Docker

CL4

Connects to a local or remote Docker daemon, with per-environment routing (inherit, docker_context, or an explicit docker_host). Generates both Compose files and Terraform via the kreuzwerker/docker provider.

In staging and production, a container requesting privileged mode or host networking is blocked by the runtime guard unless the risk is explicitly accepted — the same rule the wizard enforces also applies to hand-edited HCL.

Terraform's cpus field must be a bare HCL number, never a quoted string — the provider panics on the string form.
Staging and production hard-block privileged containers, host networking, and bind mounts to sensitive paths like /proc or the Docker socket, unless explicitly risk-accepted.

Capability maturity

FinOps (cost sync)
Drift detection
Day-2 operations
Brownfield import
AI copilot

A minimal real resource

resource "docker_container" "web" {
  name  = "web"
  image = docker_image.web.image_id
  cpus  = 1
}

Under the hood

backend/src/services/docker/**
backend/src/services/iac/docker/**

Ready to try it?

Start for free, no credit card.

Start for free

vSphere

Kubernetes