docker/dtr backup

Estimated reading time: 2 minutes

These are the docs for DTR version 2.3.8

To select a different version, use the selector below.

Create a backup of DTR


docker run --log-driver none -i --rm docker/dtr \
    backup [command options] > backup.tar


This command creates a tar file with the contents of the volumes used by DTR, and prints it. You can then use the ‘restore’ command to restore the data from an existing backup.


  • This command only creates backups of configurations, and image metadata. It doesn’t back up users and organizations. Users and organizations can be backed up when performing a UCP backup.

    It also doesn’t back up the Docker images stored in your registry. You should implement a separate backup policy for the Docker images stored in your registry, taking in consideration whether your DTR installation is configured to store images on the filesystem or using a cloud provider.

  • This backup contains sensitive information and should be stored securely.


Option Environment Variable Description
--debug $DEBUG Enable debug mode for additional logs.
--enzi-ca $ENZI_TLS_CA Use a PEM-encoded TLS CA certificate for Enzi.
--enzi-insecure-tls $ENZI_TLS_INSECURE Disable TLS verification for Enzi.
--existing-replica-id $DTR_REPLICA_ID The ID of an existing DTR replica. To safely remove a DTR replica from the cluster, the remove command needs to notify a healthy replica about the replica that’s about to be removed.
--help-extended $DTR_EXTENDED_HELP Display extended help text for a given command.
--ucp-ca $UCP_CA Use a PEM-encoded TLS CA certificate for UCP. Download the UCP TLS CA certificate from https:// /ca, and use --ucp-ca "$(cat ca.pem)".
--ucp-insecure-tls $UCP_INSECURE_TLS Disable TLS verification for UCP. The installation uses TLS but always trusts the TLS certificate used by UCP, which can lead to man-in-the-middle attacks. For production deployments, use --ucp-ca “$(cat ca.pem)” instead.
--ucp-password $UCP_PASSWORD The UCP administrator password.
--ucp-url $UCP_URL The UCP URL including domain and port.
--ucp-username $UCP_USERNAME The UCP administrator username.
dtr, cli, backup