Scroll to navigation

DOCKER(1) DOCKER(1)

NAME

docker-service-create - Create a new service

SYNOPSIS

docker service create [OPTIONS] IMAGE [COMMAND] [ARG...]

DESCRIPTION

Create a new service

OPTIONS

--config= Specify configurations to expose to the service

--constraint= Placement constraints

--container-label= Container labels

--credential-spec= Credential spec for managed service account (Windows only)

-d, --detach[=false] Exit immediately instead of waiting for the service to converge

--dns= Set custom DNS servers

--dns-option= Set DNS options

--dns-search= Set custom DNS search domains

--endpoint-mode="vip" Endpoint mode (vip or dnsrr)

--entrypoint= Overwrite the default ENTRYPOINT of the image

-e, --env= Set environment variables

--env-file= Read in a file of environment variables

--generic-resource= User defined resources

--group= Set one or more supplementary user groups for the container

--health-cmd="" Command to run to check health

--health-interval= Time between running the check (ms|s|m|h)

--health-retries=0 Consecutive failures needed to report unhealthy

--health-start-period= Start period for the container to initialize before counting retries towards unstable (ms|s|m|h)

--health-timeout= Maximum time to allow one check to run (ms|s|m|h)

-h, --help[=false] help for create

--host= Set one or more custom host-to-IP mappings (host:ip)

--hostname="" Container hostname

--init[=false] Use an init inside each service container to forward signals and reap processes

--isolation="" Service container isolation mode

-l, --label= Service labels

--limit-cpu= Limit CPUs

--limit-memory=0 Limit Memory

--log-driver="" Logging driver for service

--log-opt= Logging driver options

--mode="replicated" Service mode (replicated or global)

--mount= Attach a filesystem mount to the service

--name="" Service name

--network= Network attachments

--no-healthcheck[=false] Disable any container-specified HEALTHCHECK

--no-resolve-image[=false] Do not query the registry to resolve image digest and supported platforms

--placement-pref= Add a placement preference

-p, --publish= Publish a port as a node port

-q, --quiet[=false] Suppress progress output

--read-only[=false] Mount the container's root filesystem as read only

--replicas= Number of tasks

--reserve-cpu= Reserve CPUs

--reserve-memory=0 Reserve Memory

--restart-condition="" Restart when condition is met ("none"|"on-failure"|"any") (default "any")

--restart-delay= Delay between restart attempts (ns|us|ms|s|m|h) (default 5s)

--restart-max-attempts= Maximum number of restarts before giving up

--restart-window= Window used to evaluate the restart policy (ns|us|ms|s|m|h)

--rollback-delay=0s Delay between task rollbacks (ns|us|ms|s|m|h) (default 0s)

--rollback-failure-action="" Action on rollback failure ("pause"|"continue") (default "pause")

--rollback-max-failure-ratio=0 Failure rate to tolerate during a rollback (default 0)

--rollback-monitor=0s Duration after each task rollback to monitor for failure (ns|us|ms|s|m|h) (default 5s)

--rollback-order="" Rollback order ("start-first"|"stop-first") (default "stop-first")

--rollback-parallelism=1 Maximum number of tasks rolled back simultaneously (0 to roll back all at once)

--secret= Specify secrets to expose to the service

--stop-grace-period= Time to wait before force killing a container (ns|us|ms|s|m|h) (default 10s)

--stop-signal="" Signal to stop the container

-t, --tty[=false] Allocate a pseudo-TTY

--update-delay=0s Delay between updates (ns|us|ms|s|m|h) (default 0s)

--update-failure-action="" Action on update failure ("pause"|"continue"|"rollback") (default "pause")

--update-max-failure-ratio=0 Failure rate to tolerate during an update (default 0)

--update-monitor=0s Duration after each task update to monitor for failure (ns|us|ms|s|m|h) (default 5s)

--update-order="" Update order ("start-first"|"stop-first") (default "stop-first")

--update-parallelism=1 Maximum number of tasks updated simultaneously (0 to update all at once)

-u, --user="" Username or UID (format: <name|uid>[:<group|gid>])

--with-registry-auth[=false] Send registry authentication details to swarm agents

-w, --workdir="" Working directory inside the container

SEE ALSO

docker-service(1)
Sep 2019 Docker Community