DOCKER(1) Docker User Manuals DOCKER(1) (NAME) docker-container-create - (SYNOPSIS) docker container create [OPTIONS] IMAGE [COMMAND] [ARG...] (DESCRIPTION) . STDOUT . docker run -d . docker start . docker create 'created' . (OPTIONS) CONTAINER-DIR /src/docs . HOST-DIR name . name - a-z0-9 _ () . () - ( ) . / () . HOST-DIR bind-mount . name name . HOST-DIR /foo foo . /foo bind mount . foo . -v (mount) . --volumes-from . bind mount . :ro :rw - . - . (consistency) : :consistent () :cached :delegated. :ro,cached. SELinux . . . :z :Z . . z . . / . Z . . bind mount private . . (mount propagation) . shared . slave . :[r]shared :[r]slave :[r]private . bind mount . ( ) . (shared) shared . (slave) shared slave . df findmnt -o TARGET,PROPAGATION . findmnt /proc/self/mountinfo . . shared:X shared master:X slave private . mount . /foo bind mount mount --bind /foo /foo mount --make-private --make-shared /foo . /foo shared . . / /foo mount --make-shared / / shared . : systemd systemd MountFlags . . slave shared rshared . nocopy . nocopy bind . (OPTIONS) --add-host= (host:ip) --annotation=map[] (annotation) ( OCI) -a, --attach= STDIN STDOUT STDERR --blkio-weight=0 / ( ) 10 1000 0 ( 0) --blkio-weight-device=[] / ( ) --cap-add= (Linux capabilities) --cap-drop= (Linux capabilities) --cgroup-parent="" (cgroup) --cgroupns="" cgroup (host|private) 'host': cgroup 'private': cgroup '': cgroup default-cgroupns-mode () --cidfile="" --cpu-count=0 ( ) --cpu-percent=0 ( ) --cpu-period=0 CFS ( ) --cpu-quota=0 CFS ( ) --cpu-rt-period=0 (real-time) --cpu-rt-runtime=0 (real-time) -c, --cpu-shares=0 ( ) --cpus= --cpuset-cpus="" (0-3, 0,1) --cpuset-mems="" (0-3, 0,1) --device= --device-cgroup-rule= cgroup --device-read-bps=[] ( ) --device-read-iops=[] (/ ) --device-write-bps=[] ( ) --device-write-iops=[] (/ ) --dns= DNS --dns-option= DNS --dns-search= DNS --domainname="" NIS --entrypoint="" ENTRYPOINT -e, --env= --env-file= --expose= (expose) --gpus= (GPU) ('all' GPU) --group-add= --health-cmd="" --health-interval=0s (ms|s|m|h) ( 0s) --health-retries=0 --health-start-interval=0s (ms|s|m|h) ( 0s) --health-start-period=0s health-retries (ms|s|m|h) ( 0s) --health-timeout=0s (ms|s|m|h) ( 0s) --help[=false] -h, --hostname="" --init[=false] init -i, --interactive[=false] STDIN --io-maxbandwidth=0 / ( ) --io-maxiops=0 IOps ( ) --ip= IPv4 ( 172.30.100.104) --ip6= IPv6 ( 2001:db8::33) --ipc="" IPC --isolation="" -l, --label= (metadata) --label-file= --link= --link-local-ip= - (link-local) IPv4/IPv6 --log-driver="" (log driver) --log-opt= --mac-address="" MAC ( 92:d0:c6:0a:29:33) -m, --memory=0 --memory-reservation=0 --memory-swap=0 (swap) swap '-1' swap --memory-swappiness=-1 (swappiness) 0 100 --mount= --name="" --network= --network-alias= --no-healthcheck[=false] HEALTHCHECK --oom-kill-disable[=false] (OOM Killer) --oom-score-adj=0 OOM ( -1000 1000) --pid="" PID --pids-limit=0 (pids) ( -1 ) --platform="" --privileged[=false] -p, --publish= () -P, --publish-all[=false] --pull="missing" ("always" "missing" "never") -q, --quiet[=false] --read-only[=false] --restart="no" --rm[=false] --runtime="" (runtime) --security-opt= --shm-size=0 /dev/shm --stop-signal="" --stop-timeout=0 ( ) --storage-opt= --sysctl=map[] sysctl --tmpfs= tmpfs -t, --tty[=false] -TTY --ulimit=[] ulimit --use-api-socket[=false] Docker API bind mount -u, --user="" UID (: [:]) --userns="" --uts="" UTS -v, --volume= bind mount --volume-driver="" --volumes-from= () -w, --workdir="" (EXAMPLES) (--isolation) . --isolation= . default . : o default: --exec-opt . process . o process: . o hyperv: Hyper-V. (--device-cgroup-rule) . cgroup.allow . . . (character device) 42 ( ) : $ docker create --device-cgroup-rule='c 42:* rmw' --name my-container my-image udev docker exec my-container mknod newDevX c 42 . : create/run . (SEE ALSO) docker-container(1) Docker Community Aug 2026 DOCKER(1)