Terrain is a native GNOME desktop application for managing Terraform and OpenTofu workflows, inspired by Terraform Enterprise and OTF.
It supports both local projects (cloned from a git URL into the app's own data directory) and remote backends (HCP Terraform, self-hosted Terraform Enterprise, OTF) through a single unified interface — workspaces, runs, variables, state, and structured plan diffs render the same whether the data comes from a subprocess or a remote API.
Features:
Sensitive credentials are stored in the platform secret service (libsecret on Linux, Keychain on macOS, Credential Vault on Windows), never in plaintext on disk.
Local projects are now added by git URL plus an optional subpath rather than a filesystem folder picker; multiple subpaths share one clone. Terraform workspaces appear as first-class sidebar entries (create / delete from the kebab; runs pinned via TF_WORKSPACE).
Managed binary mode is the default for new workspaces — Terrain downloads and caches official OpenTofu / Terraform releases per-version; runs never hit the network. Container and bubblewrap run modes were removed.
In-app SSH key management plus libsecret-stored HTTPS git tokens for forge authentication. One-click "Sync from git remote" on every workspace.
