localstack/sbx-kit-localstack:latest

schemaVersion: "3"
displayName: LocalStack
author: LocalStack <[email protected]>
description: LocalStack for AWS in the sandbox. lstk starts the emulator on boot. The kit also adds the LocalStack MCP server, Terraform, AWS CDK, AWS SAM CLI, and AWS CLI v2, all pointed at http://localhost:4566.
sourceUrl: https://github.com/localstack/docker-kit
version: 0.0.0
licenses:
    - Apache-2.0
kind: mixin
provides:
    - cloud.localstack/sandbox-kit
    - cloud.localstack/[email protected]
    - cloud.localstack/[email protected]
    - cloud.localstack/[email protected]
    - cloud.localstack/[email protected]
requires:
    - deb/docker-ce
capabilities:
    - type: com.docker.sandbox/network-policy@1
      config:
        runtime:
            allow:
                - api.localstack.cloud:443
                - analytics.localstack.cloud:443
                - registry-1.docker.io:443
                - auth.docker.io:443
                - index.docker.io:443
                - production.cloudflare.docker.com:443
                - production.cloudfront.docker.com:443
                - public.ecr.aws:443
                - d2glxqk2uabbnd.cloudfront.net:443
                - registry.terraform.io:443
                - releases.hashicorp.com:443
                - registry.npmjs.org:443
                - pypi.org:443
                - files.pythonhosted.org:443
                - github.com:443
                - api.github.com:443
                - codeload.github.com:443
                - objects.githubusercontent.com:443
                - raw.githubusercontent.com:443
                - wings.crawlchat.app:443
                - us.i.posthog.com:443
            deny:
                - localhost
                - 127.0.0.0/8
                - ::1/128
                - host.docker.internal
                - localhost.localstack.cloud
                - '**.localhost.localstack.cloud'
    - type: com.docker.sandbox/lifecycle@1
      config:
        files:
            - content: |
                [[containers]]
                type = "aws"
                image = "${{ kit.args.localstack_image }}"
                port = "4566"
                container_name = "localstack-main"
                env = ["sandbox"]

                [env.sandbox]
                GATEWAY_LISTEN = "0.0.0.0:4566,0.0.0.0:443"
                SKIP_SSL_CERT_DOWNLOAD = "1"
                LAMBDA_IGNORE_ARCHITECTURE = "1"

                [cli]
                check_for_update_on_startup = false
              description: lstk settings for the sandbox emulator
              mode: "0644"
              path: /home/agent/.config/lstk/config.toml
        install:
            - command: |
                grep -q proxy-bypass.sh /etc/sandbox-persistent.sh 2>/dev/null && exit 0
                echo '. /opt/localstack-kit/etc/proxy-bypass.sh' >>/etc/sandbox-persistent.sh
              description: Send LocalStack hostnames around the sandbox proxy in agent shells
              user: "0"
        startup:
            - background: true
              command: /opt/localstack-kit/bin/lskit-start
              description: Start LocalStack with lstk
              env:
                - LOCALSTACK_AUTH_TOKEN
                - LOCALSTACK_DISABLE_EVENTS
                - AWS_ENDPOINT_URL
                - DOCKER_HOST
                - LSTK_KEYRING
                - WORKSPACE_DIR
                - LSKIT_LSTK_CONFIG
                - LSKIT_IGNORE_PROJECT_CONFIG
                - LSKIT_ALLOW_ANY_IMAGE
    - type: com.docker.sandbox/long-running@1
    - type: com.docker.sandbox/agent-context@1
      config:
        contentFile: /usr/share/sandbox/kit/localstack/context.md
args:
    aws_cli_version:
        default: 2.37.4
        pattern: ^[0-9]+\.[0-9]+\.[0-9]+$
        buildArg: AWS_CLI_VERSION
    cdk_version:
        default: 2.1143.0
        pattern: ^[0-9]+\.[0-9]+\.[0-9]+$
        buildArg: CDK_VERSION
    localstack_image:
        default: localstack/localstack-pro:latest
        description: LocalStack image that lstk starts. The default is the latest release.
        pattern: ^[a-z0-9][a-z0-9./_-]*(:[A-Za-z0-9][A-Za-z0-9._-]*)?$
    lstk_version:
        default: latest
        description: lstk release to install, or latest
        pattern: ^(latest|[0-9]+\.[0-9]+\.[0-9]+)$
        buildArg: LSTK_VERSION
    mcp_server_version:
        default: latest
        description: LocalStack MCP server release to install, or latest
        pattern: ^(latest|[0-9]+\.[0-9]+\.[0-9]+)$
        buildArg: MCP_SERVER_VERSION
    node_version:
        default: 24.21.0
        pattern: ^[0-9]+\.[0-9]+\.[0-9]+$
        buildArg: NODE_VERSION
    sam_version:
        default: 1.166.2
        pattern: ^[0-9]+\.[0-9]+\.[0-9]+$
        buildArg: SAM_VERSION
    terraform_version:
        default: 1.16.4
        pattern: ^[0-9]+\.[0-9]+\.[0-9]+$
        buildArg: TERRAFORM_VERSION
    toml_parser_version:
        default: 1.9.0
        description: smol-toml release that checks the images in a project lstk config
        pattern: ^[0-9]+\.[0-9]+\.[0-9]+$
        buildArg: SMOL_TOML_VERSION