–stop-signal string Signal to stop a container (default “SIGTERM”)
–stop-timeout int Timeout (in seconds) to stop a container
–storage-opt list Storage driver options for the container
–sysctl map Sysctl options (default map[])
–tmpfs list Mount a tmpfs directory
-t, --tty Allocate a pseudo-TTY
–ulimit ulimit Ulimit options (default [])
-u, --user string Username or UID (format: [:])
–userns string User namespace to use
–uts string UTS namespace to use
-v, --volume list Bind mount a volume
–volume-driver string Optional volume driver for the container
–volumes-from list Mount volumes from the specified container(s)
-w, --workdir string Working directory inside the container

save Save one or more images to a tar archive (streamed to STDOUT by default)

Usage: docker save [OPTIONS] IMAGE [IMAGE…]
Save one or more images to a tar archive (streamed to STDOUT by default)
Options:
-o, --output string Write to a file, instead of STDOUT

search Search the Docker Hub for images

Usage: docker search [OPTIONS] TERM
Search the Docker Hub for images
Options:
-f, --filter filter Filter output based on conditions provided
–format string Pretty-print search using a Go template
–limit int Max number of search results (default 25)
–no-trunc Don’t truncate output

start Start one or more stopped containers

Usage: docker start [OPTIONS] CONTAINER [CONTAINER…]
Start one or more stopped containers
Options:
-a, --attach Attach STDOUT/STDERR and forward signals
–detach-keys string Override the key sequence for detaching a container
-i, --interactive Attach container’s STDIN

stats Display a live stream of container(s) resource usage statistics

Usage: docker stats [OPTIONS] [CONTAINER…]
Display a live stream of container(s) resource usage statistics
Options:
-a, --all Show all containers (default shows just running)
–format string Pretty-print images using a Go template
–no-stream Disable streaming stats and only pull the first result
–no-trunc Do not truncate output

stop Stop one or more running containers

Usage: docker stop [OPTIONS] CONTAINER [CONTAINER…]
Stop one or more running containers
Options:
-t, --time int Seconds to wait for stop before killing it (default 10)

tag Create a tag TARGET_IMAGE that refers to SOURCE_IMAGE

Usage: docker tag SOURCE_IMAGE[:TAG] TARGET_IMAGE[:TAG]
Create a tag TARGET_IMAGE that refers to SOURCE_IMAGE

top Display the running processes of a container

Usage: docker top CONTAINER [ps OPTIONS]
Display the running processes of a container

unpause Unpause all processes within one or more containers

Usage: docker unpause CONTAINER [CONTAINER…]
Unpause all processes within one or more containers

update Update configuration of one or more containers

Usage: docker update [OPTIONS] CONTAINER [CONTAINER…]
Update configuration of one or more containers
Options:
–blkio-weight uint16 Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
–cpu-period int Limit CPU CFS (Completely Fair Scheduler) period
–cpu-quota int Limit CPU CFS (Completely Fair Scheduler) quota
–cpu-rt-period int Limit the CPU real-time period in microseconds
–cpu-rt-runtime int Limit the CPU real-time runtime in microseconds
-c, --cpu-shares int CPU shares (relative weight)
–cpus decimal Number of CPUs
–cpuset-cpus string CPUs in which to allow execution (0-3, 0,1)
–cpuset-mems string MEMs in which to allow execution (0-3, 0,1)
–kernel-memory bytes Kernel memory limit
-m, --memory bytes Memory limit
–memory-reservation bytes Memory soft limit
–memory-swap bytes Swap limit equal to memory plus swap: ‘-1’ to enable unlimited swap
–pids-limit int Tune container pids limit (set -1 for unlimited)
–restart string Restart policy to apply when a container exits

version Show the Docker version information

Usage: docker version [OPTIONS]
Show the Docker version information
Options:
-f, --format string Format the output using the given Go template
–kubeconfig string Kubernetes config file

wait Block until one or more containers stop, then print their exit codes

Usage: docker wait CONTAINER [CONTAINER…]
Block until one or more containers stop, then print their exit codes