nebius ai devlab create

--args (string)

Override container arguments. Not allowed with —template.

--async (bool)

Return immediately after starting the create operation.

--auth-token-secret (string)

MysteryBox secret selector with an AUTH_TOKEN payload key for the bearer token. Selector can be a secret name, secret ID, version ID, or SECRET_ID@VERSION_ID.

--container-command (string)

Override container entrypoint command. Not allowed with —template.

--container-port (string array)

Container port to expose (repeatable).

--disk-size (string)

Devlab disk size shared by the container and persistent workspace (e.g., 250Gi, 1Ti), default is 250Gi.

--dry-run (bool)

Validate the request without creating a Devlab.

--env (string array)

Environment variable in KEY=VALUE format (repeatable).

--env-secret (string array)

Environment variable from MysteryBox in KEY=SECRET_SELECTOR format (repeatable). SECRET_SELECTOR can be a secret name, secret ID, version ID, or SECRET_ID@VERSION_ID.

--image (string)

Container image reference in registry/path:tag or registry/path@digest format. Mutually exclusive with —template.

--inject-file (string array)

Inject a local config file into the container at LOCAL_PATH:CONTAINER_PATH (repeatable). CONTAINER_PATH must be an absolute path; the file is read-only inside the container and limited to 64 KiB.

--input (string array)

Template input field value in KEY=VALUE format (repeatable). Requires —template.

--name (string)

Devlab name.

--parent-id (string)

Parent ID (if not specified, it will be taken from the CLI profile).

--platform (string)

Platform of compute resources (e.g. gpu-h100-sxm), default is gpu-h100-sxm in eu-north1 and gpu-h200-sxm elsewhere.

--preset (string)

Preset for selected platform, default is the minimum available preset for the platform.

--primary-route-port (int)

Container port that serves the primary web UI behind the managed HTTPS route. Required without —template.

--public (bool)

Whether to assign a public IP to the Devlab runtime VM (required for the default public SSH path), default is false.

--registry-secret (string)

MysteryBox secret selector with REGISTRY_USERNAME and REGISTRY_PASSWORD payload keys. Selector can be a secret name, secret ID, version ID, or SECRET_ID@VERSION_ID.

--shm-size (string)

Size of /dev/shm (e.g., 64Mi, 1Gi), default - 16Gi for GPU platforms, 0 for CPU.

--ssh-key (string array)

Public key authorized for SSH access to the Devlab (repeatable).

--subnet-id (string)

Network subnet ID.

--template (string)

Devlab template name (e.g. jupyter) or ID (vmapptemplate-…). Mutually exclusive with —image.

--volume (string array)

Extra volume mount in SOURCE:CONTAINER_PATH[:MODE] or s3://BUCKET:/container_path[:MODE:PROFILE@SECRET_SELECTOR] format (repeatable). MODE: rw, ro (default: rw). S3 volumes require a MysteryBox secret selector. Must not overlap the workspace path.

--working-dir (string)

Working directory (absolute path). Not allowed with —template.

--workspace-path (string)

Absolute path of the persistent workspace inside the container. Defaults to /workspace without a template, or the template default when —template is set.

-h, --help (bool)

Show this message.

-p, --profile (string)

Set a profile for interacting with the cloud.

--format (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

-f, --file (string)

Input file. For ‘update’ commands automatically set —full=true.

-c, --config (string)

Provide path to config file.

--debug (bool)

Enable debug logs.

-I, --impersonate-service-account-id (string)

Impersonate into the service account and use its token for a command.

--color (bool)

Enable colored output.

--no-browser (bool)

Do not open browser automatically on auth.

--insecure (bool)

Disable transport security.

--auth-timeout (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

--per-retry-timeout (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

--retries (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

--timeout (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

--no-check-update (bool)

Suppress check for updates.

--no-progress (bool)

Suppress progress indicators and spinners.