You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/docker-in-docker/README.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,7 +18,7 @@ Create child containers *inside* a container, independent from the host's docker
18
18
| version | Select or enter a Docker/Moby Engine version. (Availability can vary by OS version.) | string | latest |
19
19
| moby | Install OSS Moby build instead of Docker CE | boolean | true |
20
20
| mobyBuildxVersion | Install a specific version of moby-buildx when using Moby | string | latest |
21
-
| dockerDashComposeVersion | Default version of Docker Compose (latest, v2 or none) | string |latest|
21
+
| dockerDashComposeVersion | Default version of Docker Compose (v1, v2 or none) | string |v2|
22
22
| azureDnsAutoDetection | Allow automatically setting the dockerd DNS server when the installation script detects it is running in Azure | boolean | true |
23
23
| dockerDefaultAddressPool | Define default address pools for Docker networks. e.g. base=192.168.0.0/16,size=24 | string | - |
Copy file name to clipboardExpand all lines: src/terraform/README.md
+34Lines changed: 34 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -22,17 +22,51 @@ Installs the Terraform CLI and optionally TFLint and Terragrunt. Auto-detects la
22
22
| installTFsec | Install tfsec, a tool to spot potential misconfigurations for your terraform code | boolean | false |
23
23
| installTerraformDocs | Install terraform-docs, a utility to generate documentation from Terraform modules | boolean | false |
24
24
| httpProxy | Connect to a keyserver using a proxy by configuring this option | string | - |
25
+
| customDownloadServer | Custom server URL for downloading Terraform and Sentinel packages, including protocol (e.g., https://releases.hashicorp.com). If not provided, the default HashiCorp download server (https://releases.hashicorp.com) will be used. | string | - |
25
26
26
27
## Customizations
27
28
28
29
### VS Code Extensions
29
30
30
31
-`HashiCorp.terraform`
31
32
33
+
34
+
32
35
## Licensing
33
36
34
37
On August 10, 2023, HashiCorp announced a change of license for its products, including Terraform. After ~9 years of Terraform being open source under the MPL v2 license, it was to move under a non-open source BSL v1.1 license, starting from the next (1.6) version. See https://github.com/hashicorp/terraform/blob/main/LICENSE
35
38
39
+
## Custom Download Server
40
+
41
+
The `customDownloadServer` option allows you to specify an alternative server for downloading Terraform and Sentinel packages. This is useful for organizations that maintain internal mirrors or have proxies for HashiCorp downloads.
42
+
43
+
When using this option:
44
+
- Provide the complete URL including protocol (e.g., `https://my-mirror.example.com`)
45
+
- The server should mirror the HashiCorp releases structure
When using a custom download server, be aware of the following security implications:
59
+
60
+
-**Server Verification**: Always verify that the custom server is trustworthy and maintained by your organization or a trusted entity. Using an untrusted or compromised server could lead to downloading malicious software.
61
+
62
+
-**Supply Chain Risks**: Malicious actors may attempt to distribute compromised versions of Terraform that contain backdoors, cryptominers, or other harmful code.
63
+
64
+
-**Integrity Checks**: The feature performs SHA256 checks when available, but these are only as trustworthy as the source of the checksums. If both the binaries and checksums come from a compromised server, the integrity check may pass despite the software being malicious.
65
+
66
+
-**Organizational Policy**: Ensure your custom download server adheres to your organization's security policies and implements proper access controls.
67
+
68
+
Always use the official HashiCorp download server (https://releases.hashicorp.com) unless you have a specific need for an alternative source.
69
+
36
70
## OS Support
37
71
38
72
This Feature should work on recent versions of Debian/Ubuntu-based distributions with the `apt` package manager installed.
0 commit comments