When a $6 Billion Company Moved, OpenTofu Fought Back

In August 2023, HashiCorp’s decision to relicense its widely used Terraform tool from the open-source Mozilla Public License (MPL) to the restrictive Business Source License (BUSL) sent shockwaves through the tech industry. This change prevented companies from offering competing services based on Terraform, threatening the business models of firms that had built tools, platforms, and services around the open infrastructure-as-code (IaC) standard. The move sparked widespread backlash, with over 35,000 GitHub stars on a community manifesto demanding a reversal. When HashiCorp did not respond by August 25, 2023, the OpenTF initiative forked Terraform’s last open version (1.5.x), launching a new project to preserve true open-source principles. By September 20, 2023, the project joined the Linux Foundation and was renamed OpenTofu, symbolizing a community-driven, vendor-neutral alternative. Key founding companies—Gruntwork, Spacelift, Harness, env0, and Scalr—and individuals like Paweł Hytry, Yevgeniy Brikman, and Malcolm Matalka led the effort, motivated by a belief in digital freedom and the need to prevent vendor lock-in. Unlike a traditional startup, OpenTofu is sustained not by investors but by collective investment: member companies fund full-time developers, and the Linux Foundation committed to supporting at least 18 for five years. OpenTofu quickly proved viable as a drop-in replacement for Terraform, enabling major enterprises like Fidelity to migrate thousands of state files with minimal code changes. Its 1.6 stable release in January 2024 marked technical maturity, followed by innovative features in 1.7—like state encryption and provider-defined functions—that surpassed Terraform’s roadmap. In April 2025, OpenTofu entered the Cloud Native Computing Foundation (CNCF) Sandbox, reinforcing its legitimacy and long-term sustainability. Legal drama unfolded in April 2024 when HashiCorp issued a cease-and-desist letter, accusing OpenTofu of misusing BUSL-licensed code—a claim OpenTofu denied, citing its origin in MPL-licensed code, and counter-accusing HashiCorp of potential license violations. The stakes grew higher when IBM announced a $6.4 billion acquisition of HashiCorp, raising questions about Terraform’s future licensing, though IBM remained noncommittal. The OpenTofu story transcends code: it represents a pivotal moment in open-source history, where the community mobilized to protect foundational digital infrastructure from unilateral corporate control. The implications are far-reaching—tools like OpenTofu underpin everyday digital experiences, from concert ticket sales to banking apps. By ensuring infrastructure as code remains open, OpenTofu fosters innovation, competition, and resilience, acting as an insurance policy for digital autonomy. This episode underscores a broader truth: the health of the internet depends not just on technology, but on the principles of trust, transparency, and collective stewardship that OpenTofu now embodies.