diff --git a/config/make.env b/config/make.env
index f4e4f3c..0c1806b 100644
--- a/config/make.env
+++ b/config/make.env
@@ -21,8 +21,8 @@ SOPS_REPO=https://github.com/getsops/sops
 SOPS_REF=7b3a032adee818183189c89fcbbae212fbd50318
 BUSYBOX_URL=https://busybox.net/downloads/busybox-1.36.1.tar.bz2
 BUSYBOX_HASH=b8cc24c9574d809e7279c3be349795c5d5ceb6fdf19ca709f80cde50e47de314
-TERRAFORM_REPO=https://github.com/hashicorp/terraform
-TERRAFORM_REF=c10eb21b390627a6259eef9cd883e6ddeccc5716
+TOFU_REPO=https://github.com/opentofu/opentofu
+TOFU_REF=f9d8b3ca2c0926f66757241baf81af523be73726
 KSOPS_REPO=https://github.com/viaduct-ai/kustomize-sops
 KSOPS_REF=ac33c40e1b78d9847a8d0f58473e99419be5b170
 KUSTOMIZE_REPO=https://github.com/kubernetes-sigs/kustomize
diff --git a/fetch/terraform.tar.gz b/fetch/terraform.tar.gz
deleted file mode 100644
index 8af42b8..0000000
--- a/fetch/terraform.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:1ea4a8da17a758b3bccb59e063c26be91c1ac21d3e1c8b89240c3bba61dfcf64
-size 281372635
diff --git a/fetch/tofu.tar.gz b/fetch/tofu.tar.gz
new file mode 100644
index 0000000..e4249ba
--- /dev/null
+++ b/fetch/tofu.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ff43a3bdbf2c9b57ae0276afb40d55d7115f63c34aaf5367e79c3cd3bcc1438b
+size 283226850
diff --git a/src/make/tools.mk b/src/make/tools.mk
index 25576d8..f9e673d 100644
--- a/src/make/tools.mk
+++ b/src/make/tools.mk
@@ -1,6 +1,6 @@
 .PHONY: tools
 tools: tools-src \
-	$(OUT_DIR)/terraform.linux-x86_64 \
+	$(OUT_DIR)/tofu.linux-x86_64 \
 	$(OUT_DIR)/sops.linux-x86_64 \
 	$(OUT_DIR)/talosctl.linux-x86_64 \
 	$(OUT_DIR)/kubectl.linux-x86_64 \
@@ -11,7 +11,7 @@ tools: tools-src \
 .PHONY: tools-src
 tools-src: \
 	$(FETCH_DIR)/go.src.tar.gz \
-	$(FETCH_DIR)/terraform.tar.gz \
+	$(FETCH_DIR)/tofu.tar.gz \
 	$(FETCH_DIR)/sops.tar.gz \
 	$(FETCH_DIR)/talos.tar.gz \
 	$(FETCH_DIR)/kubernetes.tar.gz \
@@ -21,7 +21,7 @@ tools-src: \
 
 .PHONY: tools-install
 tools-install: tools
-	install -D $(OUT_DIR)/terraform.$(HOST_OS)-$(HOST_ARCH) $(PREFIX)/bin/terraform
+	install -D $(OUT_DIR)/tofu.$(HOST_OS)-$(HOST_ARCH) $(PREFIX)/bin/tofu
 	install -D $(OUT_DIR)/sops.$(HOST_OS)-$(HOST_ARCH) $(PREFIX)/bin/sops
 	install -D $(OUT_DIR)/talosctl.$(HOST_OS)-$(HOST_ARCH) $(PREFIX)/bin/talosctl
 	install -D $(OUT_DIR)/kubectl.$(HOST_OS)-$(HOST_ARCH) $(PREFIX)/bin/kubectl
@@ -110,16 +110,16 @@ $(OUT_DIR)/ksops-exec.linux-x86_64: \
 			go build -o /home/build/$@ \
 	")
 
-$(FETCH_DIR)/terraform.tar.gz:
-	$(call git_archive,$(TERRAFORM_REPO),$(TERRAFORM_REF))
+$(FETCH_DIR)/tofu.tar.gz:
+	$(call git_archive,$(TOFU_REPO),$(TOFU_REF))
 
-$(OUT_DIR)/terraform.linux-x86_64: \
-	$(FETCH_DIR)/terraform.tar.gz \
+$(OUT_DIR)/tofu.linux-x86_64: \
+	$(FETCH_DIR)/tofu.tar.gz \
 	$(CACHE_DIR)/bin/go
 	$(call toolchain," \
-		mkdir -p $(CACHE_DIR)/src/terraform \
-		&& tar -xvzf $< -C $(CACHE_DIR)/src/terraform \
-		&& env -C $(CACHE_DIR)/src/terraform \
+		mkdir -p $(CACHE_DIR)/src/tofu \
+		&& tar -xvzf $< -C $(CACHE_DIR)/src/tofu \
+		&& env -C $(CACHE_DIR)/src/tofu \
 			go build -o /home/build/$@ \
 	")