CLI: Up
The up command deploys a Docker Compose stack with automatic secret injection. It's the primary entrypoint for both Local Mode and Cloud Mode operations.
Usage
docker dso up [flags]Description
Running up will:
- Detect Mode: Automatically identifies whether to use Local Mode (encrypted vault) or Cloud Mode (external provider)
- Resolve Secrets: Fetches secrets from the configured source
- Inject Secrets: Streams secrets directly into memory-backed filesystems (tmpfs) — zero persistence to disk
- Deploy Stack: Starts Docker Compose services with secrets available in containers
Flags
| Flag | Short | Description |
|---|---|---|
--file | -f | Path to docker-compose.yaml (default: docker-compose.yaml) |
--config | -c | Path to dso.yaml (default: dso.yaml) |
--mode | - | Force mode: local or cloud |
--debug | - | Enable debug logging |
--dry-run | - | Preview changes without deploying |
--detach | -d | Run in background |
Examples
Basic deployment:
docker dso up
Detached mode:
docker dso up -d
With custom compose file:
docker dso up -f docker-compose.prod.yaml -d
Preview changes:
docker dso up --dry-run
Best Practices
- ✓Use
--dry-runbefore deployment to verify configuration - ✓Store compose files in version control but keep dso.yaml flexible
- ✓Monitor logs in real-time after deployment