Dockerized IaC framework for Terraform and Terragrunt

Supporting amd64 and aarch64/arm64 images!

Supporting slim-latest version having only Terraform, Terragrunt and TFlint

Docker image with Terraform, Terragrunt, Go, Python, Make, Docker, Git, and all needed components to easily manage cloud infrastructure for CI/CD environments as a runner image.

Including cloud CLIs and SDKs for Amazon Web Services, Microsoft Azure, Google Cloud Platform and YandexCloud.

Best used as runner image for CI/CD in automation, as well as a local run environment.

Please note focus of those images is to maintain availability of current versions of Terraform and Terragrunt, not CLIs or other dependencies.
Hence, images are updated when new version of Terraform or Terragrunt is released. Furthermore, versioning labels of images contain versions of said software to emphasize it.

Source code is available at devops-infra/docker-terragrunt.

Dockerfile was based on two images made by cytopia: docker-terragrunt and docker-terragrunt-fmt .
Original README files are included in this repository: docker-terragrunt and docker-terragrunt-fmt . This project grew much bigger than the original ones and is intended to be a framework for cloud Infrastructure-as-a-Code.

Available source images

Tag of the image tells which version of Terraform and Terragrunt it contains and which public cloud provider CLI it's bundled with or not (see second table below).

Available flavours

Tag of the image tells also which cloud API/SDK is included in the image.

Image name	AWS	Azure	GCP	Description	Size
docker-terragrunt:slim-tf-1.7.0-tg-0.54.18	❌	❌	❌	Lightweight version with TF, TG and bare dependencies
docker-terragrunt:tf-1.7.0-tg-0.54.18	❌	❌	❌	Normal version. Having Go, Python, Make, etc.
docker-terragrunt:aws-tf-1.7.0-tg-0.54.18	✅	❌	❌	Normal version with AWS CLI.
docker-terragrunt:azure-tf-1.7.0-tg-0.54.18	❌	✅	❌	Normal version with Azure CLI.
docker-terragrunt:aws-azure-tf-1.7.0-tg-0.54.18	✅	✅	❌	Normal version with AWS and Azure CLIs.
docker-terragrunt:gcp-tf-1.7.0-tg-0.54.18	❌	❌	✅	Normal version with GCP CLI.
docker-terragrunt:aws-gcp-tf-1.7.0-tg-0.54.18	✅	❌	✅	Normal version with AWS and GCP CLIs.
docker-terragrunt:azure-gcp-tf-1.7.0-tg-0.54.18	❌	✅	✅	Normal version with Azure and GCP CLIs.
docker-terragrunt:aws-azure-gcp-tf-1.7.0-tg-0.54.18	✅	✅	✅	Normal version with AWS, Azure and GCP CLIs.
docker-terragrunt:yc-tf-1.7.0-tg-0.54.18	❌	❌	❌	Normal version with YandexCloud CLI.

Usage

• For working with local files - mount working directory under /data, e.g. --volume $(pwd):/data.
• For working with cloud providers - pass their credentials as additional file or environment variables,
  e.g. --env AWS_SESSION_TOKEN=${AWS_SESSION_TOKEN} or --volume ~/.aws/credentials:/root/.aws/credentials.
• For running other Docker images - by sharing the socket,
  e.g. --privileged --volume /var/run/docker.sock:/var/run/docker.sock.
• For configuring git - mount desired .gitconfig and/or SSH key (if needed),
  e.g. --volume ~/.gitconfig:/root/.gitconfig --volume ~/.ssh/id_rsa_github:/root/.ssh/id_rsa

Examples of .gitconfig to mount

• Use https with Personal Access Token:

[url "https://{GITHUB_TOKEN}@github.com/"]
	insteadOf = https://github.com/
[url "https://{GITHUB_TOKEN}@github.com/"]
	insteadOf = git+ssh://github.com/
[url "https://{GITHUB_TOKEN}@github.com/"]
	insteadOf = [email protected]:

• Use https instead of git/ssh:

[url "https://github.com/"]
	insteadOf = git+ssh://github.com/
[url "https://github.com/"]
	insteadOf = [email protected]:

• Use ssh instead of https:

[url "ssh://[email protected]/"]
  insteadOf = https://github.com/
[url "ssh://[email protected]/"]
	insteadOf = [email protected]:

Examples

• Format all HCL files in the current directory. Including subdirectories.

docker run --rm \
    --user $(id -u):$(id -g) \
    --volume $(pwd):/data \
    devopsinfra/docker-terragrunt:latest format-hcl

• Plan terraform deployment in AWS for files in current directory.

docker run --rm \
    --tty --interactive \
    --env AWS_DEFAULT_REGION=${AWS_DEFAULT_REGION} \
    --env AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID} \
    --env AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY} \
    --env AWS_SESSION_TOKEN=${AWS_SESSION_TOKEN} \
    --user $(id -u):$(id -g) \
    --volume $(pwd):/data \
    devopsinfra/docker-terragrunt:aws-latest terraform plan

• Apply terragrunt deployment in subdirectory. With GitHub using a ~/.gitconfig file with PAT.

docker run --rm \
    --tty --interactive \
    --user $(id -u):$(id -g) \
    --volume $(pwd):/data \
    --volume ~/.gitconfig:/root/.gitconfig \
    devopsinfra/docker-terragrunt:aws-latest terragrunt apply --terragrunt-working-dir some/module

• Run a Makefile target as orchestration script.

docker run --rm \
    --tty --interactive \
    --user $(id -u):$(id -g) \
    --volume $(pwd):/data \
    devopsinfra/docker-terragrunt:aws-latest make build

Additional software available in all images

Scripts

Binaries and Python libraries

Some are conditional, depending on the selected flavour, marked with *

Contributors ✨

Thanks goes to these wonderful people (emoji key):

Krzysztof Szyper 💻 📦 🚧

cytopia 🤔 💻

Marko Djukic 💻

Phileas Lebada 🤔

Matthew Smedberg 💻

Dmitri 🐛 💻

This project follows the all-contributors specification. Contributions of any kind welcome!