Build infrastructure from code

terraform describes resources in HCL, shows a plan and applies it; the state remembers what exists.

$terraform init
$terraform fmt -recursive && terraform validate
$terraform plan -out tfplan
$terraform apply tfplan

tofu runs the same code as Terraform, under an open licence, with built-in state encryption.

$tofu init
$tofu plan -out tfplan
$tofu apply tfplan

terragrunt keeps one backend config and shared inputs, and runs many modules in the right order.

$cd live/prod && terragrunt run-all plan
$TERRAGRUNT_TFPATH=tofu terragrunt apply

pulumi describes resources in TypeScript, Python or Go — loops and tests come for free.

$pulumi preview --diff
$pulumi up --stack prod --yes

ansible connects with SSH and makes servers match a playbook — packages, files, users, services.

$ansible all -i inventory.ini -m ping
$ansible-playbook -i inventory.ini site.yml --check --diff
$ansible-playbook -i inventory.ini site.yml --limit web

packer bakes a ready VM image; vagrant makes local lab VMs; cloud-init sets up a cloud VM at first boot.

$packer build rocky9.pkr.hcl
$vagrant up && vagrant ssh server1
$cloud-init status --wait

Use each tool for what it is good at.