Automic VaultAutomic Vault

brew

使用 Homebrew, apk, chocolatey, dnf, Nix, pacman, zypper, scoop, winget 安装 opentofu

查看 opentofu 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

代理安全

代理安全回答

opentofu plans and applies infrastructure changes from local state and cloud credentials.

凭据访问

Reads backend credentials, provider credentials, variables, and state data.

远程变更

Can create, update, or destroy infrastructure resources.

发布/制品风险

Can deploy infrastructure that exposes or runs application artifacts.

推荐控制

Gate apply, destroy, import, state, and backend changes.

代理使用指南

Allow plan by default; require approval for any state-changing command.

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install opentofu

local Homebrew formula metadata

Linux

Alpine Linux apk已验证 · 92%
sudo apk add opentofu

Alpine Linux edge package indexes · opentofu · 来源: dl-cdn.alpinelinux.org

Fedora dnf已验证 · 92%
sudo dnf install opentofu

Fedora Rawhide package metadata · opentofu · 来源: dl.fedoraproject.org

Nix已验证 · 92%
nix profile install nixpkgs#opentofu

nixpkgs package indexes · pkgs/by-name/op/opentofu/package.nix · 来源: api.github.com

Arch Linux pacman已验证 · 92%
sudo pacman -S opentofu

Arch Linux sync databases · opentofu · 来源: geo.mirror.pkgbuild.com

openSUSE zypper已验证 · 92%
sudo zypper install opentofu

openSUSE Tumbleweed package metadata · opentofu · 来源: download.opensuse.org

Windows

Chocolatey已验证 · 92%
choco install opentofu

Chocolatey community package catalog · opentofu · 来源: community.chocolatey.org

Scoop已验证 · 92%
scoop install main/opentofu

Scoop official bucket manifest trees · bucket/opentofu.json · 来源: api.github.com

Windows Package Manager已验证 · 92%
winget install --id OpenTofu.Tofu -e

Windows Package Manager source index · OpenTofu.Tofu · 来源: cdn.winget.microsoft.com

概览

软件包摘要

Drop-in replacement for Terraform. Infrastructure as Code Tool

历史

项目历史与用法

OpenTofu is a community-driven infrastructure-as-code tool created as an open-source fork of Terraform after HashiCorp changed Terraform’s license from MPL-2.0 to the Business Source License. It keeps the familiar `plan`, `apply`, state, provider, module, and HCL-style workflows while using the `tofu` executable and Linux Foundation governance.

项目历史

The OpenTF manifesto began as an appeal to keep Terraform under a truly open-source license. When that did not happen, the initiative forked the last MPL-licensed Terraform codebase and moved forward as OpenTofu under the Linux Foundation. The project’s own announcement framed OpenTofu as community-driven, impartial, layered, modular, and backward-compatible.

OpenTofu reached its first stable release, 1.6.0, on January 10, 2024, after roughly four months of work. The project documented migration paths from Terraform 1.5.x and 1.6.x and positioned the release as production-ready for users who wanted open-source infrastructure-as-code continuity.

采用历史

OpenTofu adoption was unusually fast because it started with Terraform’s established user model, provider ecosystem, and module habits. The Linux Foundation launch announcement named broad community and company backing, while the OpenTofu homepage later described thousands of providers and modules available to users.

The package-manager story matters because OpenTofu’s promise is partly operational: users need a `tofu` binary in CI images, developer laptops, container builds, and distribution repositories. Homebrew, Nix, Alpine, Fedora, Arch, Scoop, Chocolatey, winget, and other package channels made the fork installable without bespoke bootstrapping.

使用方式

Operators use OpenTofu to declare infrastructure resources, initialize providers and modules, compute plans, apply changes, manage state, and integrate infrastructure changes into CI/CD. It is intentionally familiar to Terraform users, with migration guides focused on preserving existing workflows and configurations.

The CLI reads configuration files, talks to provider plugins, stores state locally or remotely, and exposes command behavior that infrastructure teams script heavily. That makes packaging details such as executable name, plugin cache behavior, credentials files, and compatibility promises more important than for a throwaway CLI.

为什么软件包爱好者会关心

OpenTofu is one of the clearest examples of licensing changing a package graph. A single upstream license decision created a new binary, new governance, new release channel, and new distro formulas for a tool already embedded in deployment pipelines.

时间线

  • 2023-08: the OpenTF manifesto objected to Terraform’s license change and proposed an open-source path.
  • 2023-09-20: the Linux Foundation announced OpenTofu as an open-source Terraform fork.
  • 2024-01-10: OpenTofu 1.6.0 became the first stable release.
  • 2024-01-10: the Linux Foundation announced OpenTofu general availability.

Related projects

  • Related projects include Terraform, the OpenTofu provider registry ecosystem, HCL, Terragrunt, Atlantis, Spacelift, env0, and CI/CD systems that run infrastructure plans as part of deployment workflows.

安全态势

风险级别:orange

infrastructure as code tool.

风险分类器

orange 风险 · 高 置信度 · infrastructure

原因

  • infrastructure as code tool

信号

  • override:opentofu

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 6 个平台目标。
  • 构建元数据列出 1 个构建依赖。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.tofurc$XDG_CONFIG_HOME/opentofu/tofurc
Windows
%APPDATA%\tofu.rc

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.terraform.d/credentials.tfrc.json

可执行文件

已安装的可执行文件

命令类型暴露范围备注
tofucli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-07-26
管理器版本1.12.5
管理器更新时间2026-07-21
本地数据OK
上游当前
检测到的最新版本v1.12.5

https://github.com/opentofu/opentofu

  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:opentofu
版本1.12.5
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/opentofu
主页https://opentofu.org/
仓库https://github.com/opentofu/opentofu
上游文档https://opentofu.org/docs
许可证MPL-2.0
源码归档https://github.com/opentofu/opentofu/archive/refs/tags/v1.12.5.tar.gz
最后更新2026-07-21T12:35:43Z
Pulseupdated
构建依赖go
Bottle可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameopentofu
Version Scheme0
Revision0
Head VersionHEAD
Conflicts With
  • tenv
  • tofuenv
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。

Nix95%

opentofu

nix profile install nixpkgs#opentofu
  • normalized package name match
  • 匹配方式:Opentofu
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/op/opentofu/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

opentofu 1.12.1-r0

OpenTofu lets you declaratively manage your cloud infrastructure

https://opentofu.org/

sudo apk add opentofu
  • License: MPL-2.0
  • Architecture: x86_64
  • Source Package: opentofu
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式:Opentofu
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: opentofu from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

opentofu 1.12.0-1.fc45

OpenTofu lets you declaratively manage your cloud infrastructure

https://github.com/opentofu/opentofu

sudo dnf install opentofu
  • License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 AND Unlicense
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: opentofu
  • 3 依赖
  • 2 提供
  • normalized package name match
  • 匹配方式:Opentofu
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: opentofu from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

opentofu 1.12.0-1

Lets you declaratively manage your cloud infrastructure

https://github.com/opentofu/opentofu

sudo pacman -S opentofu
  • License: MPL-2.0
  • Architecture: x86_64
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式:Opentofu
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: opentofu from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

opentofu 1.12.1-1.1

Declaratively manage your cloud infrastructure

https://github.com/opentofu/opentofu

sudo zypper install opentofu
  • License: MPL-2.0
  • Category: System/Management
  • Architecture: x86_64
  • Source Package: opentofu
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式:Opentofu
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: opentofu from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
Chocolatey95%

opentofu

choco install opentofu
  • normalized package name match
  • 匹配方式:Opentofu
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: opentofu from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='7.9764','inconsolata'
Scoop95%

main/opentofu

scoop install main/opentofu
  • normalized package name match
  • 匹配方式:Opentofu
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/opentofu.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

OpenTofu.Tofu

winget install --id OpenTofu.Tofu -e
  • normalized package name match
  • 匹配方式:Opentofu
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: OpenTofu.Tofu from https://cdn.winget.microsoft.com/cache/source.msix
winget95%

OpenTofu.Tofu.Alpha

winget install --id OpenTofu.Tofu.Alpha -e
  • normalized package name match
  • 匹配方式:Opentofu
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: OpenTofu.Tofu.Alpha from https://cdn.winget.microsoft.com/cache/source.msix
winget95%

OpenTofu.Tofu.Beta

winget install --id OpenTofu.Tofu.Beta -e
  • normalized package name match
  • 匹配方式:Opentofu
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: OpenTofu.Tofu.Beta from https://cdn.winget.microsoft.com/cache/source.msix
winget95%

OpenTofu.Tofu.RC

winget install --id OpenTofu.Tofu.RC -e
  • normalized package name match
  • 匹配方式:Opentofu
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: OpenTofu.Tofu.RC from https://cdn.winget.microsoft.com/cache/source.msix

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment