devopsinfra/docker-terragrunt repository overview

⁠Dockerized IaC framework for Terraform, OpenTofu and Terragrunt

⁠Supporting amd64 and arm64 images!

⁠Due to excessive size of the images and upcoming Docker Hub limits, I'm are currently working on reducing it. Please use the latest versions of the images to keep up with the most active versions. Images older than 3 month will be deleted.

⁠Sources and Docker images

Source code at devops-infra/docker-terragrunt⁠.

Docker Hub images at docker.io/devopsinfra/docker-terragrunt⁠

GitHub Packages images at ghcr.io/devops-infra/docker-terragrunt/docker-terragrunt⁠

⁠Info

Alpine-based Docker image with Terraform or OpenTofu, together with Terragrunt, Go, Python, Make, Docker, Git, and all needed components to easily manage cloud infrastructure for CI/CD environments as a runner image.

Including cloud CLIs and SDKs for Amazon Web Services, Microsoft Azure, Google Cloud Platform.

Azure-enabled flavors are built on top of devops-infra/docker-azure-cli to reduce Azure CLI install time during image builds.

Best used as runner image for CI/CD in automation, as well as a consistent local run environment.

Please note focus of those images is to maintain availability of current versions of Terraform, OpenTofu and Terragrunt, not CLIs or other dependencies. Hence, images are updated when new version of Terraform, OpenTofu or Terragrunt is released. Furthermore, versioning labels of images contain versions of said software to emphasize it.

Dockerfile was based on two images made by cytopia⁠: docker-terragrunt⁠ and docker-terragrunt-fmt⁠ . Original README files are included in this repository: docker-terragrunt⁠ and docker-terragrunt-fmt⁠ . This project grew much bigger than the original ones and is intended to be a framework for cloud Infrastructure-as-a-Code.

⁠

⁠

⁠

⁠Available source images

Tag of the image tells which version of Terraform and Terragrunt it contains and which public cloud provider CLI it's bundled with or not (see second table below).

⁠Available flavors

Tag of the image tells also which cloud API/SDK is included in the image.

Image name	AWS	Azure	GCP	OT	TF	Description
docker-terragrunt:slim-tf-latest	❌	❌	❌	❌	✅	Lightweight version with TF, TG and bare dependencies.
docker-terragrunt:slim-ot-latest	❌	❌	❌	✅	❌	Lightweight version with OT, TG and bare dependencies.
docker-terragrunt:tf-latest	❌	❌	❌	❌	✅	Normal version, with TF. Having Go, Python, Make, etc.
docker-terragrunt:ot-latest	❌	❌	❌	✅	❌	Normal version, with OT. Having Go, Python, Make, etc.
docker-terragrunt:aws-tf-latest	✅	❌	❌	❌	✅	Normal version with AWS CLI, with TF.
docker-terragrunt:aws-ot-latest	✅	❌	❌	✅	❌	Normal version with AWS CLI, with OT.
docker-terragrunt:azure-tf-latest	❌	✅	❌	❌	✅	Normal version with Azure CLI, with TF.
docker-terragrunt:azure-ot-latest	❌	✅	❌	✅	❌	Normal version with Azure CLI, with OT.
docker-terragrunt:aws-azure-tf-latest	✅	✅	❌	❌	✅	Normal version with AWS and Azure CLIs, with TF.
docker-terragrunt:aws-azure-ot-latest	✅	✅	❌	✅	❌	Normal version with AWS and Azure CLIs, with OT.
docker-terragrunt:gcp-tf-latest	❌	❌	✅	❌	✅	Normal version with GCP CLI, with TF.
docker-terragrunt:gcp-ot-latest	❌	❌	✅	✅	❌	Normal version with GCP CLI, with OT.
docker-terragrunt:aws-gcp-tf-latest	✅	❌	✅	❌	✅	Normal version with AWS and GCP CLIs, with TF.
docker-terragrunt:aws-gcp-ot-latest	✅	❌	✅	✅	❌	Normal version with AWS and GCP CLIs, with OT.
docker-terragrunt:azure-gcp-tf-latest	❌	✅	✅	❌	✅	Normal version with Azure and GCP CLIs, with TF.
docker-terragrunt:azure-gcp-ot-latest	❌	✅	✅	✅	❌	Normal version with Azure and GCP CLIs, with OT.
docker-terragrunt:aws-azure-gcp-tf-latest	✅	✅	✅	❌	✅	Normal version with AWS, Azure and GCP CLIs, with TF.
docker-terragrunt:aws-azure-gcp-ot-latest	✅	✅	✅	✅	❌	Normal version with AWS, Azure and GCP CLIs, with OT.

⁠Test coverage matrix

Container-structure-tests validate both positive and negative cases for installed software. For each flavor, tests run against both image variants (-tf-... and -ot-...).

Additionally, tool-variant tests verify:

• TF image contains the exact Terraform version and does not contain OpenTofu.
• OT image contains the exact OpenTofu version and does not contain Terraform.
• Both variants validate exact Terragrunt and flavor-specific tool versions sourced from Dockerfile ARG values.

⁠Usage

• For working with local files - mount working directory under /data, e.g. --volume $(pwd):/data.
• For working with cloud providers - pass their credentials as additional file or environment variables, e.g. --env AWS_SESSION_TOKEN=${AWS_SESSION_TOKEN} or --volume ~/.aws/credentials:/root/.aws/credentials.
• For running other Docker images - by sharing the socket, e.g. --privileged --volume /var/run/docker.sock:/var/run/docker.sock.
• For configuring git - mount desired .gitconfig and/or SSH key (if needed), e.g. --volume ~/.gitconfig:/root/.gitconfig --volume ~/.ssh/id_rsa_github:/root/.ssh/id_rsa

⁠Examples of .gitconfig to mount

• Use https with Personal Access Token:

[url "https://{GITHUB_TOKEN}@github.com/"]
	insteadOf = https://github.com/
[url "https://{GITHUB_TOKEN}@github.com/"]
	insteadOf = git+ssh://github.com/
[url "https://{GITHUB_TOKEN}@github.com/"]
	insteadOf = [email protected]:

• Use https instead of git/ssh:

[url "https://github.com/"]
	insteadOf = git+ssh://github.com/
[url "https://github.com/"]
	insteadOf = [email protected]:

• Use ssh instead of https:

[url "ssh://[email protected]/"]
  insteadOf = https://github.com/
[url "ssh://[email protected]/"]
	insteadOf = [email protected]:

⁠Examples

• Format all HCL files in the current directory. Including subdirectories.

docker run --rm \
    --user $(id -u):$(id -g) \
    --volume $(pwd):/data \
    devopsinfra/docker-terragrunt:latest format-hcl

• Plan terraform deployment in AWS for files in current directory.

docker run --rm \
    --tty --interactive \
    --env AWS_DEFAULT_REGION=${AWS_DEFAULT_REGION} \
    --env AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID} \
    --env AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY} \
    --env AWS_SESSION_TOKEN=${AWS_SESSION_TOKEN} \
    --user $(id -u):$(id -g) \
    --volume $(pwd):/data \
    devopsinfra/docker-terragrunt:aws-latest terraform plan

• Apply terragrunt deployment in subdirectory. With GitHub using a ~/.gitconfig file with PAT.

docker run --rm \
    --tty --interactive \
    --user $(id -u):$(id -g) \
    --volume $(pwd):/data \
    --volume ~/.gitconfig:/root/.gitconfig \
    devopsinfra/docker-terragrunt:aws-latest terragrunt apply --terragrunt-working-dir some/module

• Run a Makefile target as orchestration script.

docker run --rm \
    --tty --interactive \
    --user $(id -u):$(id -g) \
    --volume $(pwd):/data \
    devopsinfra/docker-terragrunt:latest make build

⁠Additional software available in all images

⁠Scripts

⁠Binaries and Python libraries