Oxid

Beta — Oxid is under active development. It works end-to-end with real AWS providers, but has not been battle-tested in production yet. Use caution for production deployments and please report any issues you find. Community testing and contributions are very welcome!

A standalone infrastructure-as-code engine. Open-source alternative to Terraform.

Oxid parses .tf (HCL) and .tf.json files natively and communicates directly with Terraform providers via gRPC — no terraform or tofu binary required.

Why Oxid?

	Terraform/OpenTofu	Oxid
Execution	Wave-based (batch)	Event-driven per-resource
Parallelism	Resources in same wave wait for slowest	Dependents start the instant their deps complete
State	JSON file or remote backend	SQLite (local) / PostgreSQL (teams)
Config	HCL + JSON	HCL + JSON + YAML
Provider protocol	Wraps binary / shared lib	Direct gRPC (tfplugin5/6)
Queryable state	terraform show	Full SQL: oxid query "SELECT * FROM resources"
License	BSL / MPL	Apache-2.0

Features

• Native HCL (.tf) and JSON (.tf.json) parsing — reads your existing Terraform configs
• Mixed-format directories — .tf and .tf.json files in the same directory are merged automatically
• Direct gRPC communication with all Terraform providers (AWS, GCP, Azure, etc.)
• Event-driven DAG walker with per-resource parallelism
• Real-time progress with elapsed time tracking
• Resource-level plan display (Terraform-style +, ~, -, -/+)
• SQLite state backend with full SQL query support
• .tfvars and TF_VAR_ environment variable support
• Drift detection with oxid drift
• Import from existing .tfstate files

Quick Start

Install

# One-line install (Linux & macOS)
curl -fsSL https://raw.githubusercontent.com/ops0-ai/oxid/main/install.sh | bash

Or download a specific release manually:

# macOS (Apple Silicon)
curl -fsSL https://github.com/ops0-ai/oxid/releases/latest/download/oxid-darwin-arm64.tar.gz | tar xz
sudo mv oxid /usr/local/bin/

# macOS (Intel)
curl -fsSL https://github.com/ops0-ai/oxid/releases/latest/download/oxid-darwin-amd64.tar.gz | tar xz
sudo mv oxid /usr/local/bin/

# Linux (x86_64)
curl -fsSL https://github.com/ops0-ai/oxid/releases/latest/download/oxid-linux-amd64.tar.gz | tar xz
sudo mv oxid /usr/local/bin/

# Linux (ARM64)
curl -fsSL https://github.com/ops0-ai/oxid/releases/latest/download/oxid-linux-arm64.tar.gz | tar xz
sudo mv oxid /usr/local/bin/

From source:

git clone https://github.com/ops0-ai/oxid.git
cd oxid
cargo build --release
# Binary at ./target/release/oxid

Usage

# Initialize providers
oxid init

# Preview changes
oxid plan

# Apply infrastructure
oxid apply

# Destroy infrastructure
oxid destroy

# List resources in state
oxid state list

# Show resource details
oxid state show aws_vpc.main

# Query state with SQL
oxid query "SELECT address, resource_type, status FROM resources"

# Detect drift
oxid drift

# Visualize dependency graph
oxid graph | dot -Tpng -o graph.png

Example

Given standard Terraform files:

# main.tf
provider "aws" {
  region = var.aws_region
}

resource "aws_vpc" "main" {
  cidr_block           = "10.0.0.0/16"
  enable_dns_hostnames = true
  tags = {
    Name = "my-vpc"
    iac  = "oxid"
  }
}

resource "aws_subnet" "public" {
  vpc_id     = aws_vpc.main.id
  cidr_block = "10.0.1.0/24"
}

$ oxid apply

aws_vpc.main: Refreshing state... [1/2]
aws_subnet.public: Refreshing state... [2/2]

Oxid used the selected providers to generate the following execution plan.
Resource actions are indicated with the following symbols:
  + create

Oxid will perform the following actions:

  # aws_vpc.main will be created
  + resource "aws_vpc" "main" {
      + cidr_block           = "10.0.0.0/16"
      + enable_dns_hostnames = true
      + tags                 = { Name = "my-vpc", iac = "oxid" }
    }

  # aws_subnet.public will be created
  + resource "aws_subnet" "public" {
      + cidr_block = "10.0.1.0/24"
      + vpc_id     = (known after apply)
    }

Plan: 2 to add.

Do you want to perform these actions? Only 'yes' will be accepted.
  Enter a value: yes

aws_vpc.main: Creating...
aws_vpc.main: Creation complete after 3s [1/2] [id=vpc-0abc123]
aws_subnet.public: Creating...
aws_subnet.public: Creation complete after 1s [2/2] [id=subnet-0def456]

Apply complete! Resources: 2 added, 0 changed, 0 destroyed. Total time: 4s.

How It Works

1. Parse — Reads .tf (HCL) and .tf.json (JSON) files, extracts resources, data sources, variables, outputs, and providers. Mixed-format directories are merged.
2. Build DAG — Constructs a dependency graph from explicit depends_on and implicit expression references
3. Start Providers — Downloads provider binaries from registry.terraform.io, starts them as subprocesses, connects via gRPC
4. Plan — Calls PlanResourceChange on each provider to compute diffs
5. Apply — Event-driven DAG walker executes resources as dependencies are satisfied, calling ApplyResourceChange via gRPC
6. Store State — Persists resource attributes to SQLite database

Architecture

               .tf / .tf.json files
                        |
              [HCL + JSON Parser]
                        |
                 [WorkspaceConfig]
                        |
                  [DAG Builder]
                        |
                [Resource Graph]
                   /    |    \
            [Provider] [Provider] [Provider]
              gRPC       gRPC       gRPC
               |          |          |
            [AWS]      [GCP]     [Azure]
                        |
                  [SQLite State]

Building

# Prerequisites: Rust 1.75+, protoc (protobuf compiler)
cargo build --release

Contributing

Oxid is in beta and help is appreciated! Here's how you can contribute:

• Test with your .tf / .tf.json configs — Try oxid plan against your existing Terraform projects and report what works/breaks
• Report issues — File bugs at github.com/ops0-ai/oxid/issues
• Provider coverage — Test with different providers (GCP, Azure, Cloudflare, etc.) beyond AWS
• Code contributions — PRs welcome. See the architecture section above for how things fit together

License

Apache-2.0. See LICENSE for details.

---

Built by ops0.com