这里不再介绍Terraform是啥了，可以参考最近上线的课程。直奔主题，配置一个离线的源。
需要手动或者terraform init一次下载， 然后缓存。后续直接使用缓存。
本次实践使用的是Linux/Mac 系统，如果是windows系统有两点不同的配置。
- CLI配置文件的名称为
terraform.rc - plugin_cache_dir:
D:/xxx/xxx
1. 创建配置文件
.terraformrc是Terraform CLI的配置文件
plugin_cache_dir = "$HOME/.terraform.d/terraform-plugin-cache" disable_checkpoint = true
- plugin_cache_dir 是插件的缓存目录（此目录需要提前创建不然init报错）
- disable_checkpoint 禁用 需要连接HashiCorp 提供的网络服务的升级和安全公告检查
mkdir -p $HOME/.terraform.d/terraform-plugin-cache
文件创建好了之后， 要通过配置TF_CLI_CONFIG_FILE变量，让TerraformCLI可以加载到配置文件。这个变量的值没有固定配置，而是取决于.terraformrc文件路径。
export TF_CLI_CONFIG_FILE=$HOME/Desktop/terraform/terraform-module-example/.terrafo rmrc
2. 进行初始化
插件下载方式有两种：
- 通过
terraform init自动下载provider 插件； - 登入
registry.terraform.io手动到GitHub下载，并按照目录结构存放到plugin_cache_dir;
本次演示先使用terraform init进行操作， 如果手动到registry下载，需要按照目录结构存放；
terraform init Initializing modules... - mydns in ../../modules/dns - myecs in ../../modules/ecs - myssecgroup in ../../modules/secgroup - myvpc in ../../modules/vpc Initializing the backend... Initializing provider plugins... - Finding hashicorp/alicloud versions matching "1.164.0"... - Installing hashicorp/alicloud v1.164.0... - Installed hashicorp/alicloud v1.164.0 (signed by HashiCorp) Terraform has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that Terraform can guarantee to make the same selections by default when you run "terraform init" in the future.
初始化之后， 查看plugin_cache_dir中的内容：
$HOME/.terraform.d/terraform-plugin-cache/registry.terraform.io/hashicorp/alicloud/1.164.0/darwin_arm64
➜ .terraform.d pwd /Users/lizeyang/.terraform.d ➜ .terraform.d tree . |____checkpoint_cache |____checkpoint_signature |____terraform-plugin-cache | |____registry.terraform.io | | |____hashicorp | | | |____alicloud | | | | |____1.164.0 | | | | | |____darwin_arm64 | | | | | | |____terraform-provider-alicloud_v1.164.0
3. 模拟断网，离线初始化
方法1：初始化时指定plugin-dir
terraform init --plugin-dir $HOME/.terraform.d/terraform-plugin-cache/
terraform init --plugin-dir $HOME/.terraform.d/terraform-plugin-cache/ Initializing modules... - mydns in ../../modules/dns - myecs in ../../modules/ecs - myssecgroup in ../../modules/secgroup - myvpc in ../../modules/vpc Initializing the backend... Initializing provider plugins... - Finding hashicorp/alicloud versions matching "1.164.0"... - Using hashicorp/alicloud v1.164.0 from the shared cache directory Terraform has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that Terraform can guarantee to make the same selections by default when you run "terraform init" in the future. Terraform has been successfully initialized!
方法2：定义Terraform插件使用本地mirror
provider_installation { filesystem_mirror { path = "/Users/lizeyang/.terraform.d/terraform-plugin-cache" include = ["registry.terraform.io/*/*"] } }
➜ dev terraform init Initializing modules... Initializing the backend... Initializing provider plugins... - Finding hashicorp/alicloud versions matching "1.164.0"... - Using hashicorp/alicloud v1.164.0 from the shared cache directory Terraform has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that Terraform can guarantee to make the same selections by default when you run "terraform init" in the future. Terraform has been successfully initialized!
到此就完成了terraform离线本地源的配置了， 除了这种方式外其实也可以基于terraform开放的HTTP API协议，使用Python Flask写一个registry server。
