/usr/bin/dockerd

Usage:	dockerd [OPTIONS]

A self-sufficient runtime for containers.

Options:
      --add-runtime runtime                   Register an additional OCI
                                              compatible runtime (default [])
      --allow-direct-routing                  Allow remote access to
                                              published ports on
                                              container IP addresses
      --apparmor-profile string               Path to AppArmor profile
                                              template
      --authorization-plugin list             Authorization plugins to load
      --bip string                            IPv4 address for the
                                              default bridge
      --bip6 string                           IPv6 address for the
                                              default bridge
  -b, --bridge string                         Attach containers to a
                                              network bridge
      --bridge-accept-fwmark string           In bridge networks, accept
                                              packets with this firewall
                                              mark/mask
      --cdi-spec-dir list                     CDI specification
                                              directories to use
      --cgroup-parent string                  Set parent cgroup for all
                                              containers
      --config-file string                    Daemon configuration file
                                              (default
                                              "/etc/docker/daemon.json")
      --containerd string                     containerd grpc address
      --containerd-namespace string           Containerd namespace to use
                                              (default "moby")
      --containerd-plugins-namespace string   Containerd namespace to use
                                              for plugins (default
                                              "plugins.moby")
      --cpu-rt-period int                     Limit the CPU real-time
                                              period in microseconds for
                                              the parent cgroup for all
                                              containers (not supported
                                              with cgroups v2)
      --cpu-rt-runtime int                    Limit the CPU real-time
                                              runtime in microseconds for
                                              the parent cgroup for all
                                              containers (not supported
                                              with cgroups v2)
      --cri-containerd                        start containerd with cri
      --data-root string                      Root directory of
                                              persistent Docker state
                                              (default "/var/lib/docker")
  -D, --debug                                 Enable debug mode
      --default-address-pool pool-options     Default address pools for
                                              node specific local networks
      --default-cgroupns-mode string          Default mode for containers
                                              cgroup namespace ("host" |
                                              "private") (default "host")
      --default-gateway ip                    Default gateway IPv4
                                              address for the default
                                              bridge network
      --default-gateway-v6 ip                 Default gateway IPv6
                                              address for the default
                                              bridge network
      --default-ipc-mode string               Default mode for containers
                                              ipc ("shareable" |
                                              "private") (default "private")
      --default-network-opt mapmap            Default network options
                                              (default map[])
      --default-runtime string                Default OCI runtime for
                                              containers (default "runc")
      --default-shm-size bytes                Default shm size for
                                              containers (default 64MiB)
      --default-stop-timeout int              Set the default container
                                              stop timeout in seconds (0
                                              to terminate immediately)
                                              (default 10)
      --default-ulimit ulimit                 Default ulimits for
                                              containers (default [])
      --dns list                              DNS server to use
      --dns-opt list                          DNS options to use
      --dns-search list                       DNS search domains to use
      --exec-opt list                         Runtime execution options
      --exec-root string                      Root directory for
                                              execution state files
                                              (default "/var/run/docker")
      --experimental                          Enable experimental features
      --extension-dir list                    Directories to load
                                              extension binaries from
      --feature map                           Enable feature in the
                                              daemon (default map[])
      --firewall-backend string               Firewall backend to use,
                                              iptables or nftables
      --fixed-cidr string                     IPv4 subnet for the default
                                              bridge network
      --fixed-cidr-v6 string                  IPv6 subnet for the default
                                              bridge network
  -G, --group string                          Group for the unix socket
                                              (default "docker")
      --help                                  Print usage
  -H, --host list                             Daemon socket(s) to connect to
      --host-gateway-ip list                  IP addresses that the
                                              special 'host-gateway'
                                              string in --add-host
                                              resolves to. Defaults to
                                              the IP addresses of the
                                              default bridge
      --http-proxy string                     HTTP proxy URL to use for
                                              outgoing traffic
      --https-proxy string                    HTTPS proxy URL to use for
                                              outgoing traffic
      --icc                                   Enable inter-container
                                              communication for the
                                              default bridge network
                                              (default true)
      --init                                  Run an init in the
                                              container to forward
                                              signals and reap processes
      --init-path string                      Path to the docker-init binary
      --insecure-registry list                Enable insecure registry
                                              communication
      --ip ip                                 Host IP for port publishing
                                              from the default bridge
                                              network (default 0.0.0.0)
      --ip-forward                            Enable IP forwarding in
                                              system configuration
                                              (default true)
      --ip-forward-no-drop                    Do not set the
                                              filter-FORWARD policy to
                                              DROP when enabling IP forwarding
      --ip-masq                               Enable IP masquerading for
                                              the default bridge network
                                              (default true)
      --ip6tables                             Enable addition of
                                              ip6tables rules (default true)
      --iptables                              Enable addition of iptables
                                              rules (default true)
      --ipv6                                  Enable IPv6 networking for
                                              the default bridge network
      --label list                            Set key=value labels to the
                                              daemon
      --live-restore                          Enable live restore of
                                              docker when containers are
                                              still running
      --log-driver string                     Default driver for
                                              container logs (default
                                              "json-file")
      --log-format string                     Set the logging format
                                              ("text"|"json") (default "text")
  -l, --log-level string                      Set the logging level
                                              ("debug"|"info"|"warn"|"error"|"fatal") (default "info")
      --log-opt map                           Default log driver options
                                              for containers (default map[])
      --max-concurrent-downloads int          Set the max concurrent
                                              downloads (default 3)
      --max-concurrent-uploads int            Set the max concurrent
                                              uploads (default 5)
      --max-download-attempts int             Set the max download
                                              attempts for each pull
                                              (default 5)
      --metrics-addr string                   Set default address and
                                              port to serve the metrics api on
      --mtu int                               Set the MTU for the default
                                              "bridge" network (default 1500)
      --network-control-plane-mtu int         Network Control plane MTU
                                              (default 1500)
      --no-new-privileges                     Set no-new-privileges by
                                              default for new containers
      --no-proxy string                       Comma-separated list of
                                              hosts or IP addresses for
                                              which the proxy is skipped
      --node-generic-resource list            Advertise user-defined resource
      --nri-opts nri-opts                     Node Resource Interface
                                              configuration (default
                                              enable=false)
  -p, --pidfile string                        Path to use for daemon PID
                                              file (default
                                              "/var/run/docker.pid")
      --raw-logs                              Full timestamps without
                                              ANSI coloring
      --registry-mirror list                  Preferred Docker registry mirror
      --rootless                              Enable rootless mode;
                                              typically used with RootlessKit
      --seccomp-profile string                Path to seccomp profile.
                                              Set to "unconfined" to
                                              disable the default seccomp
                                              profile (default "builtin")
      --selinux-enabled                       Enable selinux support
      --shutdown-timeout int                  Set the default shutdown
                                              timeout (default 15)
  -s, --storage-driver string                 Storage driver to use
      --storage-opt list                      Storage driver options
      --swarm-default-advertise-addr string   Set default address or
                                              interface for swarm
                                              advertised address
      --tls                                   Use TLS; implied by --tlsverify
      --tlscacert string                      Trust certs signed only by
                                              this CA (default
                                              "/tmp/.docker/ca.pem")
      --tlscert string                        Path to TLS certificate
                                              file (default
                                              "/tmp/.docker/cert.pem")
      --tlskey string                         Path to TLS key file
                                              (default "/tmp/.docker/key.pem")
      --tlsverify                             Use TLS and verify the remote
      --userland-proxy                        Use userland proxy for
                                              loopback traffic (default true)
      --userland-proxy-path string            Path to the userland proxy
                                              binary (default
                                              "/usr/sbin/docker-proxy")
      --userns-remap string                   User/Group setting for user
                                              namespaces
      --validate                              Validate daemon
                                              configuration and exit
  -v, --version                               Print version information
                                              and quit