DevOps Docker & DevContainer

Overview

The nnthanh101/terraform:latest Docker image is a secure, lightweight, and production-ready environment tailored for modern CloudOps and DevOps workflows. Built on Chainguard's Wolfi Linux, this image incorporates best practices for multi-cloud, Infrastructure-as-Code (IaC), and Kubernetes ecosystem management.

Designed to meet the demands of multi-cloud environments and enterprise-grade automation, it includes tools for provisioning, configuration management, orchestration, and secrets management. The devops tag extends its functionality with Kubernetes tooling, making it ideal for hybrid-cloud operations.

Tags and Variants

Tag	Description
latest	Core DevOps tools (e.g., Terraform, Git, AWS CLI, Azure CLI, and linters like TFLint/Tfsec).
devops	Includes latest + Kubernetes ecosystem tools (kubectl, helm, kustomize, k9s) and Go.

---

Key Features

✅	Feature	Description	Relevance
✅	Security	Built on Chainguard's Wolfi Linux for minimal attack surface and compliance.	Chainguard Wolfi
✅	Multi-Cloud Management	Integrated AWS CLI, Azure CLI, and Boto3 SDK for managing multi-cloud environments.	AWS CLI Docs
✅	Kubernetes Ecosystem	Supports Kubernetes management with kubectl, Helm, and Kustomize (available in devops tag).	Kubernetes Docs
✅	Infrastructure-as-Code	Includes Terraform and linters like TFLint and Tfsec for compliance and validation.	Terraform Docs
✅	Interactive Automation	Pre-configured with Starship and Task for modern shell and task automation.	Starship Docs

---

Pre-installed Tools

Core DevOps Utilities

✅	Tool	Category	Description	Relevant URL
✅	terraform	Infrastructure-as-Code	Automate the provisioning of cloud resources.	Terraform Docs
✅	terraform-docs	Documentation	Auto-generate documentation for Terraform modules.	Terraform Docs
✅	tflint	Validation	Linter for validating Terraform configurations.	TFLint Docs
✅	tfsec	Security Analysis	Static analysis for Terraform configurations.	Tfsec Docs
✅	atlantis	Collaboration	Terraform collaboration and CI/CD integration for pull requests.	Atlantis Docs
✅	vault	Secrets Management	Manage secrets and sensitive data securely.	Vault Docs

Kubernetes Ecosystem (Available in devops Tag)

✅	Tool	Category	Description	Relevant URL
✅	kubectl	Kubernetes CLI	Command-line tool for Kubernetes cluster management.	Kubectl Docs
✅	helm	Package Manager	Manage Kubernetes applications with Helm charts.	Helm Docs
✅	kustomize	Configuration	Manage Kubernetes YAML configurations.	Kustomize Docs
✅	k9s	Kubernetes TUI	Interactive terminal UI for managing Kubernetes clusters.	K9s Docs

Cloud Management

✅	Tool	Category	Description	Relevant URL
✅	awscli	Cloud Management	Command-line tools for managing AWS resources.	AWS CLI Docs
✅	azure-cli	Cloud Management	Command-line tools for managing Azure resources.	Azure CLI Docs

---

Usage

Pull the Image

docker pull nnthanh101/terraform:latest
docker pull nnthanh101/terraform:devops

Run the Container

Using the latest Tag

docker run -it --rm nnthanh101/terraform:latest bash

Using the devops Tag

docker run -it --rm nnthanh101/terraform:devops bash

---

Extend the Image

To add custom utilities or extensions:

FROM nnthanh101/terraform:devops

COPY requirements.txt /workspace/requirements.txt
RUN pip install --no-cache-dir -r /workspace/requirements.txt

---

Improvements and Recommendations

1. Enhanced Configuration

• Secure Secrets Management: Utilize Vault with automated authentication to AWS or Azure.
• Extend Aliases:

  alias k='kubectl'
  alias tf='terraform'
  alias tfs='tfsec'

2. Efficient Multi-Cloud Operations

• Ensure integration with cloud management tools for seamless cross-cloud deployments.

---

Directory Structure

.
├── Dockerfile                ## Main Dockerfile for building the image
├── start.sh                  ## Startup script to initialize services
├── alias.sh                  ## Aliases for productivity
├── .config/
│   └── starship.toml         ## Starship shell configuration
├── Taskfile.yaml             ## Task automation script

---

Contribution

We welcome contributions to improve this image! Follow these steps:

1. Fork the repository.
2. Create a feature branch.
3. Submit a pull request with a detailed description.

---