OpenTofu

What OpenTofu is

OpenTofu is a free infrastructure as code tool for defining cloud and on-premises resources in human-readable configuration files. Users write configuration, generate an execution plan, then apply approved changes in dependency order. Providers connect it to cloud platforms, SaaS services, and APIs; listed examples include AWS, Azure, Google Cloud Platform, Kubernetes, Helm, GitHub, Splunk, and Datadog. Reusable modules and a public registry support configurable collections of infrastructure. OpenTofu tracks infrastructure in a state file, builds a dependency graph, and can create or modify independent resources in parallel. Built-in client-side state encryption supports key providers such as PBKDF2, AWS KMS, GCP KMS, and OpenBao. Providers can be installed from registries, local mirrors, or caches, including for air-gapped workflows. OCI registries support modules and secondary provider installation, but are not yet the primary provider source. OpenTofu is presented as a drop-in Terraform replacement that preserves existing workflows and configurations. Official installation methods cover Linux, macOS, Windows, FreeBSD, and OCI container images. The project is maintained under the Linux Foundation as a community-driven open-source project. The OpenTofu plan is free.