CLI and OpenTofu
Sign in from the terminal, make tokens for scripts, and declare your setup with OpenTofu.
The enclave command
The same program is the command line. Sign in once and every command works on that server; --wait waits until what you created is ready.
Sign in and look around
./build/enclave login --server http://127.0.0.1:7070
./build/enclave ls
./build/enclave app create --helpTokens for scripts and CI
A token lets a script or a pipeline act without a password. Give it the narrowest role it needs.
Make a token
export ENCLAVE_TOKEN=$(./build/enclave token create --name ci)OpenTofu
The OpenTofu provider manages the same resources as code; Terraform works too. Until it is published, point OpenTofu at the one you built:
Plan the example
make provider-dev
export TF_CLI_CONFIG_FILE=$HOME/.tofurc.enclave
export ENCLAVE_TOKEN=$(./build/enclave token create --name opentofu)
cd examples/opentofu && tofu planEvery service page shows its OpenTofu block and every setting it takes.
Something unclear or out of date? Tell us in the community, or improve these docs on GitHub.