- Home
- Infrastructure as Code Tools
- OpenTofu
OpenTofu
What it is
OpenTofu is a free infrastructure as code tool for defining cloud and on-premises resources in human-readable configuration files. Its workflow moves from writing configuration to generating an execution plan and applying approved changes in dependency order. The project presents it as a drop-in replacement for Terraform that preserves existing workflows and configurations. Providers connect it to cloud platforms, SaaS services, and APIs, with examples including AWS, Azure, Google Cloud Platform, Kubernetes, Helm, GitHub, Splunk, and Datadog.
Reusable modules and a public registry support configurable infrastructure collections. OpenTofu tracks resources in a state file and uses a dependency graph to make independent changes in parallel. Built-in client-side state encryption supports key providers such as PBKDF2, AWS KMS, GCP KMS, and OpenBao. Providers can be installed from registries, local mirrors, or caches, including for air-gapped environments. OCI registries support modules and secondary provider installation, but not primary provider installation. The project is maintained under the Linux Foundation as a community-driven open-source project.
For and against
For
- Free, open-source infrastructure as code tool.
- Supports providers for cloud platforms, SaaS, and APIs.
- Reusable modules and a public registry are available.
- Independent resource changes can run in parallel.
- Provider installation supports local mirrors and caches.
Against
- OCI registries are not yet the primary provider source.
- State tracking relies on a state file.
- Community support is directed through project channels.
The verdict
OpenTofu combines configuration-based infrastructure management with provider and module ecosystems, state tracking, and client-side encryption. Its OCI provider support remains secondary rather than primary.
Who it suits
OpenTofu suits infrastructure teams defining and managing cloud or on-premises resources through configuration. It may also fit teams that need provider and module workflows for air-gapped environments.
Plans and prices
OpenTofu
open-source infrastructure as code tool
Read 30 Sep 2026 · linuxfoundation.org
On the record
- Community support
- The project directs users to community Slack, GitHub discussions, issues, RFC discussions, and contributions.opentofu.org · read 30 Sep 2026
- Governance
- OpenTofu is hosted and maintained under the Linux Foundation as a community-driven, impartial open-source project.linuxfoundation.org · read 30 Sep 2026
- Modules
- OpenTofu supports reusable modules for configurable collections of infrastructure and provides a public registry of modules and providers.opentofu.org · read 30 Sep 2026
- OCI integration
- OpenTofu supports OCI registries for modules and as a secondary provider installation source, but not yet as the primary provider source.opentofu.org · read 30 Sep 2026
- Parallel execution
- OpenTofu builds a resource dependency graph and creates or modifies non-dependent resources in parallel.opentofu.org · read 30 Sep 2026
- Project scale
- The official website reports an ecosystem of more than 3,900 providers and 23,600 modules.opentofu.org · read 30 Sep 2026
- Provider installation
- Providers can be installed from registries, local mirrors, or caches, and OpenTofu supports workflows for air-gapped environments.opentofu.org · read 30 Sep 2026
- Providers
- Providers let OpenTofu manage cloud platforms, SaaS providers, and other APIs, with examples including AWS, Azure, GCP, Kubernetes, Helm, GitHub, Splunk, and Datadog.opentofu.org · read 30 Sep 2026
- Purpose
- OpenTofu is an infrastructure as code tool for defining cloud and on-premises resources in human-readable configuration files.opentofu.org · read 30 Sep 2026
- State encryption
- Built-in client-side state encryption supports key providers including PBKDF2, AWS KMS, GCP KMS, and OpenBao.opentofu.org · read 30 Sep 2026
- State tracking
- OpenTofu stores infrastructure state in a state file that acts as the source of truth for determining required changes.opentofu.org · read 30 Sep 2026
- Supported systems
- Official installation methods cover Linux distributions, macOS, Windows, FreeBSD, and OCI container images.opentofu.org · read 30 Sep 2026
- Terraform compatibility
- OpenTofu is presented as a drop-in replacement for Terraform that preserves existing workflows and configurations.opentofu.org · read 30 Sep 2026
- Workflow
- Its core workflow consists of writing configuration, generating an execution plan, and applying approved changes in dependency order.opentofu.org · read 30 Sep 2026
