Skip to content

OpenTofu Runner

OpenTofu Runner is an Ubuntu 24.04 AMI with OpenTofu 1.13.1 and a local, pinned copy of the AWS provider. It gives you a ready workspace where you run init, validate and plan yourself. Nothing runs in the background and nothing is ever applied automatically.

Launch on AWS Marketplace Getting started

What is included

Component Details
Operating system Ubuntu 24.04 LTS, x86_64
OpenTofu 1.13.1, official linux/amd64 build, at /opt/opentofu/bin/tofu
tofu command /usr/local/bin/tofu, a wrapper that uses the image's CLI configuration
AWS provider hashicorp/aws 6.67.0, in a local provider mirror at /opt/opentofu/providers
Workspace /var/lib/opentofu/workspace, with a local-only example, created on first boot
Examples An S3 backend example and an IAM policy example, in the workspace
Walkthrough /opt/sushi/docs/demo.sh and the bundled guide /opt/sushi/docs/README.md
Provenance /opt/sushi/evidence/opentofu-provenance.json

OpenTofu does not run as a daemon, does not listen on any TCP port and has no web UI. You start every run.

Ports

Port Purpose Exposure
22/tcp SSH, optional Only if you use SSH instead of Session Manager. Restrict it to your administrator CIDR.

No other inbound port is needed.

  • t3.medium (2 vCPU, 4 GiB RAM) or larger. The AWS provider is large, and 2 GiB of RAM is usually too small once tofu init unpacks it.
  • At least 16 GiB encrypted gp3 root volume.
  • IMDSv2.

Billing

You pay an hourly software fee, shown on the AWS Marketplace listing, for each running instance. EC2, EBS and data transfer are billed separately by AWS. See the offer terms on the listing for any free trial or promotion.

Where to go next

Upstream project

OpenTofu is published by the OpenTofu project under the MPL-2.0 license. terraform-provider-aws is published by HashiCorp under MPL-2.0. Software Sushi packages them and is not affiliated with or endorsed by either project.