opentofu

OpenTofu lets you declaratively define cloud infrastructure, then build, modify, and version that infrastructure from configuration. It helps developers and teams manage infrastructure in a controlled, repeatable way instead of handling each resource manually. Developed by the OpenTofu Core Team, it is an open-source Developer Tools program for Linux under the Linux Foundation’s stewardship.

OpenTofu works with established and popular service providers as well as custom solutions created for internal use. It serves as a drop-in replacement for Terraform, retaining existing workflows and configurations, and its ecosystem includes more than 3,900 providers and 23,600 modules. The for_each feature can generate provider configurations dynamically for multi-region, multi-environment, multi-account, and cross-cloud deployments while supporting credential rotation and progressive rollouts. A single variable change can update module versions programmatically across an infrastructure project.

Client-side encryption protects state data at rest, with key-provider support for PBKDF2, AWS KMS, GCP KMS, OpenBao, and other options, including when state is held in remote backends. The current version is 1.12.6. It requires Linux with snapd and runs on x86_64 (amd64) systems.