mirror of https://github.com/docker/docs.git
Update CLI reference files
This commit is contained in:
parent
907db139d3
commit
27081f3e3f
|
@ -477,21 +477,27 @@ examples: "### Build with PATH\n\n```bash\n$ docker build .\n\nUploading context
|
|||
build an image on.\n\nA good example is `http_proxy` or source versions for pulling
|
||||
intermediate\nfiles. The `ARG` instruction lets Dockerfile authors define values
|
||||
that users\ncan set at build-time using the `--build-arg` flag:\n\n```bash\n$ docker
|
||||
build --build-arg HTTP_PROXY=http://10.20.30.2:1234 .\n```\n\nThis flag allows you
|
||||
to pass the build-time variables that are\naccessed like regular environment variables
|
||||
in the `RUN` instruction of the\nDockerfile. Also, these values don't persist in
|
||||
the intermediate or final images\nlike `ENV` values do.\n\nUsing this flag will
|
||||
not alter the output you see when the `ARG` lines from the\nDockerfile are echoed
|
||||
during the build process.\n\nFor detailed information on using `ARG` and `ENV` instructions,
|
||||
see the\n[Dockerfile reference](../builder.md).\n\n### Optional security options
|
||||
(--security-opt)\n\nThis flag is only supported on a daemon running on Windows,
|
||||
and only supports\nthe `credentialspec` option. The `credentialspec` must be in
|
||||
the format\n`file://spec.txt` or `registry://keyname`.\n\n### Specify isolation
|
||||
technology for container (--isolation)\n\nThis option is useful in situations where
|
||||
you are running Docker containers on\nWindows. The `--isolation=<value>` option
|
||||
sets a container's isolation\ntechnology. On Linux, the only supported is the `default`
|
||||
option which uses\nLinux namespaces. On Microsoft Windows, you can specify these
|
||||
values:\n\n\n| Value | Description |\n|-----------|---------------------------------------------------------------------------------------------------------------------------------------------------------------|\n|
|
||||
build --build-arg HTTP_PROXY=http://10.20.30.2:1234 --build-arg FTP_PROXY=http://40.50.60.5:4567
|
||||
.\n```\n\nThis flag allows you to pass the build-time variables that are\naccessed
|
||||
like regular environment variables in the `RUN` instruction of the\nDockerfile.
|
||||
Also, these values don't persist in the intermediate or final images\nlike `ENV`
|
||||
values do. You must add `--build-arg` for each build argument. \n\nUsing this
|
||||
flag will not alter the output you see when the `ARG` lines from the\nDockerfile
|
||||
are echoed during the build process.\n\nFor detailed information on using `ARG`
|
||||
and `ENV` instructions, see the\n[Dockerfile reference](../builder.md).\n\nYou may
|
||||
also use the `--build-arg` flag without a value, in which case the value\nfrom the
|
||||
local environment will be propagated into the Docker container being\nbuilt:\n\n```bash\n$
|
||||
export HTTP_PROXY=http://10.20.30.2:1234\n$ docker build --build-arg HTTP_PROXY
|
||||
.\n```\n\nThis is similar to how `docker run -e` works. Refer to the [`docker run`
|
||||
documentation](https://docs.docker.com/engine/reference/commandline/run/#set-environment-variables--e---env---env-file)\nfor
|
||||
more information.\n\n### Optional security options (--security-opt)\n\nThis flag
|
||||
is only supported on a daemon running on Windows, and only supports\nthe `credentialspec`
|
||||
option. The `credentialspec` must be in the format\n`file://spec.txt` or `registry://keyname`.\n\n###
|
||||
Specify isolation technology for container (--isolation)\n\nThis option is useful
|
||||
in situations where you are running Docker containers on\nWindows. The `--isolation=<value>`
|
||||
option sets a container's isolation\ntechnology. On Linux, the only supported is
|
||||
the `default` option which uses\nLinux namespaces. On Microsoft Windows, you can
|
||||
specify these values:\n\n\n| Value | Description |\n|-----------|---------------------------------------------------------------------------------------------------------------------------------------------------------------|\n|
|
||||
`default` | Use the value specified by the Docker daemon's `--exec-opt` . If the
|
||||
`daemon` does not specify an isolation technology, Microsoft Windows uses `process`
|
||||
as its default value. |\n| `process` | Namespace isolation only. |\n|
|
||||
|
@ -522,16 +528,15 @@ examples: "### Build with PATH\n\n```bash\n$ docker build .\n\nUploading context
|
|||
multi-stage builds](https://docs.docker.com/engine/userguide/eng-image/multistage-build/)\nsection
|
||||
in the userguide for more information.\n\n\n#### Known limitations\n\nThe `--squash`
|
||||
option has a number of known limitations:\n\n- When squashing layers, the resulting
|
||||
image cannot take advantage of layer \n sharing with other images, and may use
|
||||
significantly more space. Sharing the\n base image is still supported.\n- When
|
||||
using this option you may see significantly more space used due to\n storing two
|
||||
copies of the image, one for the build cache with all the cache\n layers in tact,
|
||||
and one for the squashed version.\n- While squashing layers may produce smaller
|
||||
images, it may have a negative\n impact on performance, as a single layer takes
|
||||
longer to extract, and\n downloading a single layer cannot be parallelized.\n-
|
||||
When attempting to squash an image that does not make changes to the\n filesystem
|
||||
(for example, the Dockerfile only contains `ENV` instructions),\n the squash step
|
||||
will fail (see [issue #33823](https://github.com/moby/moby/issues/33823)\n\n####
|
||||
image cannot take advantage of layer\n sharing with other images, and may use significantly
|
||||
more space. Sharing the\n base image is still supported.\n- When using this option
|
||||
you may see significantly more space used due to\n storing two copies of the image,
|
||||
one for the build cache with all the cache\n layers in tact, and one for the squashed
|
||||
version.\n- While squashing layers may produce smaller images, it may have a negative\n
|
||||
\ impact on performance, as a single layer takes longer to extract, and\n downloading
|
||||
a single layer cannot be parallelized.\n- When attempting to squash an image that
|
||||
does not make changes to the\n filesystem (for example, the Dockerfile only contains
|
||||
`ENV` instructions),\n the squash step will fail (see [issue #33823](https://github.com/moby/moby/issues/33823)\n\n####
|
||||
Prerequisites\n\nThe example on this page is using experimental mode in Docker 1.13.\n\nExperimental
|
||||
mode can be enabled by using the `--experimental` flag when starting the Docker
|
||||
daemon or setting `experimental: true` in the `daemon.json` configuration file.\n\nBy
|
||||
|
@ -551,7 +556,7 @@ examples: "### Build with PATH\n\n```bash\n$ docker build .\n\nUploading context
|
|||
>> /hello\nRUN touch remove_me /remove_me\nENV HELLO world\nRUN rm /remove_me\n```\n\nAn
|
||||
image named `test` is built with `--squash` argument.\n\n```bash\n$ docker build
|
||||
--squash -t test .\n\n[...]\n```\n\nIf everything is right, the history will look
|
||||
like this:\n\n```bash\n$ docker history test \n\nIMAGE CREATED CREATED
|
||||
like this:\n\n```bash\n$ docker history test\n\nIMAGE CREATED CREATED
|
||||
BY SIZE COMMENT\n4e10cb5b4cac
|
||||
\ 3 seconds ago 12 B
|
||||
\ merge sha256:88a7b0112a41826885df0e7072698006ee8f621c6ab99fca7fe9151d7b599702
|
||||
|
|
|
@ -89,19 +89,13 @@ examples: |-
|
|||
`table` directive, will include column headers as well.
|
||||
|
||||
The following example uses a template without headers and outputs the
|
||||
`ID` and `CreatedSince` entries separated by a colon for all images:
|
||||
`ID` and `CreatedSince` entries separated by a colon for the `busybox` image:
|
||||
|
||||
```bash
|
||||
$ docker images --format "{{.ID}}: {{.Created}} ago"
|
||||
$ docker history --format "{{.ID}}: {{.CreatedAt}}" busybox
|
||||
|
||||
cc1b61406712: 2 weeks ago
|
||||
<missing>: 2 weeks ago
|
||||
<missing>: 2 weeks ago
|
||||
<missing>: 2 weeks ago
|
||||
<missing>: 2 weeks ago
|
||||
<missing>: 3 weeks ago
|
||||
<missing>: 3 weeks ago
|
||||
<missing>: 3 weeks ago
|
||||
f6e427c148a7: 4 weeks ago
|
||||
<missing>: 4 weeks ago
|
||||
```
|
||||
deprecated: false
|
||||
experimental: false
|
||||
|
|
|
@ -28,7 +28,7 @@ options:
|
|||
swarm: false
|
||||
examples: |-
|
||||
```bash
|
||||
$ docker docker image ls
|
||||
$ docker image ls
|
||||
|
||||
REPOSITORY TAG IMAGE ID CREATED SIZE
|
||||
|
||||
|
|
|
@ -9,25 +9,25 @@ long: "The `docker manifest` command by itself performs no action. In order to o
|
|||
in the same way as\nan image name in `docker pull` and `docker run` commands, for
|
||||
example.\n\nIdeally a manifest list is created from images that are identical in
|
||||
function for\ndifferent os/arch combinations. For this reason, manifest lists are
|
||||
often referred to as\n\"multi-arch images.\" However, a user could create a manifest
|
||||
often referred to as\n\"multi-arch images\". However, a user could create a manifest
|
||||
list that points\nto two images -- one for windows on amd64, and one for darwin
|
||||
on amd64.\n\n### manifest inspect\n\n```\nmanifest inspect --help\n\nUsage: docker
|
||||
manifest inspect [OPTIONS] [MANIFEST_LIST] MANIFEST\n\nisplay an image manifest,
|
||||
or manifest list\n\nOptions:\n --help Print usage\n --insecure allow
|
||||
manifest inspect [OPTIONS] [MANIFEST_LIST] MANIFEST\n\nDisplay an image manifest,
|
||||
or manifest list\n\nOptions:\n --help Print usage\n --insecure Allow
|
||||
communication with an insecure registry\n -v, --verbose Output additional info
|
||||
including layers and platform\n```\n\n### manifest create \n\n```bash\nUsage: docker
|
||||
manifest create MANFEST_LIST MANIFEST [MANIFEST...]\n\nCreate a local manifest list
|
||||
for annotating and pushing to a registry\n\nOptions:\n -a, --amend Amend an existing
|
||||
manifest list\n --insecure allow communication with an insecure registry\n
|
||||
\ --help Print usage\n```\n\n### manifest annotate\n```bash\nUsage: docker
|
||||
manifest annotate [OPTIONS] MANIFEST_LIST MANIFEST\n\nAdd additional information
|
||||
manifest create MANIFEST_LIST MANIFEST [MANIFEST...]\n\nCreate a local manifest
|
||||
list for annotating and pushing to a registry\n\nOptions:\n -a, --amend Amend
|
||||
an existing manifest list\n --insecure Allow communication with an insecure
|
||||
registry\n --help Print usage\n```\n\n### manifest annotate\n```bash\nUsage:
|
||||
\ docker manifest annotate [OPTIONS] MANIFEST_LIST MANIFEST\n\nAdd additional information
|
||||
to a local image manifest\n\nOptions:\n --arch string Set architecture\n
|
||||
\ --help Print usage\n --os string Set
|
||||
operating system\n --os-features stringSlice Set operating system feature\n
|
||||
\ --variant string Set architecture variant\n\n```\n\n### manifest
|
||||
push\n```bash\nUsage: docker manifest push [OPTIONS] MANIFEST_LIST\n\nPush a manifest
|
||||
list to a repository\n\nOptions:\n --help Print usage\n --insecure
|
||||
\ allow push to an insecure registry\n -p, --purge Remove the local manifest
|
||||
list to a repository\n\nOptions:\n --help Print usage\n --insecure
|
||||
\ Allow push to an insecure registry\n -p, --purge Remove the local manifest
|
||||
list after push\n```\n\n### Working with insecure registries\n\nThe manifest command
|
||||
interacts solely with a Docker registry. Because of this, it has no way to query
|
||||
the engine for the list of allowed insecure registries. To allow the CLI to interact
|
||||
|
@ -51,7 +51,7 @@ clink:
|
|||
- docker_manifest_create.yaml
|
||||
- docker_manifest_inspect.yaml
|
||||
- docker_manifest_push.yaml
|
||||
examples: "### inspect an image's manifest object\n \n```bash\n$ docker manifest inspect
|
||||
examples: "### Inspect an image's manifest object\n \n```bash\n$ docker manifest inspect
|
||||
hello-world\n{\n \"schemaVersion\": 2,\n \"mediaType\": \"application/vnd.docker.distribution.manifest.v2+json\",\n
|
||||
\ \"config\": {\n \"mediaType\": \"application/vnd.docker.container.image.v1+json\",\n
|
||||
\ \"size\": 1520,\n \"digest\": \"sha256:1815c82652c03bfd8644afda26fb184f2ed891d921b20a0703b46768f9755c57\"\n
|
||||
|
@ -64,7 +64,7 @@ examples: "### inspect an image's manifest object\n \n```bash\n$ docker manifest
|
|||
as with other docker commands that take image names, you can refer to an image with
|
||||
or\nwithout a tag, or by digest (e.g. hello-world@sha256:f3b3b28a45160805bb16542c9531888519430e9e6d6ffc09d72261b0d26ff74f).\n\nHere
|
||||
is an example of inspecting an image's manifest with the `--verbose` flag:\n\n```bash\n$
|
||||
docker manifest inspect -v hello-world\n{\n \"Ref\": \"docker.io/library/hello-world:latest\",\n
|
||||
docker manifest inspect --verbose hello-world\n{\n \"Ref\": \"docker.io/library/hello-world:latest\",\n
|
||||
\ \"Digest\": \"sha256:f3b3b28a45160805bb16542c9531888519430e9e6d6ffc09d72261b0d26ff74f\",\n
|
||||
\ \"SchemaV2Manifest\": {\n \"schemaVersion\": 2,\n \"mediaType\":
|
||||
\"application/vnd.docker.distribution.manifest.v2+json\",\n \"config\":
|
||||
|
|
|
@ -1,7 +1,7 @@
|
|||
command: docker manifest create
|
||||
short: Create a local manifest list for annotating and pushing to a registry
|
||||
long: Create a local manifest list for annotating and pushing to a registry
|
||||
usage: docker manifest create MANFEST_LIST MANIFEST [MANIFEST...]
|
||||
usage: docker manifest create MANIFEST_LIST MANIFEST [MANIFEST...]
|
||||
pname: docker manifest
|
||||
plink: docker_manifest.yaml
|
||||
options:
|
||||
|
@ -18,7 +18,7 @@ options:
|
|||
- option: insecure
|
||||
value_type: bool
|
||||
default_value: "false"
|
||||
description: allow communication with an insecure registry
|
||||
description: Allow communication with an insecure registry
|
||||
deprecated: false
|
||||
experimental: false
|
||||
experimentalcli: false
|
||||
|
|
|
@ -8,7 +8,7 @@ options:
|
|||
- option: insecure
|
||||
value_type: bool
|
||||
default_value: "false"
|
||||
description: allow communication with an insecure registry
|
||||
description: Allow communication with an insecure registry
|
||||
deprecated: false
|
||||
experimental: false
|
||||
experimentalcli: false
|
||||
|
|
|
@ -1,8 +1,9 @@
|
|||
command: docker secret create
|
||||
short: Create a secret from a file or STDIN as content
|
||||
long: "Creates a secret using standard input or from a file for the secret content.
|
||||
You must run this command on a manager node. \n\nFor detailed information about
|
||||
using secrets, refer to [manage sensitive data with Docker secrets](https://docs.docker.com/engine/swarm/secrets/)."
|
||||
long: |-
|
||||
Creates a secret using standard input or from a file for the secret content. You must run this command on a manager node.
|
||||
|
||||
For detailed information about using secrets, refer to [manage sensitive data with Docker secrets](https://docs.docker.com/engine/swarm/secrets/).
|
||||
usage: docker secret create [OPTIONS] SECRET [file|-]
|
||||
pname: docker secret
|
||||
plink: docker_secret.yaml
|
||||
|
@ -38,7 +39,7 @@ examples: |-
|
|||
### Create a secret
|
||||
|
||||
```bash
|
||||
$ echo <secret> | docker secret create my_secret -
|
||||
$ printf <secret> | docker secret create my_secret -
|
||||
|
||||
onakdyv307se2tl7nl20anokv
|
||||
|
||||
|
|
|
@ -117,7 +117,7 @@ examples: |-
|
|||
`--compose-file` flags.
|
||||
|
||||
```bash
|
||||
$ docker stack deploy --compose-file docker-compose.yml -f docker-compose.prod.yml vossibility
|
||||
$ docker stack deploy --compose-file docker-compose.yml -c docker-compose.prod.yml vossibility
|
||||
|
||||
Ignoring unsupported options: links
|
||||
|
||||
|
|
Loading…
Reference in New Issue