diff --git a/cloud/cloud.Dockerfile b/cloud/cloud.Dockerfile
index 6c2599e2..b7be294c 100644
--- a/cloud/cloud.Dockerfile
+++ b/cloud/cloud.Dockerfile
@@ -10,8 +10,10 @@ FROM bellsoft/liberica-openjre-debian:11.0.19-7 as arm64
 FROM ${TARGETARCH}
 
 COPY --from=hashicorp/terraform:1.9.1 /bin/terraform /usr/local/bin/
+COPY --from=im2nguyen/rover:v0.3.3 /bin/rover /usr/local/bin/
 COPY --from=amazon/aws-cli:2.17.9 /usr/local /usr/local
 COPY --from=amazon/aws-cli:2.17.9 /aws /aws
+
 # TODO(#3222): Add Azure CLI and make sure It works with arm64.
 
 RUN /bin/sh -c set -o pipefail && apt-get update && \
diff --git a/cloud/shared/bin/rover.py b/cloud/shared/bin/rover.py
new file mode 100644
index 00000000..2b6ac4ad
--- /dev/null
+++ b/cloud/shared/bin/rover.py
@@ -0,0 +1,19 @@
+"""
+Run rover.
+"""
+
+import subprocess
+from typing import List
+from cloud.shared.bin.lib.config_loader import ConfigLoader
+
+
+def run(config: ConfigLoader, params: List[str]):
+    td = config.get_template_dir()
+    subprocess.check_call(
+        [
+            "rover",
+            f"-workingDir=/{td}",
+            f"-tfVarsFile=/{td}/{config.tfvars_filename}",
+            f"-tfBackendConfig=/{td}/{config.backend_vars_filename}",
+        ]
+    )