# Install opentofu Drop-in replacement for Terraform. Infrastructure as Code Tool. Version 1.12.1 via Homebrew; verified 2026-05-27. ## Install ```sh sudo av install brew:opentofu ``` ## Agent safety answer opentofu plans and applies infrastructure changes from local state and cloud credentials. - **Credential access:** Reads backend credentials, provider credentials, variables, and state data. - **Remote mutation:** Can create, update, or destroy infrastructure resources. - **Publish/artifact risk:** Can deploy infrastructure that exposes or runs application artifacts. - **Recommended control:** Gate apply, destroy, import, state, and backend changes. - **Agent-use guidance:** Allow plan by default; require approval for any state-changing command. Additional install commands: ### macOS - Homebrew (100%): ```sh brew install opentofu ``` Evidence: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add opentofu ``` Evidence: Alpine Linux edge package indexes: opentofu from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - dnf (92%): ```sh sudo dnf install opentofu ``` Evidence: Fedora Rawhide package metadata: opentofu from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#opentofu ``` Evidence: nixpkgs package indexes: pkgs/by-name/op/opentofu/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S opentofu ``` Evidence: Arch Linux sync databases: opentofu from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install opentofu ``` Evidence: openSUSE Tumbleweed package metadata: opentofu from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install opentofu ``` Evidence: Chocolatey community package catalog: opentofu from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='7.7228','wwphone-cti' - Scoop (92%): ```sh scoop install main/opentofu ``` Evidence: Scoop official bucket manifest trees: bucket/opentofu.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id OpenTofu.Tofu -e ``` Evidence: Windows Package Manager source index: OpenTofu.Tofu from https://cdn.winget.microsoft.com/cache/source.msix ## Package Facts - **Package key:** brew:opentofu - **Package manager:** Homebrew - **Package manager URL:** - **Version:** 1.12.1 - **Source summary:** Drop-in replacement for Terraform. Infrastructure as Code Tool - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MPL-2.0 - **Source archive:** - **Last updated:** 2026-05-27T10:05:43Z - **Generated:** 2026-06-10T07:18:26+00:00 ## Executables - tofu (cli) - tofu (alias) ## Build Dependencies - go ## Install Behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-06-10 - Package-manager version: 1.12.1 - Package-manager updated: 2026-05-27 - Local data status: ok - Upstream repository: https://github.com/opentofu/opentofu - Upstream latest detected: v1.12.1 (current) ## Notes de sécurité infrastructure as code tool. - **Protected-tool coverage:** Plain Text OpenTofu Cloud Tokens - **Geiger risk:** orange / high - infrastructure as code tool ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** opentofu - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Conflicts With:** tenv, tofuenv - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - opentofu: normalized package name match | nixpkgs package indexes: pkgs/by-name/op/opentofu/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - apk - opentofu - 1.11.5-r3: normalized package name match | Alpine Linux edge package indexes: opentofu from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | OpenTofu lets you declaratively manage your cloud infrastructure | https://opentofu.org/ - dnf - opentofu - 1.12.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: opentofu from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | OpenTofu lets you declaratively manage your cloud infrastructure | https://github.com/opentofu/opentofu - pacman - opentofu - 1.11.6-1: normalized package name match | Arch Linux sync databases: opentofu from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Lets you declaratively manage your cloud infrastructure | https://github.com/opentofu/opentofu - zypper - opentofu - 1.12.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: opentofu from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | Declaratively manage your cloud infrastructure | https://github.com/opentofu/opentofu - Chocolatey - opentofu: normalized package name match | Chocolatey community package catalog: opentofu from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='7.7228','wwphone-cti' - Scoop - main/opentofu: normalized package name match | Scoop official bucket manifest trees: bucket/opentofu.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget - OpenTofu.Tofu: normalized package name match | Windows Package Manager source index: OpenTofu.Tofu from https://cdn.winget.microsoft.com/cache/source.msix - winget - OpenTofu.Tofu.Alpha: normalized package name match | Windows Package Manager source index: OpenTofu.Tofu.Alpha from https://cdn.winget.microsoft.com/cache/source.msix - winget - OpenTofu.Tofu.Beta: normalized package name match | Windows Package Manager source index: OpenTofu.Tofu.Beta from https://cdn.winget.microsoft.com/cache/source.msix - winget - OpenTofu.Tofu.RC: normalized package name match | Windows Package Manager source index: OpenTofu.Tofu.RC from https://cdn.winget.microsoft.com/cache/source.msix ## Related Links - [Cloud CLI packages](https://www.automicvault.com/fr/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Secret-risk packages](https://www.automicvault.com/fr/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/fr/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://www.automicvault.com/fr/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [go](https://www.automicvault.com/fr/pkg/brew/go/) - Build dependency declared by Homebrew. - [pulumi](https://www.automicvault.com/fr/pkg/brew/pulumi/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code. - [cdk8s](https://www.automicvault.com/fr/pkg/brew/cdk8s/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code. - [rain](https://www.automicvault.com/fr/pkg/brew/rain/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code. - [terraformer](https://www.automicvault.com/fr/pkg/brew/terraformer/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code. - [terraform-local](https://www.automicvault.com/fr/pkg/brew/terraform-local/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code. - [cdktf](https://www.automicvault.com/fr/pkg/brew/cdktf/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code. - [cloudformation-cli](https://www.automicvault.com/fr/pkg/brew/cloudformation-cli/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code. - [otterdog](https://www.automicvault.com/fr/pkg/brew/otterdog/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code. - [kuzco](https://www.automicvault.com/fr/pkg/brew/kuzco/) - Local package facts share a topical domain. Shared terms: cli, cloud, cloud-infrastructure, code, infrastructure. - [aiac](https://www.automicvault.com/fr/pkg/brew/aiac/) - Local package facts share a topical domain. Shared terms: cli, cloud, cloud-infrastructure, code, infrastructure. ## Sources - Nucleus package database - Geiger risk classifier - secret-handling manifest - local coverage README - package-page enrichment - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer