components/opentofu 4.0.0

on GitLab

Changelog

[!tip]
Please review the changelog carefully to make use of the latest
and greatest features and to spot any deprecations or removals

that may cause a breaking change for your specific use case.

Changed (1 change)

• Document GitLab compatibility (merge request)
  

Removed (2 changes)

• Remove old OpenTofu patch releases: 1.11.0, 1.10.7, 1.10.6, 1.10.5, 1.10.0 (merge request)
  
• Remove EOL OpenTofu versions 1.8.x and 1.7.x (merge request)
  

Other (5 changes)

• Merge branch 'doc-gitlab-compat' into 'main' (merge request)
  
• Merge branch 'remove-opentofu-versions' into 'main' (merge request)
  
• Merge branch 'bump-go' into 'main' (merge request)
  
• Merge branch 'refactor-container-scanning' into 'main' (merge request)
  
• Merge branch 'container_scan' into 'main' (merge request)
  

See the CHANGELOG.md file for the entire history.

Usage

You can use the OpenTofu CI/CD component from the CI/CD catalog using:

include:
  - component: gitlab.com/components/opentofu/full-pipeline@4.0.0
    inputs:
      opentofu_version: 1.11.1

stages: [validate, test, build, deploy, cleanup]

See the README.md for more usage examples.

Available OpenTofu versions

This release is available with the following OpenTofu versions:

• 1.11.1
  
• 1.10.8
  
• 1.9.3
  

Available GitLab OpenTofu images

This release deployed the following gitlab-opentofu images:

• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-debian
  
  • (digest: sha256:d77607d167d914cf0e28d26bf7e56b6521db2a04f8404482868be8e0891751f6)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-debian-rootless
  
  • (digest: sha256:b976eecad2b3163217cdd1334e0267c360fac83bf87ec6f3b573a807b8f8d0cb)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-alpine
  
  • (digest: sha256:ace5474535832f771356032482ca10b2a001741244a000060f5270d43f27cd2b)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofulatest-alpine-rootless
  
  • (digest: sha256:7fe806ccb512da95934c680de7e746e91191544c72326a50b1bb916d9be456b5)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.3-debian
  
  • (digest: sha256:283ede97a0a394b590d85319b635f7b4e43cfff9733c2251abdf7916d122c8e1)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.3-debian-rootless
  
  • (digest: sha256:7b46bce2e1b03cc2967415854da4f54daae46da30ec48cc812cc80a2ca2ec7cf)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.3-alpine
  
  • (digest: sha256:8f791a004427a5dd8ff4b8755bd62250896ad84f712a54169d66d1f8601edf33)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.9.3-alpine-rootless
  
  • (digest: sha256:9c42774d2372516498e821679f07ed8447e9f38b72779cc7939424ded067b2a7)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.11.1-debian
  
  • (digest: sha256:d77607d167d914cf0e28d26bf7e56b6521db2a04f8404482868be8e0891751f6)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.11.1-debian-rootless
  
  • (digest: sha256:b976eecad2b3163217cdd1334e0267c360fac83bf87ec6f3b573a807b8f8d0cb)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.11.1-alpine
  
  • (digest: sha256:ace5474535832f771356032482ca10b2a001741244a000060f5270d43f27cd2b)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.11.1-alpine-rootless
  
  • (digest: sha256:7fe806ccb512da95934c680de7e746e91191544c72326a50b1bb916d9be456b5)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.8-debian
  
  • (digest: sha256:6a82665802f3b41c047171f38681b286ccf798f59b68beb0538d5b1e2a0e6e07)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.8-debian-rootless
  
  • (digest: sha256:c2a20733802b64563cb9b87c030d5092b6ba2cd9b55dfa61277d3f50b8c8524e)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.8-alpine
  
  • (digest: sha256:f4a74d7ca7807bdb8b5a218cbfa762f4cb45eb24df734a9ae7d58b6aad4f6cd3)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-opentofu1.10.8-alpine-rootless
  
  • (digest: sha256:de374980c1a8476095bba0f570a6200288bd3b0aa470cb454ab4e3ba60653e1e)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-debian
  
  • (digest: sha256:d77607d167d914cf0e28d26bf7e56b6521db2a04f8404482868be8e0891751f6)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-debian-rootless
  
  • (digest: sha256:b976eecad2b3163217cdd1334e0267c360fac83bf87ec6f3b573a807b8f8d0cb)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-alpine
  
  • (digest: sha256:ace5474535832f771356032482ca10b2a001741244a000060f5270d43f27cd2b)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:latest-alpine-rootless
  
  • (digest: sha256:7fe806ccb512da95934c680de7e746e91191544c72326a50b1bb916d9be456b5)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofulatest-debian
  
  • (digest: sha256:d77607d167d914cf0e28d26bf7e56b6521db2a04f8404482868be8e0891751f6)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofulatest-debian-rootless
  
  • (digest: sha256:b976eecad2b3163217cdd1334e0267c360fac83bf87ec6f3b573a807b8f8d0cb)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofulatest-alpine
  
  • (digest: sha256:ace5474535832f771356032482ca10b2a001741244a000060f5270d43f27cd2b)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofulatest-alpine-rootless
  
  • (digest: sha256:7fe806ccb512da95934c680de7e746e91191544c72326a50b1bb916d9be456b5)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofu1.9.3-debian
  
  • (digest: sha256:283ede97a0a394b590d85319b635f7b4e43cfff9733c2251abdf7916d122c8e1)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofu1.9.3-debian-rootless
  
  • (digest: sha256:7b46bce2e1b03cc2967415854da4f54daae46da30ec48cc812cc80a2ca2ec7cf)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofu1.9.3-alpine
  
  • (digest: sha256:8f791a004427a5dd8ff4b8755bd62250896ad84f712a54169d66d1f8601edf33)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofu1.9.3-alpine-rootless
  
  • (digest: sha256:9c42774d2372516498e821679f07ed8447e9f38b72779cc7939424ded067b2a7)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofu1.11.1-debian
  
  • (digest: sha256:d77607d167d914cf0e28d26bf7e56b6521db2a04f8404482868be8e0891751f6)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofu1.11.1-debian-rootless
  
  • (digest: sha256:b976eecad2b3163217cdd1334e0267c360fac83bf87ec6f3b573a807b8f8d0cb)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofu1.11.1-alpine
  
  • (digest: sha256:ace5474535832f771356032482ca10b2a001741244a000060f5270d43f27cd2b)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofu1.11.1-alpine-rootless
  
  • (digest: sha256:7fe806ccb512da95934c680de7e746e91191544c72326a50b1bb916d9be456b5)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofu1.10.8-debian
  
  • (digest: sha256:6a82665802f3b41c047171f38681b286ccf798f59b68beb0538d5b1e2a0e6e07)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofu1.10.8-debian-rootless
  
  • (digest: sha256:c2a20733802b64563cb9b87c030d5092b6ba2cd9b55dfa61277d3f50b8c8524e)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofu1.10.8-alpine
  
  • (digest: sha256:f4a74d7ca7807bdb8b5a218cbfa762f4cb45eb24df734a9ae7d58b6aad4f6cd3)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-opentofu1.10.8-alpine-rootless
  
  • (digest: sha256:de374980c1a8476095bba0f570a6200288bd3b0aa470cb454ab4e3ba60653e1e)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-debian
  
  • (digest: sha256:d77607d167d914cf0e28d26bf7e56b6521db2a04f8404482868be8e0891751f6)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-debian-rootless
  
  • (digest: sha256:b976eecad2b3163217cdd1334e0267c360fac83bf87ec6f3b573a807b8f8d0cb)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-alpine
  
  • (digest: sha256:ace5474535832f771356032482ca10b2a001741244a000060f5270d43f27cd2b)
    
• registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-alpine-rootless
  
  • (digest: sha256:7fe806ccb512da95934c680de7e746e91191544c72326a50b1bb916d9be456b5)
    

The images are available for the following platforms:

• linux/amd64
  
• linux/arm64
  

And with the follow base OS images:

• alpine, use base_os: alpine input to use it (default).
  
• debian, use base_os: debian input to use it.
  

And with either the root user (default) or gitlab-tofu user (rootless images).
The rootless images have the -rootless suffix.

The images have been signed with cosign and can be verified with the following command:

cosign verify \
  "registry.gitlab.com/components/opentofu/gitlab-opentofu:4.0.0-alpine" \
  --certificate-identity "https://gitlab.com/components/opentofu//.gitlab-ci.yml@refs/tags/4.0.0" \
  --certificate-oidc-issuer "https://gitlab.com"

The image_digest input can be used to strictly pull by the image digest.
The image_digest input value needs to have the format of @<type>:<hash>
where <type>:<hash> is the digest value from the images list above.

[!note]
When using the component with the inputs version and opentofu_version,
then the image tag is constructed with the following pattern: <version>-opentofu<opentofu_version>.

Read more about versioning and releases here.