// the find
cloudposse/geodesic
🚀 Geodesic is a DevOps Linux Toolbox in Docker
Geodesic is a Docker image that acts as a shared, version-controlled DevOps shell for teams — everyone runs the same container with the same versions of kubectl, helm, terraform/tofu, AWS CLI, and a few dozen other tools. It's meant to be used as either a base image you extend with your own Dockerfile or as a direct interactive shell replacement. Primarily targets Cloud Posse's own opinionated AWS/Kubernetes stack.
Multi-arch support (amd64 + arm64) since v2.0 means Apple Silicon users aren't left out. The profile.d layering system for shell customization is clean — you get predictable load order and easy overrides without hacking a monolithic rc file. Dropping Alpine and cutting the image to roughly half the size in v3.0 was the right call; Debian gives you a much larger package ecosystem without the glibc compatibility headaches. The 4.0 shell model where all shells are equal and the container lives until the last one exits is genuinely better than the old 'first shell is special' approach.
The image is still tightly coupled to Cloud Posse's own tooling philosophy — if you're not already in their Atmos/components/SweetOps orbit, a lot of the bundled tooling is noise you'll never touch. Image size is still non-trivial even after the 3.0 slimming; teams with strict artifact policies will find pinning and rebuilding the base image more work than they'd like. The README was auto-generated from a build harness template and it shows — marketing fluff dominates and you have to dig through docs/ to find actually useful configuration details. There's no clear story for secrets injection beyond 'use chamber or mount your own'; the SSH config and AWS profile wiring requires reading several scattered profile.d scripts to understand.