diff --git a/.github/workflows/ci-master-pr.yml b/.github/workflows/ci-master-pr.yml
index b5b799c..23154f4 100644
--- a/.github/workflows/ci-master-pr.yml
+++ b/.github/workflows/ci-master-pr.yml
@@ -33,7 +33,7 @@ jobs:
       run: |
         git diff --exit-code
 
-  build-1-9-6:
+  build-1-9-7:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
@@ -64,9 +64,9 @@ jobs:
       uses: actions/cache@v4
       with:
         path: /tmp/.buildx-cache
-        key: ${{ runner.os }}-buildx-1.9.6-${{ github.sha }}
+        key: ${{ runner.os }}-buildx-1.9.7-${{ github.sha }}
         restore-keys: |
-          ${{ runner.os }}-buildx-1.9.6-
+          ${{ runner.os }}-buildx-1.9.7-
           ${{ runner.os }}-buildx-
 
     - name: Login to Docker Hub registry
@@ -79,7 +79,7 @@ jobs:
 
     # This step generates the docker tags
     - name: Prepare
-      id: prep-1-9-6
+      id: prep-1-9-7
       run: |
         set -e
 
@@ -92,7 +92,7 @@ jobs:
         # Generate docker image tags
         # E.g. 'v0.0.0-<variant>' and 'v0.0.0-abc0123-<variant>'
         # E.g. 'master-<variant>' and 'master-abc0123-<variant>'
-        VARIANT="1.9.6"
+        VARIANT="1.9.7"
         REF_VARIANT="${REF}-${VARIANT}"
         REF_SHA_VARIANT="${REF}-${SHA}-${VARIANT}"
 
@@ -102,52 +102,52 @@ jobs:
         echo "REF_VARIANT=$REF_VARIANT" >> $GITHUB_OUTPUT
         echo "REF_SHA_VARIANT=$REF_SHA_VARIANT" >> $GITHUB_OUTPUT
 
-    - name: 1.9.6 - Build (PRs)
+    - name: 1.9.7 - Build (PRs)
       # Run only on pull requests
       if: github.event_name == 'pull_request'
       uses: docker/build-push-action@v5
       with:
-        context: variants/1.9.6
+        context: variants/1.9.7
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64
         push: false
         tags: |
-          ${{ github.repository }}:${{ steps.prep-1-9-6.outputs.REF_VARIANT }}
-          ${{ github.repository }}:${{ steps.prep-1-9-6.outputs.REF_SHA_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7.outputs.REF_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7.outputs.REF_SHA_VARIANT }}
         cache-from: type=local,src=/tmp/.buildx-cache
         cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max
 
-    - name: 1.9.6 - Build and push (master)
+    - name: 1.9.7 - Build and push (master)
       # Run only on master
       if: github.ref == 'refs/heads/master'
       uses: docker/build-push-action@v5
       with:
-        context: variants/1.9.6
+        context: variants/1.9.7
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64
         push: true
         tags: |
-          ${{ github.repository }}:${{ steps.prep-1-9-6.outputs.REF_VARIANT }}
-          ${{ github.repository }}:${{ steps.prep-1-9-6.outputs.REF_SHA_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7.outputs.REF_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7.outputs.REF_SHA_VARIANT }}
         cache-from: type=local,src=/tmp/.buildx-cache
         cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max
 
-    - name: 1.9.6 - Build and push (release)
+    - name: 1.9.7 - Build and push (release)
       if: startsWith(github.ref, 'refs/tags/')
       uses: docker/build-push-action@v5
       with:
-        context: variants/1.9.6
+        context: variants/1.9.7
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64
         push: true
         tags: |
-          ${{ github.repository }}:${{ steps.prep-1-9-6.outputs.VARIANT }}
-          ${{ github.repository }}:${{ steps.prep-1-9-6.outputs.REF_VARIANT }}
-          ${{ github.repository }}:${{ steps.prep-1-9-6.outputs.REF_SHA_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7.outputs.VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7.outputs.REF_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7.outputs.REF_SHA_VARIANT }}
           ${{ github.repository }}:latest
         cache-from: type=local,src=/tmp/.buildx-cache
         cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max
 
     # This step generates the docker tags
     - name: Prepare
-      id: prep-1-9-6-jq-sops-ssh
+      id: prep-1-9-7-jq-sops-ssh
       run: |
         set -e
 
@@ -160,7 +160,7 @@ jobs:
         # Generate docker image tags
         # E.g. 'v0.0.0-<variant>' and 'v0.0.0-abc0123-<variant>'
         # E.g. 'master-<variant>' and 'master-abc0123-<variant>'
-        VARIANT="1.9.6-jq-sops-ssh"
+        VARIANT="1.9.7-jq-sops-ssh"
         REF_VARIANT="${REF}-${VARIANT}"
         REF_SHA_VARIANT="${REF}-${SHA}-${VARIANT}"
 
@@ -170,51 +170,51 @@ jobs:
         echo "REF_VARIANT=$REF_VARIANT" >> $GITHUB_OUTPUT
         echo "REF_SHA_VARIANT=$REF_SHA_VARIANT" >> $GITHUB_OUTPUT
 
-    - name: 1.9.6-jq-sops-ssh - Build (PRs)
+    - name: 1.9.7-jq-sops-ssh - Build (PRs)
       # Run only on pull requests
       if: github.event_name == 'pull_request'
       uses: docker/build-push-action@v5
       with:
-        context: variants/1.9.6-jq-sops-ssh
+        context: variants/1.9.7-jq-sops-ssh
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64
         push: false
         tags: |
-          ${{ github.repository }}:${{ steps.prep-1-9-6-jq-sops-ssh.outputs.REF_VARIANT }}
-          ${{ github.repository }}:${{ steps.prep-1-9-6-jq-sops-ssh.outputs.REF_SHA_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7-jq-sops-ssh.outputs.REF_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7-jq-sops-ssh.outputs.REF_SHA_VARIANT }}
         cache-from: type=local,src=/tmp/.buildx-cache
         cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max
 
-    - name: 1.9.6-jq-sops-ssh - Build and push (master)
+    - name: 1.9.7-jq-sops-ssh - Build and push (master)
       # Run only on master
       if: github.ref == 'refs/heads/master'
       uses: docker/build-push-action@v5
       with:
-        context: variants/1.9.6-jq-sops-ssh
+        context: variants/1.9.7-jq-sops-ssh
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64
         push: true
         tags: |
-          ${{ github.repository }}:${{ steps.prep-1-9-6-jq-sops-ssh.outputs.REF_VARIANT }}
-          ${{ github.repository }}:${{ steps.prep-1-9-6-jq-sops-ssh.outputs.REF_SHA_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7-jq-sops-ssh.outputs.REF_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7-jq-sops-ssh.outputs.REF_SHA_VARIANT }}
         cache-from: type=local,src=/tmp/.buildx-cache
         cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max
 
-    - name: 1.9.6-jq-sops-ssh - Build and push (release)
+    - name: 1.9.7-jq-sops-ssh - Build and push (release)
       if: startsWith(github.ref, 'refs/tags/')
       uses: docker/build-push-action@v5
       with:
-        context: variants/1.9.6-jq-sops-ssh
+        context: variants/1.9.7-jq-sops-ssh
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64
         push: true
         tags: |
-          ${{ github.repository }}:${{ steps.prep-1-9-6-jq-sops-ssh.outputs.VARIANT }}
-          ${{ github.repository }}:${{ steps.prep-1-9-6-jq-sops-ssh.outputs.REF_VARIANT }}
-          ${{ github.repository }}:${{ steps.prep-1-9-6-jq-sops-ssh.outputs.REF_SHA_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7-jq-sops-ssh.outputs.VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7-jq-sops-ssh.outputs.REF_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7-jq-sops-ssh.outputs.REF_SHA_VARIANT }}
         cache-from: type=local,src=/tmp/.buildx-cache
         cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max
 
     # This step generates the docker tags
     - name: Prepare
-      id: prep-1-9-6-jq-libvirt-sops-ssh
+      id: prep-1-9-7-jq-libvirt-sops-ssh
       run: |
         set -e
 
@@ -227,7 +227,7 @@ jobs:
         # Generate docker image tags
         # E.g. 'v0.0.0-<variant>' and 'v0.0.0-abc0123-<variant>'
         # E.g. 'master-<variant>' and 'master-abc0123-<variant>'
-        VARIANT="1.9.6-jq-libvirt-sops-ssh"
+        VARIANT="1.9.7-jq-libvirt-sops-ssh"
         REF_VARIANT="${REF}-${VARIANT}"
         REF_SHA_VARIANT="${REF}-${SHA}-${VARIANT}"
 
@@ -237,45 +237,45 @@ jobs:
         echo "REF_VARIANT=$REF_VARIANT" >> $GITHUB_OUTPUT
         echo "REF_SHA_VARIANT=$REF_SHA_VARIANT" >> $GITHUB_OUTPUT
 
-    - name: 1.9.6-jq-libvirt-sops-ssh - Build (PRs)
+    - name: 1.9.7-jq-libvirt-sops-ssh - Build (PRs)
       # Run only on pull requests
       if: github.event_name == 'pull_request'
       uses: docker/build-push-action@v5
       with:
-        context: variants/1.9.6-jq-libvirt-sops-ssh
+        context: variants/1.9.7-jq-libvirt-sops-ssh
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64
         push: false
         tags: |
-          ${{ github.repository }}:${{ steps.prep-1-9-6-jq-libvirt-sops-ssh.outputs.REF_VARIANT }}
-          ${{ github.repository }}:${{ steps.prep-1-9-6-jq-libvirt-sops-ssh.outputs.REF_SHA_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7-jq-libvirt-sops-ssh.outputs.REF_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7-jq-libvirt-sops-ssh.outputs.REF_SHA_VARIANT }}
         cache-from: type=local,src=/tmp/.buildx-cache
         cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max
 
-    - name: 1.9.6-jq-libvirt-sops-ssh - Build and push (master)
+    - name: 1.9.7-jq-libvirt-sops-ssh - Build and push (master)
       # Run only on master
       if: github.ref == 'refs/heads/master'
       uses: docker/build-push-action@v5
       with:
-        context: variants/1.9.6-jq-libvirt-sops-ssh
+        context: variants/1.9.7-jq-libvirt-sops-ssh
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64
         push: true
         tags: |
-          ${{ github.repository }}:${{ steps.prep-1-9-6-jq-libvirt-sops-ssh.outputs.REF_VARIANT }}
-          ${{ github.repository }}:${{ steps.prep-1-9-6-jq-libvirt-sops-ssh.outputs.REF_SHA_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7-jq-libvirt-sops-ssh.outputs.REF_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7-jq-libvirt-sops-ssh.outputs.REF_SHA_VARIANT }}
         cache-from: type=local,src=/tmp/.buildx-cache
         cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max
 
-    - name: 1.9.6-jq-libvirt-sops-ssh - Build and push (release)
+    - name: 1.9.7-jq-libvirt-sops-ssh - Build and push (release)
       if: startsWith(github.ref, 'refs/tags/')
       uses: docker/build-push-action@v5
       with:
-        context: variants/1.9.6-jq-libvirt-sops-ssh
+        context: variants/1.9.7-jq-libvirt-sops-ssh
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64
         push: true
         tags: |
-          ${{ github.repository }}:${{ steps.prep-1-9-6-jq-libvirt-sops-ssh.outputs.VARIANT }}
-          ${{ github.repository }}:${{ steps.prep-1-9-6-jq-libvirt-sops-ssh.outputs.REF_VARIANT }}
-          ${{ github.repository }}:${{ steps.prep-1-9-6-jq-libvirt-sops-ssh.outputs.REF_SHA_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7-jq-libvirt-sops-ssh.outputs.VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7-jq-libvirt-sops-ssh.outputs.REF_VARIANT }}
+          ${{ github.repository }}:${{ steps.prep-1-9-7-jq-libvirt-sops-ssh.outputs.REF_SHA_VARIANT }}
         cache-from: type=local,src=/tmp/.buildx-cache
         cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max
 
@@ -4590,7 +4590,7 @@ jobs:
 
   update-draft-release:
     needs:
-      - build-1-9-6
+      - build-1-9-7
       - build-1-8-5
       - build-1-7-5
       - build-1-6-6
@@ -4621,7 +4621,7 @@ jobs:
 
   publish-draft-release:
     needs:
-      - build-1-9-6
+      - build-1-9-7
       - build-1-8-5
       - build-1-7-5
       - build-1-6-6
@@ -4654,7 +4654,7 @@ jobs:
 
   update-dockerhub-description:
     needs:
-      - build-1-9-6
+      - build-1-9-7
       - build-1-8-5
       - build-1-7-5
       - build-1-6-6
diff --git a/README.md b/README.md
index fc02a24..a21aaf5 100644
--- a/README.md
+++ b/README.md
@@ -12,9 +12,9 @@ The base image is `alpine`. The image is not the closed-source [`hashicorp/terra
 
 | Tag | Dockerfile Build Context |
 |:-------:|:---------:|
-| `:1.9.6`, `:latest` | [View](variants/1.9.6) |
-| `:1.9.6-jq-sops-ssh` | [View](variants/1.9.6-jq-sops-ssh) |
-| `:1.9.6-jq-libvirt-sops-ssh` | [View](variants/1.9.6-jq-libvirt-sops-ssh) |
+| `:1.9.7`, `:latest` | [View](variants/1.9.7) |
+| `:1.9.7-jq-sops-ssh` | [View](variants/1.9.7-jq-sops-ssh) |
+| `:1.9.7-jq-libvirt-sops-ssh` | [View](variants/1.9.7-jq-libvirt-sops-ssh) |
 | `:1.8.5` | [View](variants/1.8.5) |
 | `:1.8.5-jq-sops-ssh` | [View](variants/1.8.5-jq-sops-ssh) |
 | `:1.8.5-jq-libvirt-sops-ssh` | [View](variants/1.8.5-jq-libvirt-sops-ssh) |
diff --git a/generate/definitions/versions.json b/generate/definitions/versions.json
index 5209736..659d7c0 100644
--- a/generate/definitions/versions.json
+++ b/generate/definitions/versions.json
@@ -1,7 +1,7 @@
 {
   "terraform": {
     "versions": [
-      "1.9.6",
+      "1.9.7",
       "1.8.5",
       "1.7.5",
       "1.6.6",
diff --git a/variants/1.9.7-jq-libvirt-sops-ssh/Dockerfile b/variants/1.9.7-jq-libvirt-sops-ssh/Dockerfile
new file mode 100644
index 0000000..504a3bb
--- /dev/null
+++ b/variants/1.9.7-jq-libvirt-sops-ssh/Dockerfile
@@ -0,0 +1,63 @@
+FROM alpine:3.17
+ARG TARGETPLATFORM
+ARG BUILDPLATFORM
+RUN echo "I am running on $BUILDPLATFORM, building for $TARGETPLATFORM"
+# Install terraform
+RUN set -eux; \
+    TERRAFORM_VERSION=1.9.7; \
+    case "$( uname -m )" in \
+        'x86') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_386.zip"; \
+            SHA256=ef13210f44ef4497cfae3d2226162ebd1078c383a8d0a22126c6862a4cf54b2f; \
+            ;; \
+        'x86_64') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_amd64.zip"; \
+            SHA256=76a77ed7e785ef354b7f565abaa990e3e7b5232d3ec4afb87e0f5a413fcbdad1; \
+            ;; \
+        'armhf') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_arm.zip"; \
+            SHA256=14f0a10f9fed64a22581c32b7e0ad675065f8470f32cef6d5be29c29928dcd3b; \
+            ;; \
+        'armv7l') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_arm.zip"; \
+            SHA256=14f0a10f9fed64a22581c32b7e0ad675065f8470f32cef6d5be29c29928dcd3b; \
+            ;; \
+        'aarch64') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_arm64.zip"; \
+            SHA256=8fc6f1172ff026abc4f0c399996fa454e605bfc1df6793af82d922a66b5c41f8; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=terraform.zip; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    unzip "$FILE" terraform; \
+    mkdir -pv /usr/local/bin; \
+    mv -v terraform /usr/local/bin/terraform; \
+    chmod +x /usr/local/bin/terraform; \
+    CHECKPOINT_DISABLE=1 terraform version; \
+    :
+
+RUN apk add --no-cache ca-certificates
+
+RUN apk add --no-cache jq
+
+RUN apk add --no-cache libvirt-client
+
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.3/sops-v3.7.3.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^53aec65e45f62a769ff24b7e5384f0c82d62668dd96ed56685f649da114b4dbb '; \
+    sops --version
+
+RUN apk add --no-cache gnupg
+
+RUN apk add --no-cache openssh-client sshpass
+
+# Disable telemetry. See: https://developer.hashicorp.com/terraform/cli/commands#upgrade-and-security-bulletin-checks
+ENV CHECKPOINT_DISABLE=1
+
+CMD [ "terraform" ]
diff --git a/variants/1.9.7-jq-sops-ssh/Dockerfile b/variants/1.9.7-jq-sops-ssh/Dockerfile
new file mode 100644
index 0000000..cf29144
--- /dev/null
+++ b/variants/1.9.7-jq-sops-ssh/Dockerfile
@@ -0,0 +1,61 @@
+FROM alpine:3.17
+ARG TARGETPLATFORM
+ARG BUILDPLATFORM
+RUN echo "I am running on $BUILDPLATFORM, building for $TARGETPLATFORM"
+# Install terraform
+RUN set -eux; \
+    TERRAFORM_VERSION=1.9.7; \
+    case "$( uname -m )" in \
+        'x86') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_386.zip"; \
+            SHA256=ef13210f44ef4497cfae3d2226162ebd1078c383a8d0a22126c6862a4cf54b2f; \
+            ;; \
+        'x86_64') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_amd64.zip"; \
+            SHA256=76a77ed7e785ef354b7f565abaa990e3e7b5232d3ec4afb87e0f5a413fcbdad1; \
+            ;; \
+        'armhf') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_arm.zip"; \
+            SHA256=14f0a10f9fed64a22581c32b7e0ad675065f8470f32cef6d5be29c29928dcd3b; \
+            ;; \
+        'armv7l') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_arm.zip"; \
+            SHA256=14f0a10f9fed64a22581c32b7e0ad675065f8470f32cef6d5be29c29928dcd3b; \
+            ;; \
+        'aarch64') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_arm64.zip"; \
+            SHA256=8fc6f1172ff026abc4f0c399996fa454e605bfc1df6793af82d922a66b5c41f8; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=terraform.zip; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    unzip "$FILE" terraform; \
+    mkdir -pv /usr/local/bin; \
+    mv -v terraform /usr/local/bin/terraform; \
+    chmod +x /usr/local/bin/terraform; \
+    CHECKPOINT_DISABLE=1 terraform version; \
+    :
+
+RUN apk add --no-cache ca-certificates
+
+RUN apk add --no-cache jq
+
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.3/sops-v3.7.3.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^53aec65e45f62a769ff24b7e5384f0c82d62668dd96ed56685f649da114b4dbb '; \
+    sops --version
+
+RUN apk add --no-cache gnupg
+
+RUN apk add --no-cache openssh-client sshpass
+
+# Disable telemetry. See: https://developer.hashicorp.com/terraform/cli/commands#upgrade-and-security-bulletin-checks
+ENV CHECKPOINT_DISABLE=1
+
+CMD [ "terraform" ]
diff --git a/variants/1.9.7/Dockerfile b/variants/1.9.7/Dockerfile
new file mode 100644
index 0000000..76c28b4
--- /dev/null
+++ b/variants/1.9.7/Dockerfile
@@ -0,0 +1,49 @@
+FROM alpine:3.17
+ARG TARGETPLATFORM
+ARG BUILDPLATFORM
+RUN echo "I am running on $BUILDPLATFORM, building for $TARGETPLATFORM"
+# Install terraform
+RUN set -eux; \
+    TERRAFORM_VERSION=1.9.7; \
+    case "$( uname -m )" in \
+        'x86') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_386.zip"; \
+            SHA256=ef13210f44ef4497cfae3d2226162ebd1078c383a8d0a22126c6862a4cf54b2f; \
+            ;; \
+        'x86_64') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_amd64.zip"; \
+            SHA256=76a77ed7e785ef354b7f565abaa990e3e7b5232d3ec4afb87e0f5a413fcbdad1; \
+            ;; \
+        'armhf') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_arm.zip"; \
+            SHA256=14f0a10f9fed64a22581c32b7e0ad675065f8470f32cef6d5be29c29928dcd3b; \
+            ;; \
+        'armv7l') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_arm.zip"; \
+            SHA256=14f0a10f9fed64a22581c32b7e0ad675065f8470f32cef6d5be29c29928dcd3b; \
+            ;; \
+        'aarch64') \
+            URL="https://releases.hashicorp.com/terraform/1.9.7/terraform_1.9.7_linux_arm64.zip"; \
+            SHA256=8fc6f1172ff026abc4f0c399996fa454e605bfc1df6793af82d922a66b5c41f8; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=terraform.zip; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    unzip "$FILE" terraform; \
+    mkdir -pv /usr/local/bin; \
+    mv -v terraform /usr/local/bin/terraform; \
+    chmod +x /usr/local/bin/terraform; \
+    CHECKPOINT_DISABLE=1 terraform version; \
+    :
+
+RUN apk add --no-cache ca-certificates
+
+# Disable telemetry. See: https://developer.hashicorp.com/terraform/cli/commands#upgrade-and-security-bulletin-checks
+ENV CHECKPOINT_DISABLE=1
+
+CMD [ "terraform" ]