> ## Documentation Index > Fetch the complete documentation index at: https://docs.phala.com/llms.txt > Use this file to discover all available pages before exploring further. # deploy > Deploy new CVM or update existing one ### Command: `phala deploy` #### Syntax ``` phala deploy [options] ``` #### Description Deploy new CVM or update existing one #### Options | Option | Description | | --------------------------------------- | -------------------------------------------------------------- | | `-n, --name ` | CVM name (defaults to directory name) | | `-c, --compose ` | Path to Docker Compose file (default: docker-compose.yml) | | `-t, --instance-type ` | Instance type (e.g., tdx.small, auto-selected if omitted) | | `-r, --region ` | Preferred region (e.g., us-west, auto-selected if omitted) | | `-e, --env ` | Environment variable (KEY=VALUE) or env file path (repeatable) | | `--kms ` | KMS type: phala (default), ethereum/eth, or base | | `--wait` | Wait for deployment/update completion | | `--ssh-pubkey ` | SSH public key path (default: \~/.ssh/id\_rsa.pub) | | `--dev-os, --no-dev-os` | Use dev OS image (requires SSH key) | | `--public-logs, --no-public-logs` | Make CVM logs publicly accessible (default: true) | | `--public-sysinfo, --no-public-sysinfo` | Make CVM system info publicly accessible (default: true) | | `--listed, --no-listed` | List CVM on the public Trust Center (default: false) | #### Advanced Options | Option | Description | | ----------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- | | `--debug` | Enable debug logging | | `--disk-size ` | Disk size with unit (e.g., 50G, default: 40GB) | | `--fs ` | Filesystem type (ext4 or zfs, default: zfs) | | `--image ` | OS image version (auto-selected if omitted) | | `--node-id ` | Node ID (auto-selected if omitted) | | `--custom-app-id ` | Custom App ID (requires --nonce for PHALA KMS) | | `--nonce ` | Nonce for deterministic app\_id (requires --custom-app-id, PHALA KMS only) | | `--pre-launch-script ` | Path to pre-launch script | | `--private-key ` | Private key for signing on-chain transactions (or set PRIVATE\_KEY env var) | | `--rpc-url ` | RPC URL for on-chain KMS transactions (or set ETH\_RPC\_URL env var) | | `--prepare-only` | Prepare the update and generate a commit token. Skips all on-chain operations. Intended for multisig workflows. | | `--commit` | Commit a previously prepared update using a commit token. Requires --token; --compose-hash and --transaction-hash are read from the token when omitted. | | `--token ` | Commit token from a prepare-only update. | | `--compose-hash ` | Compose hash from a prepare-only update. Optional in --commit mode when the token can provide it. | | `--transaction-hash ` | Transaction hash proving on-chain compose hash registration. Pass `already-registered` to skip the proof and rely on state-only verification. | #### Deprecated Options | Option | Description | | -------------------- | --------------------------------------------- | | `--uuid ` | \[DEPRECATED] Use --cvm-id instead. CVM UUID. | | `--vcpu ` | Use --instance-type instead | | `--memory ` | Use --instance-type instead | | `--env-file ` | Use -e instead | | `--kms-id ` | Use --kms instead | #### Global Options | Option | Description | | ------------------------------------ | --------------------------------------------------------- | | `-h, --help` | Show help information for the current command | | `-v, --version` | Show CLI version | | `--api-token TOKEN, --api-key TOKEN` | API token for authenticating with Phala Cloud | | `-j, --json, --no-json` | Output in JSON format | | `-i, --interactive` | Enable interactive mode | | `--cvm-id ` | CVM identifier (UUID, app\_id, instance\_id, or name) | | `--profile PROFILE` | Temporarily use a different auth profile for this command | | `--api-version ` | API version to use (e.g. 2025-10-28, 2026-01-21) | #### Examples * Deploy new CVM ```bash theme={"system"} phala deploy ``` * Deploy with environment variables ```bash theme={"system"} phala deploy -e NODE_ENV=production -e DEBUG=true ``` * Deploy with env file ```bash theme={"system"} phala deploy -e .env ``` * Deploy with specific instance type ```bash theme={"system"} phala deploy --instance-type tdx.medium ``` * Deploy to specific region ```bash theme={"system"} phala deploy --region us-west ``` * Deploy with Ethereum KMS ```bash theme={"system"} phala deploy --kms ethereum --private-key --rpc-url ``` * Update existing CVM by ID ```bash theme={"system"} phala deploy --cvm-id app_abc123 ``` * Update CVM with new compose file and env ```bash theme={"system"} phala deploy --cvm-id my-app --compose ./new-docker-compose.yml -e .env ``` * Update CVM and wait for completion ```bash theme={"system"} phala deploy --cvm-id app_abc123 --wait ``` * Update CVM from phala.toml ```bash theme={"system"} phala deploy ``` * Deploy with logs and sysinfo disabled ```bash theme={"system"} phala deploy --no-public-logs --no-public-sysinfo ``` * Deploy and list on Trust Center ```bash theme={"system"} phala deploy --listed ``` * Update existing CVM to disable logs ```bash theme={"system"} phala deploy --cvm-id app_123 --no-public-logs ``` * Prepare update for multisig approval ```bash theme={"system"} phala deploy --cvm-id app_123 --prepare-only -c docker-compose.yml ``` * Commit a prepared update ```bash theme={"system"} phala deploy --cvm-id app_123 --commit --token --compose-hash 0x... --transaction-hash 0x... ```