container-opentofu

The estate's OpenTofu/Terragrunt image for terraform-* CI, built on each container-base distro image. Published as artifactapi.k8s.syd1.au.unkin.net/docker-internal/opentofu:<version>-<suffix>; the default distro's build is retagged as the unsuffixed :<version>, so both resolve to one digest. Only explicit versions are published; never a floating tag.

distro from tag suffix default
alma9 docker-internal/almalinux9:<base version> alma9 yes

Adds opentofu, terragrunt, tflint and the vault CLI on top of the base image's make, git, jq and uv/uvx. Versions come from the estate dnf repos.

The container-base release this image builds on is BASE_VERSION in the Dockerfile.

Adding a distro

  1. distros/<name>/distro.env — BASE_IMAGE_NAME, IMAGE, TAG_SUFFIX, DEFAULT, PACKAGES.
  2. One include entry in each of .woodpecker/{build,docker}.yaml.

The check-distros pre-commit hook fails if step 1 or 2 is incomplete, or if more than one distro claims DEFAULT.

Make

make build          # build every distro
make pre-commit     # uvx pre-commit run --all-files
make build-alma9    # one distro
make patch|minor|major
S
Description
OpenTofu/Terragrunt runner container image, built on container-base, used by Woodpecker pipelines in terraform-* repos.
Readme 34 KiB
Languages
Shell 45%
Makefile 38.6%
Dockerfile 16.4%