DOCKER(1) Docker User Manuals DOCKER(1)

# [NAME](#NAME)

docker-service-create - Create a new service

# [SYNOPSIS](#SYNOPSIS)

**docker service create \[OPTIONS] IMAGE \[COMMAND] \[ARG...]**

# [DESCRIPTION](#DESCRIPTION)

Create a new service

# [OPTIONS](#OPTIONS)

**--cap-add**= Add Linux capabilities

**--cap-drop**= Drop Linux capabilities

**--config**= Specify configurations to expose to the service

**--constraint**= Placement constraints

**--container-label**= Container labels

**--credential-spec**= Credential spec for managed service account (Windows only)

**-d**, **--detach**\[=false] Exit immediately instead of waiting for the service to converge

**--dns**= Set custom DNS servers

**--dns-option**= Set DNS options

**--dns-search**= Set custom DNS search domains

**--endpoint-mode**="vip" Endpoint mode (vip or dnsrr)

**--entrypoint**= Overwrite the default ENTRYPOINT of the image

**-e**, **--env**= Set environment variables

**--env-file**= Read in a file of environment variables

**--generic-resource**= User defined resources

**--group**= Set one or more supplementary user groups for the container

**--health-cmd**="" Command to run to check health

**--health-interval**= Time between running the check (ms|s|m|h)

**--health-retries**=0 Consecutive failures needed to report unhealthy

**--health-start-interval**= Time between running the check during the start period (ms|s|m|h)

**--health-start-period**= Start period for the container to initialize before counting retries towards unstable (ms|s|m|h)

**--health-timeout**= Maximum time to allow one check to run (ms|s|m|h)

**--host**= Set one or more custom host-to-IP mappings (host:ip)

**--hostname**="" Container hostname

**--init**\[=false] Use an init inside each service container to forward signals and reap processes

**--isolation**="" Service container isolation mode

**-l**, **--label**= Service labels

**--limit-cpu**= Limit CPUs

**--limit-memory**=0 Limit Memory

**--limit-pids**=0 Limit maximum number of processes (default 0 = unlimited)

**--log-driver**="" Logging driver for service

**--log-opt**= Logging driver options

**--max-concurrent**= Number of job tasks to run concurrently (default equal to --replicas)

**--memory-swap**=0 Swap Bytes (-1 for unlimited)

**--memory-swappiness**=-1 Tune memory swappiness (0-100), -1 to reset to default

**--mode**="replicated" Service mode ("replicated", "global", "replicated-job", "global-job")

**--mount**= Attach a filesystem mount to the service

**--name**="" Service name

**--network**= Network attachments

**--no-healthcheck**\[=false] Disable any container-specified HEALTHCHECK

**--no-resolve-image**\[=false] Do not query the registry to resolve image digest and supported platforms

**--oom-score-adj**=0 Tune host's OOM preferences (-1000 to 1000)

**--placement-pref**= Add a placement preference

**-p**, **--publish**= Publish a port as a node port

**-q**, **--quiet**\[=false] Suppress progress output

**--read-only**\[=false] Mount the container's root filesystem as read only

**--replicas**= Number of tasks

**--replicas-max-per-node**=0 Maximum number of tasks per node (default 0 = unlimited)

**--reserve-cpu**= Reserve CPUs

**--reserve-memory**=0 Reserve Memory

**--restart-condition**="" Restart when condition is met ("none", "on-failure", "any") (default "any")

**--restart-delay**= Delay between restart attempts (ns|us|ms|s|m|h) (default 5s)

**--restart-max-attempts**= Maximum number of restarts before giving up

**--restart-window**= Window used to evaluate the restart policy (ns|us|ms|s|m|h)

**--rollback-delay**=0s Delay between task rollbacks (ns|us|ms|s|m|h) (default 0s)

**--rollback-failure-action**="" Action on rollback failure ("pause", "continue") (default "pause")

**--rollback-max-failure-ratio**=0 Failure rate to tolerate during a rollback (default 0)

**--rollback-monitor**=0s Duration after each task rollback to monitor for failure (ns|us|ms|s|m|h) (default 5s)

**--rollback-order**="" Rollback order ("start-first", "stop-first") (default "stop-first")

**--rollback-parallelism**=1 Maximum number of tasks rolled back simultaneously (0 to roll back all at once)

**--secret**= Specify secrets to expose to the service

**--stop-grace-period**= Time to wait before force killing a container (ns|us|ms|s|m|h) (default 10s)

**--stop-signal**="" Signal to stop the container

**--sysctl**= Sysctl options

**-t**, **--tty**\[=false] Allocate a pseudo-TTY

**--ulimit**=\[] Ulimit options

**--update-delay**=0s Delay between updates (ns|us|ms|s|m|h) (default 0s)

**--update-failure-action**="" Action on update failure ("pause", "continue", "rollback") (default "pause")

**--update-max-failure-ratio**=0 Failure rate to tolerate during an update (default 0)

**--update-monitor**=0s Duration after each task update to monitor for failure (ns|us|ms|s|m|h) (default 5s)

**--update-order**="" Update order ("start-first", "stop-first") (default "stop-first")

**--update-parallelism**=1 Maximum number of tasks updated simultaneously (0 to update all at once)

**-u**, **--user**="" Username or UID (format: \[:])

**--with-registry-auth**\[=false] Send registry authentication details to swarm agents

**-w**, **--workdir**="" Working directory inside the container

# [SEE ALSO](#SEE_ALSO)

[**docker-service(1)**](/man/enterprise-packages/docker-cli-fips/docker-service.1)

Oct 2026 Docker Community

---

Document: docker-service-create(1) from docker-cli-fips 29.9.2-r2 (Chainguard OS)
Source: https://github.com/docker/cli