Files
opentf/website/docs/intro/install/standalone.mdx
Mick Tarsel cd21e74e75 Remove Community Supported Archs (#3321)
Signed-off-by: Mick Tarsel <mtarsel@gmail.com>
2025-09-30 19:12:05 -03:00

69 lines
3.9 KiB
Plaintext

---
sidebar_position: 99
sidebar_label: Standalone (Linux/MacOS/Windows/BSD)
description: |-
Use OpenTofu as a standalone binary without installation.
---
import Tabs from '@theme/Tabs';
import TabItem from '@theme/TabItem';
import CodeBlock from '@theme/CodeBlock';
import LinuxScript from '!!raw-loader!./examples/standalone-install.sh'
import WindowsScript from '!!raw-loader!./examples/standalone-install.ps1'
import VerifyChecksumPS1 from '!!raw-loader!./examples/verify-checksum.ps1'
import VerifyChecksumLinux from '!!raw-loader!./examples/verify-checksum-linux.sh'
import VerifyChecksumMacOS from '!!raw-loader!./examples/verify-checksum-macos.sh'
import VerifyCosignLinux from '!!raw-loader!./examples/verify-cosign.sh'
import VerifyCosignWindows from '!!raw-loader!./examples/verify-cosign.ps1'
import Admonition from '@theme/Admonition';
# Installing OpenTofu from GitHub Releases
## Using the installer script
<Tabs>
<TabItem value="posix" label="Linux/MacOS/BSD/Unix (POSIX)">
<CodeBlock language="bash">{LinuxScript}</CodeBlock>
<Admonition type="info">The standalone installer verifies the integrity of the downloaded files. You need to install <a href="https://docs.sigstore.dev/system_config/installation/">cosign</a>, <a href="https://gnupg.org/">GnuPG</a>, or disable the integrity verification by using the <code>--skip-verify</code> option.</Admonition>
</TabItem>
<TabItem value="powershell" label="Windows (PowerShell)">
<CodeBlock language="powershell">{WindowsScript}</CodeBlock>
<Admonition type="info">If you run into script execution policy issues when running this script, please run <code>Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope Process</code> before running the installer.</Admonition>
<Admonition type="info">The standalone installer verifies the integrity of the downloaded files. You need to install <a href="https://docs.sigstore.dev/system_config/installation/">cosign</a>, <a href="https://gnupg.org/">GnuPG</a>, or disable the integrity verification by using the <code>-skipVerify</code> option.</Admonition>
</TabItem>
</Tabs>
## Using OpenTofu as a standalone binary
You can run OpenTofu without installation as a standalone binary. You can [download the latest release](https://github.com/opentofu/opentofu/releases/latest/) for your operating system from the [GitHub releases page](https://github.com/opentofu/opentofu/releases/latest/), unpack the zip and start using it. For easier updates, we recommend using the **non-portable packaged versions for your operating system**.
## Verify the file integrity
Please download the `tofu_YOURVERSION_SHA256SUMS` file from the release. This file contains the SHA256 checksums for all files. You can verify the integrity of your file by running:
<Tabs>
<TabItem value="linux" label="Linux (sha256sum)">
<CodeBlock language="bash">{VerifyChecksumLinux}</CodeBlock>
</TabItem>
<TabItem value="macos" label="MacOS (shasum)">
<CodeBlock language="bash">{VerifyChecksumMacOS}</CodeBlock>
</TabItem>
<TabItem value="windows" label="Windows (PowerShell)">
<CodeBlock language="powershell">{VerifyChecksumPS1}</CodeBlock>
</TabItem>
</Tabs>
# Verifying the binaries with Cosign
After you have verified the checksums, you can verify the integrity of the checksum file itself with [Cosign](https://docs.sigstore.dev/system_config/installation/). Please make sure you have installed Cosign and download the `tofu_YOURVERSION_SHA256SUMS.pem` and `tofu_YOURVERSION_SHA256SUMS.sig` files for your release. You can then run the integrity verification:
<Tabs>
<TabItem value="posix" label="Linux/MacOS/BSD/UNIX (POSIX)">
<CodeBlock language="bash">{VerifyCosignLinux}</CodeBlock>
</TabItem>
<TabItem value="powershell" label="Windows (PowerShell)">
<CodeBlock language="powershell">{VerifyCosignWindows}</CodeBlock>
</TabItem>
</Tabs>