1ctr(8)()                                                              ctr(8)()
2
3
4
5       ctr  is  an unsupported debug and administrative client for interacting
6       with the containerd daemon. Because it is  unsupported,  the  commands,
7       options, and operations are not guaranteed to be backward compatible or
8       stable from release to release of the containerd project.
9
10
11
12
13
14

NAME

16       ctr
17
18
19

SYNOPSIS

21       ctr
22
23
24              [--address|-a]=[value]
25              [--connect-timeout]=[value]
26              [--debug]
27              [--namespace|-n]=[value]
28              [--timeout]=[value]
29
30
31
32       Usage:
33
34
35              ctr [GLOBAL OPTIONS] command [COMMAND OPTIONS] [ARGUMENTS...]
36
37
38
39

GLOBAL OPTIONS

41       --address,  -a="":  address  for  containerd's  GRPC  server  (default:
42       /run/containerd/containerd.sock)
43
44
45       --connect-timeout="":  timeout  for  connecting to containerd (default:
46       0s)
47
48
49       --debug: enable debug output in logs
50
51
52       --namespace, -n="": namespace to use with commands (default: default)
53
54
55       --timeout="": total timeout for ctr commands (default: 0s)
56
57
58

COMMANDS

plugins, plugin

61       provides information about containerd plugins
62
63
64   list, ls
65       lists containerd plugins
66
67
68       --detailed, -d: print detailed information about each plugin
69
70
71       --quiet, -q: print only the plugin ids
72
73

version

75       print the client and server versions
76
77

containers, c, container

79       manage containers
80
81
82   create
83       create container
84
85
86       --allow-new-privs: turn off OCI spec's NoNewPrivileges feature flag
87
88
89       --annotation="": specify additional OCI annotations (e.g. foo=bar)
90
91
92       --apparmor-default-profile="": enable AppArmor with the default profile
93       with the specified name, e.g. "cri-containerd.apparmor.d"
94
95
96       --apparmor-profile="": enable AppArmor with an existing custom profile
97
98
99       --cap-add="": add Linux capabilities (Set capabilities with 'CAP_' pre‐
100       fix)
101
102
103       --cap-drop="": drop Linux capabilities (Set  capabilities  with  'CAP_'
104       prefix)
105
106
107       --config, -c="": path to the runtime-specific spec config file
108
109
110       --cpu-period="": Limit CPU CFS period (default: 0)
111
112
113       --cpu-quota="": Limit CPU CFS quota (default: -1)
114
115
116       --cwd="": specify the working directory of the process
117
118
119       --device="":  file  path to a device to add to the container; or a path
120       to a directory tree of devices to add to the container
121
122
123       --env="": specify  additional  container  environment  variables  (e.g.
124       FOO=bar)
125
126
127       --env-file="":  specify additional container environment variables in a
128       file(e.g. FOO=bar, one per line)
129
130
131       --gpus="": add gpus to the container
132
133
134       --label="": specify additional labels (e.g. foo=bar)
135
136
137       --memory-limit="": memory limit (in bytes) for the container  (default:
138       0)
139
140
141       --mount="":     specify     additional     container     mount    (e.g.
142       type=bind,src=/tmp,dst=/host,options=rbind:ro)
143
144
145       --net-host: enable host networking for the container
146
147
148       --no-pivot: disable use of pivot-root (linux only)
149
150
151       --pid-file="": file path to write the task's pid
152
153
154       --privileged: run privileged container
155
156
157       --rdt-class="": name of the RDT class to associate the container  with.
158       Specifies a Class of Service (CLOS) for cache and memory bandwidth man‐
159       agement.
160
161
162       --read-only: set the containers filesystem as readonly
163
164
165       --rootfs: use custom rootfs that is not managed by containerd snapshot‐
166       ter
167
168
169       --rootfs-propagation="": set the propagation of the container rootfs
170
171
172       --runtime="": runtime name (default: io.containerd.runc.v2)
173
174
175       --runtime-config-path="": optional runtime config path
176
177
178       --seccomp: enable the default seccomp profile
179
180
181       --seccomp-profile="": file path to custom seccomp profile. seccomp must
182       be set to true, before using seccomp-profile
183
184
185       --snapshotter="": snapshotter name. Empty value stands for the  default
186       value.
187
188
189       --snapshotter-label="":  labels added to the new snapshot for this con‐
190       tainer.
191
192
193       --tty, -t: allocate a TTY for the container
194
195
196       --with-ns="": specify existing Linux namespaces to  join  at  container
197       runtime (format ':')
198
199
200   delete, del, remove, rm
201       delete one or more existing containers
202
203
204       --keep-snapshot: do not clean up snapshot with container
205
206
207   info
208       get info about a container
209
210
211       --spec: only display the spec
212
213
214   list, ls
215       list containers
216
217
218       --quiet, -q: print only the container id
219
220
221   label
222       set and clear labels for a container
223
224
225   checkpoint
226       checkpoint a container
227
228
229       --image: include the image in the checkpoint
230
231
232       --rw: include the rw layer in the checkpoint
233
234
235       --task: checkpoint container task
236
237
238   restore
239       restore a container from checkpoint
240
241
242       --live: restore the runtime and memory data from the checkpoint
243
244
245       --rw: restore the rw layer from the checkpoint
246
247

content

249       manage content
250
251
252   active
253       display active transfers
254
255
256       --root="": path to content store root (default: /tmp/content)
257
258
259       --timeout, -t="": total timeout for fetch (default: 0s)
260
261
262   delete, del, remove, rm
263       permanently delete one or more blobs
264
265
266   edit
267       edit a blob and return a new digest
268
269
270       --editor="": select editor (vim, emacs, etc.)
271
272
273       --validate="":  validate  the result against a format (json, mediatype,
274       etc.)
275
276
277   fetch
278       fetch all content for an image into containerd
279
280
281       --all-metadata: Pull metadata for all platforms
282
283
284       --all-platforms: pull content from all platforms
285
286
287       --hosts-dir="": Custom hosts configuration directory
288
289
290       --http-dump: dump all HTTP request/responses when interacting with con‐
291       tainer registry
292
293
294       --http-trace: enable HTTP tracing for registry interactions
295
296
297       --label="": labels to attach to the image
298
299
300       --metadata-only: Pull all metadata including manifests and configs
301
302
303       --plain-http: allow connections using plain HTTP
304
305
306       --platform="": Pull content from a specific platform
307
308
309       --refresh="": refresh token for authorization server
310
311
312       --skip-verify, -k: skip SSL certificate validation
313
314
315       --tlscacert="": path to TLS root CA
316
317
318       --tlscert="": path to TLS client certificate
319
320
321       --tlskey="": path to TLS client key
322
323
324       --user, -u="": user[:password] Registry user and password
325
326
327   fetch-object
328       retrieve objects from a remote
329
330
331       --hosts-dir="": Custom hosts configuration directory
332
333
334       --http-dump: dump all HTTP request/responses when interacting with con‐
335       tainer registry
336
337
338       --http-trace: enable HTTP tracing for registry interactions
339
340
341       --plain-http: allow connections using plain HTTP
342
343
344       --refresh="": refresh token for authorization server
345
346
347       --skip-verify, -k: skip SSL certificate validation
348
349
350       --tlscacert="": path to TLS root CA
351
352
353       --tlscert="": path to TLS client certificate
354
355
356       --tlskey="": path to TLS client key
357
358
359       --user, -u="": user[:password] Registry user and password
360
361
362   get
363       get the data for an object
364
365
366   ingest
367       accept content into the store
368
369
370       --expected-digest="": verify content against expected digest
371
372
373       --expected-size="": validate against provided size (default: 0)
374
375
376   list, ls
377       list all blobs in the store
378
379
380       --quiet, -q: print only the blob digest
381
382
383   push-object
384       push an object to a remote
385
386
387       --hosts-dir="": Custom hosts configuration directory
388
389
390       --http-dump: dump all HTTP request/responses when interacting with con‐
391       tainer registry
392
393
394       --http-trace: enable HTTP tracing for registry interactions
395
396
397       --plain-http: allow connections using plain HTTP
398
399
400       --refresh="": refresh token for authorization server
401
402
403       --skip-verify, -k: skip SSL certificate validation
404
405
406       --tlscacert="": path to TLS root CA
407
408
409       --tlscert="": path to TLS client certificate
410
411
412       --tlskey="": path to TLS client key
413
414
415       --user, -u="": user[:password] Registry user and password
416
417
418   label
419       add labels to content
420
421
422   prune
423       prunes content from the content store
424
425
426   references
427       prunes  preference  labels  from  the content store (layers only by de‐
428       fault)
429
430
431       --async: allow garbage collection to cleanup asynchronously
432
433
434       --dry: just show updates without applying (enables debug logging)
435
436

events, event

438       display containerd events
439
440

images, image, i

442       manage images
443
444
445   check
446       check existing images to ensure all content is available locally
447
448
449       --quiet, -q: print only the ready image refs (fully downloaded and  un‐
450       packed)
451
452
453       --snapshotter="":  snapshotter name. Empty value stands for the default
454       value.
455
456
457   export
458       export images
459
460
461       --all-platforms: exports content from all platforms
462
463
464       --platform="": Pull content from a specific platform
465
466
467       --skip-manifest-json: do not add Docker compatible manifest.json to ar‐
468       chive
469
470
471       --skip-non-distributable:  do  not  add non-distributable blobs such as
472       Windows layers to archive
473
474
475   import
476       import images
477
478
479       --all-platforms: imports content for all platforms, false by default
480
481
482       --base-name="": base image name for added images,  when  provided  only
483       images with this name prefix are imported
484
485
486       --compress-blobs:  compress  uncompressed  blobs when creating manifest
487       (Docker format only)
488
489
490       --digests: whether to create digest images (default: false)
491
492
493       --index-name="": image name to keep index as, by default index is  dis‐
494       carded
495
496
497       --no-unpack: skip unpacking the images, false by default
498
499
500       --platform="": imports content for specific platform
501
502
503       --skip-digest-for-named: skip applying --digests option to images named
504       in the importing tar (use it in conjunction with --digests)
505
506
507       --snapshotter="": snapshotter name. Empty value stands for the  default
508       value.
509
510
511   list, ls
512       list images known to containerd
513
514
515       --quiet, -q: print only the image refs
516
517
518   mount
519       mount an image to a target path
520
521
522       --hosts-dir="": Custom hosts configuration directory
523
524
525       --http-dump: dump all HTTP request/responses when interacting with con‐
526       tainer registry
527
528
529       --http-trace: enable HTTP tracing for registry interactions
530
531
532       --label="": labels to attach to the image
533
534
535       --plain-http: allow connections using plain HTTP
536
537
538       --platform="": Mount the image for  the  specified  platform  (default:
539       linux/amd64)
540
541
542       --refresh="": refresh token for authorization server
543
544
545       --rw: Enable write support on the mount
546
547
548       --skip-verify, -k: skip SSL certificate validation
549
550
551       --snapshotter="":  snapshotter name. Empty value stands for the default
552       value.
553
554
555       --tlscacert="": path to TLS root CA
556
557
558       --tlscert="": path to TLS client certificate
559
560
561       --tlskey="": path to TLS client key
562
563
564       --user, -u="": user[:password] Registry user and password
565
566
567   unmount
568       unmount the image from the target
569
570
571       --hosts-dir="": Custom hosts configuration directory
572
573
574       --http-dump: dump all HTTP request/responses when interacting with con‐
575       tainer registry
576
577
578       --http-trace: enable HTTP tracing for registry interactions
579
580
581       --label="": labels to attach to the image
582
583
584       --plain-http: allow connections using plain HTTP
585
586
587       --refresh="": refresh token for authorization server
588
589
590       --rm: remove the snapshot after a successful unmount
591
592
593       --skip-verify, -k: skip SSL certificate validation
594
595
596       --snapshotter="":  snapshotter name. Empty value stands for the default
597       value.
598
599
600       --tlscacert="": path to TLS root CA
601
602
603       --tlscert="": path to TLS client certificate
604
605
606       --tlskey="": path to TLS client key
607
608
609       --user, -u="": user[:password] Registry user and password
610
611
612   pull
613       pull an image from a remote
614
615
616       --all-metadata: Pull metadata for all platforms
617
618
619       --all-platforms: pull content and metadata from all platforms
620
621
622       --hosts-dir="": Custom hosts configuration directory
623
624
625       --http-dump: dump all HTTP request/responses when interacting with con‐
626       tainer registry
627
628
629       --http-trace: enable HTTP tracing for registry interactions
630
631
632       --label="": labels to attach to the image
633
634
635       --max-concurrent-downloads="":  Set  the  max  concurrent downloads for
636       each pull (default: 0)
637
638
639       --plain-http: allow connections using plain HTTP
640
641
642       --platform="": Pull content from a specific platform
643
644
645       --print-chainid: Print the resulting image's chain ID
646
647
648       --refresh="": refresh token for authorization server
649
650
651       --skip-verify, -k: skip SSL certificate validation
652
653
654       --snapshotter="": snapshotter name. Empty value stands for the  default
655       value.
656
657
658       --tlscacert="": path to TLS root CA
659
660
661       --tlscert="": path to TLS client certificate
662
663
664       --tlskey="": path to TLS client key
665
666
667       --user, -u="": user[:password] Registry user and password
668
669
670   push
671       push an image to a remote
672
673
674       --allow-non-distributable-blobs: Allow pushing blobs that are marked as
675       non-distributable
676
677
678       --hosts-dir="": Custom hosts configuration directory
679
680
681       --http-dump: dump all HTTP request/responses when interacting with con‐
682       tainer registry
683
684
685       --http-trace: enable HTTP tracing for registry interactions
686
687
688       --manifest="": digest of manifest
689
690
691       --manifest-type="":  media  type  of manifest digest (default: applica‐
692       tion/vnd.oci.image.manifest.v1+json)
693
694
695       --max-concurrent-uploaded-layers="": Set the  max  concurrent  uploaded
696       layers for each push (default: 0)
697
698
699       --plain-http: allow connections using plain HTTP
700
701
702       --platform="": push content from a specific platform
703
704
705       --refresh="": refresh token for authorization server
706
707
708       --skip-verify, -k: skip SSL certificate validation
709
710
711       --tlscacert="": path to TLS root CA
712
713
714       --tlscert="": path to TLS client certificate
715
716
717       --tlskey="": path to TLS client key
718
719
720       --user, -u="": user[:password] Registry user and password
721
722
723   delete, del, remove, rm
724       remove one or more images by reference
725
726
727       --sync: Synchronously remove image and all associated resources
728
729
730   tag
731       tag an image
732
733
734       --force:  force  target_ref to be created, regardless if it already ex‐
735       ists
736
737
738   label
739       set and clear labels for an image
740
741
742       --replace-all, -r: replace all labels
743
744
745   convert
746       convert an image
747
748
749       --all-platforms: exports content from all platforms
750
751
752       --oci: convert Docker media types to OCI media types
753
754
755       --platform="": Pull content from a specific platform
756
757
758       --uncompress: convert tar.gz layers to uncompressed tar layers
759
760

leases

762       manage leases
763
764
765   list, ls
766       list all active leases
767
768
769       --quiet, -q: print only the blob digest
770
771
772   create
773       create lease
774
775
776       --expires, -x="": expiration of lease (0 value will  not  expire)  (de‐
777       fault: 24h0m0s)
778
779
780       --id="": set the id for the lease, will be generated by default
781
782
783   delete, del, remove, rm
784       delete a lease
785
786
787       --sync: Synchronously remove leases and all unreferenced resources
788
789

namespaces, namespace, ns

791       manage namespaces
792
793
794   create, c
795       create a new namespace
796
797
798   list, ls
799       list namespaces
800
801
802       --quiet, -q: print only the namespace name
803
804
805   remove, rm
806       remove one or more namespaces
807
808
809       --cgroup, -c: delete the namespace's cgroup
810
811
812   label
813       set and clear labels for a namespace
814
815

pprof

817       provide golang pprof outputs for containerd
818
819
820       --debug-socket,  -d="":  socket path for containerd's debug server (de‐
821       fault: /run/containerd/debug.sock)
822
823
824   block
825       goroutine blocking profile
826
827
828   goroutines
829       dump goroutine stack dump
830
831
832   heap
833       dump heap profile
834
835
836   profile
837       CPU profile
838
839
840       --seconds, -s="": duration for collection (seconds) (default: 30s)
841
842
843   threadcreate
844       goroutine thread creating profile
845
846
847   trace
848       collect execution trace
849
850
851       --seconds, -s="": trace time (seconds) (default: 5s)
852
853

run

855       run a container
856
857
858       --allow-new-privs: turn off OCI spec's NoNewPrivileges feature flag
859
860
861       --annotation="": specify additional OCI annotations (e.g. foo=bar)
862
863
864       --apparmor-default-profile="": enable AppArmor with the default profile
865       with the specified name, e.g. "cri-containerd.apparmor.d"
866
867
868       --apparmor-profile="": enable AppArmor with an existing custom profile
869
870
871       --cap-add="": add Linux capabilities (Set capabilities with 'CAP_' pre‐
872       fix)
873
874
875       --cap-drop="": drop Linux capabilities (Set  capabilities  with  'CAP_'
876       prefix)
877
878
879       --cgroup="":  cgroup  path (To disable use of cgroup, set to "" explic‐
880       itly)
881
882
883       --cni: enable cni networking for the container
884
885
886       --config, -c="": path to the runtime-specific spec config file
887
888
889       --cpu-period="": Limit CPU CFS period (default: 0)
890
891
892       --cpu-quota="": Limit CPU CFS quota (default: -1)
893
894
895       --cpu-shares="": set the cpu shares (default: 1024)
896
897
898       --cpus="": set the CFS cpu quota (default: 0.000000)
899
900
901       --cwd="": specify the working directory of the process
902
903
904       --detach, -d: detach from the task after it has started execution
905
906
907       --device="": file path to a device to add to the container; or  a  path
908       to a directory tree of devices to add to the container
909
910
911       --env="":  specify  additional  container  environment  variables (e.g.
912       FOO=bar)
913
914
915       --env-file="": specify additional container environment variables in  a
916       file(e.g. FOO=bar, one per line)
917
918
919       --fifo-dir="": directory used for storing IO FIFOs
920
921
922       --gidmap="": run inside a user namespace with the specified GID mapping
923       range; specified with the format container-gid:host-gid:length
924
925
926       --gpus="": add gpus to the container
927
928
929       --label="": specify additional labels (e.g. foo=bar)
930
931
932       --log-uri="": log uri
933
934
935       --memory-limit="": memory limit (in bytes) for the container  (default:
936       0)
937
938
939       --mount="":     specify     additional     container     mount    (e.g.
940       type=bind,src=/tmp,dst=/host,options=rbind:ro)
941
942
943       --net-host: enable host networking for the container
944
945
946       --no-pivot: disable use of pivot-root (linux only)
947
948
949       --null-io: send all IO to /dev/null
950
951
952       --pid-file="": file path to write the task's pid
953
954
955       --platform="": run image for specific platform
956
957
958       --privileged: run privileged container
959
960
961       --rdt-class="": name of the RDT class to associate the container  with.
962       Specifies a Class of Service (CLOS) for cache and memory bandwidth man‐
963       agement.
964
965
966       --read-only: set the containers filesystem as readonly
967
968
969       --remap-labels: provide the user namespace ID remapping  to  the  snap‐
970       shotter via label options; requires snapshotter support
971
972
973       --rm: remove the container after running
974
975
976       --rootfs: use custom rootfs that is not managed by containerd snapshot‐
977       ter
978
979
980       --rootfs-propagation="": set the propagation of the container rootfs
981
982
983       --runc-binary="": specify runc-compatible binary
984
985
986       --runc-root="": specify runc-compatible root
987
988
989       --runc-systemd-cgroup: start runc with systemd cgroup manager
990
991
992       --runtime="": runtime name (default: io.containerd.runc.v2)
993
994
995       --runtime-config-path="": optional runtime config path
996
997
998       --seccomp: enable the default seccomp profile
999
1000
1001       --seccomp-profile="": file path to custom seccomp profile. seccomp must
1002       be set to true, before using seccomp-profile
1003
1004
1005       --snapshotter="":  snapshotter name. Empty value stands for the default
1006       value.
1007
1008
1009       --snapshotter-label="": labels added to the new snapshot for this  con‐
1010       tainer.
1011
1012
1013       --tty, -t: allocate a TTY for the container
1014
1015
1016       --uidmap="": run inside a user namespace with the specified UID mapping
1017       range; specified with the format container-uid:host-uid:length
1018
1019
1020       --with-ns="": specify existing Linux namespaces to  join  at  container
1021       runtime (format ':')
1022
1023

snapshots, snapshot

1025       manage snapshots
1026
1027
1028       --snapshotter="":  snapshotter name. Empty value stands for the default
1029       value.
1030
1031
1032   commit
1033       commit an active snapshot into the provided name
1034
1035
1036   diff
1037       get the diff of two snapshots. the default second snapshot is the first
1038       snapshot's parent.
1039
1040
1041       --keep: keep diff content. up to creator to delete it.
1042
1043
1044       --label="": labels to attach to the image
1045
1046
1047       --media-type="": media type to use for creating diff (default: applica‐
1048       tion/vnd.oci.image.layer.v1.tar+gzip)
1049
1050
1051       --ref="": content upload reference to use
1052
1053
1054   info
1055       get info about a snapshot
1056
1057
1058   list, ls
1059       list snapshots
1060
1061
1062   mounts, m, mount
1063       mount gets mount commands for the snapshots
1064
1065
1066   prepare
1067       prepare a snapshot from a committed snapshot
1068
1069
1070       --mounts: Print out snapshot mounts as JSON
1071
1072
1073       --target, -t="": mount target path, will print mount, if provided
1074
1075
1076   delete, del, remove, rm
1077       remove snapshots
1078
1079
1080   label
1081       add labels to content
1082
1083
1084   tree
1085       display tree view of snapshot branches
1086
1087
1088   unpack
1089       unpack applies layers from a manifest to a snapshot
1090
1091
1092       --snapshotter="": snapshotter name. Empty value stands for the  default
1093       value.
1094
1095
1096   usage
1097       usage snapshots
1098
1099
1100       -b: display size in bytes
1101
1102
1103   view
1104       create a read-only snapshot from a committed snapshot
1105
1106
1107       --mounts: Print out snapshot mounts as JSON
1108
1109
1110       --target, -t="": mount target path, will print mount, if provided
1111
1112

tasks, t, task

1114       manage tasks
1115
1116
1117   attach
1118       attach to the IO of a running container
1119
1120
1121   checkpoint
1122       checkpoint a container
1123
1124
1125       --exit: stop the container after the checkpoint
1126
1127
1128       --image-path="": path to criu image files
1129
1130
1131       --work-path="": path to criu work files and logs
1132
1133
1134   delete, del, remove, rm
1135       delete one or more tasks
1136
1137
1138       --exec-id="": process ID to kill
1139
1140
1141       --force, -f: force delete task process
1142
1143
1144   exec
1145       execute additional processes in an existing container
1146
1147
1148       --cwd="": working directory of the new process
1149
1150
1151       --detach, -d: detach from the task after it has started execution
1152
1153
1154       --exec-id="": exec specific id for the process
1155
1156
1157       --fifo-dir="": directory used for storing IO FIFOs
1158
1159
1160       --log-uri="": log uri for custom shim logging
1161
1162
1163       --tty, -t: allocate a TTY for the container
1164
1165
1166       --user="": user id or name
1167
1168
1169   list, ls
1170       list tasks
1171
1172
1173       --quiet, -q: print only the task id
1174
1175
1176   kill
1177       signal a container (default: SIGTERM)
1178
1179
1180       --all, -a: send signal to all processes inside the container
1181
1182
1183       --exec-id="": process ID to kill
1184
1185
1186       --signal, -s="": signal to send to the container
1187
1188
1189   pause
1190       pause an existing container
1191
1192
1193   ps
1194       list processes for container
1195
1196
1197   resume
1198       resume a paused container
1199
1200
1201   start
1202       start a container that has been created
1203
1204
1205       --detach, -d: detach from the task after it has started execution
1206
1207
1208       --fifo-dir="": directory used for storing IO FIFOs
1209
1210
1211       --log-uri="": log uri
1212
1213
1214       --null-io: send all IO to /dev/null
1215
1216
1217       --pid-file="": file path to write the task's pid
1218
1219
1220   metrics, metric
1221       get  a  single data point of metrics for a task with the built-in Linux
1222       runtime
1223
1224
1225       --format="": "table" or "json" (default: table)
1226
1227

install

1229       install a new package
1230
1231
1232       --libs, -l: install libs from the image
1233
1234
1235       --path="": set an optional install path other than the managed opt  di‐
1236       rectory
1237
1238
1239       --replace, -r: replace any binaries or libs in the opt directory
1240
1241

oci

1243       OCI tools
1244
1245
1246   spec
1247       see the output of the default OCI spec
1248
1249

shim

1251       interact with a shim directly
1252
1253
1254       --id="": container id
1255
1256
1257   delete
1258       delete a container with a task
1259
1260
1261   exec
1262       exec a new process in the task's container
1263
1264
1265       --attach, -a: stay attached to the container and open the fifos
1266
1267
1268       --cwd="": current working directory
1269
1270
1271       --env, -e="": add environment vars
1272
1273
1274       --spec="": runtime spec
1275
1276
1277       --stderr="": specify the path to the stderr fifo
1278
1279
1280       --stdin="": specify the path to the stdin fifo
1281
1282
1283       --stdout="": specify the path to the stdout fifo
1284
1285
1286       --tty, -t: enable tty support
1287
1288
1289   start
1290       start a container with a task
1291
1292
1293   state
1294       get the state of all the processes of the task
1295
1296
1297
1298                                                                      ctr(8)()
Impressum