marcelocorreia/terraform

marcelocorreia/terraform

Docker镜像包含Hashicorp Terraform + AWS CLI及多种实用工具，提供轻量级的Terraform运行环境。

Github地址 https://github.com/marcelocorreia/docker-terraform

包含的包

• ca-certificates
• update-ca-certificates
• curl
• unzip
• bash
• python
• py-pip
• openssh
• git
• make
• tzdata
• awscli（通过PIP安装）
• jq

基础信息

• 工作目录设置为 /opt/workspace
• Github仓库：https://github.com/marcelocorreia/docker-terraform
• 支持与Concourse CI集成

使用场景

1. 基础设施即代码（IaC）的本地开发与测试
2. CI/CD流程中执行Terraform任务（如Concourse CI管道）
3. 快速搭建标准化的Terraform运行环境

配置说明

• 挂载本地目录到容器工作区：通过-v $(pwd):/opt/workspace将当前目录挂载到容器内
• 设置时区：通过环境变量-e TZ=时区（如Australia/Sydney）配置容器时区

部署示例

基本运行命令

bash
$> docker run --rm -v $(pwd):/opt/workspace \
    marcelocorreia/terraform \
    terraform [--version] [--help] <command> [args]

设置时区示例

bash
$> docker run --rm -v $(pwd):/opt/workspace \
    -e TZ=Australia/Sydney \
    marcelocorreia/terraform \
    terraform [--version] [--help] <command> [args]

带变量的执行示例

bash
$> docker run --rm -v $(pwd):/opt/workspace \
    marcelocorreia/terraform \
    terraform $1 -var-file variables.tfvars \
    -var aws_access_key=${aws_access_key_id} \
    -var aws_secret_key=${aws_secret_access_key}

Makefile示例

makefile
# 变量定义
TF_IMAGE?=marcelocorreia/terraform:latest
VARS_FILE?=variables.tfvars

# Terraform命令封装
tf-plan:
	$(call terraform, plan)
.PHONY: tf-plan

tf-apply:
	$(call terraform, apply)
.PHONY: tf-apply

tf-destroy:
	$(call terraform, destroy)
.PHONY: tf-destroy

tf-refresh:
	$(call terraform, refresh)
.PHONY: tf-refresh

tf-show:
	$(call terraform, show)
.PHONY: tf-show

tf-shell:
	@docker run --rm -it -v $(shell pwd):/opt/workspace \
    		$(TF_IMAGE)\
    		bash
.PHONY: tf-shell

tf-state-list:
	$(call terraform, state list)
.PHONY: tf-state-list

# 更新镜像
tf-image-update:
	docker pull $(TF_IMAGE)
.PHONY: tf-image-update

# 通用Terraform执行函数
define terraform
	@docker run --rm -v $(shell pwd):/opt/workspace \
		$(TF_IMAGE)\
		terraform $1 -var-file $(VARS_FILE) \
		-var aws_access_key=${aws_access_key_id} \
		-var aws_secret_key=${aws_secret_access_key}
endef

Concourse CI管道配置示例

yaml
platform: linux

image_resource:
  type: docker-image
  source:
    repository: marcelocorreia/terraform
    tag: 'latest'

inputs:
- name: terraform-repo

run:
  path: terraform
  args: 
  - plan
  - -var-file
  - variables.tfvars