Tools: OpenTofu, Terraform, Ansible

Infrastructure as Code training for your team

Our live online workshops teach you to provision infrastructure with OpenTofu or Terraform and configure servers with Ansible. OpenTofu is our open-source starting point; choose Terraform if your organisation requires it. Compare course content and prerequisites for your team. All three courses require Linux terminal skills; Introduction to Linux covers that foundation.
Find your workshopCompare course content

WHAT DO YOU WANT TO AUTOMATE?

Provision infrastructure. Configure existing servers.

Infrastructure as Code describes infrastructure in files that you can version and review together. OpenTofu and Terraform use those files to create networks, virtual machines and cloud services. Ansible sets up packages and services on existing servers. If your team handles both tasks, you can follow a provisioning course with Introduction to Ansible (DW23).

Technical basis: OpenTofu documentation

HOW THE TASKS FIT TOGETHER

From infrastructure code to a reproducible environment

How provisioning and server configuration work together

  1. 01

    Declare infrastructure

    Describe networks, VMs and cloud services in OpenTofu or Terraform and group them into reusable modules

    Course code: DW21Introduction to OpenTofuCourse code: DW20Introduction to Terraform
  2. 02

    Review and apply changes

    Run tests and scans before apply, review the plan in a merge request and store remote state with locking

    Course code: DW21Introduction to OpenTofuCourse code: DW20Introduction to Terraform
  3. 03

    Configure servers

    Set up packages and services over SSH with Ansible. Settings that already match stay unchanged.

    Course code: DW23Introduction to Ansible
  4. Goal

    Keep environments reproducible

    Rebuild environments from versioned code and track later changes

SCOPE AND BOUNDARIES

What do the workshops cover?

Infrastructure and configuration as code
You learn to describe infrastructure and server configuration in code. With OpenTofu and Terraform, you review planned changes before applying them. State records the mapping to managed resources. With Ansible, you run configuration tasks on existing servers.
Related tasks
Kubernetes operations, application delivery with GitOps and central secrets management are separate subjects. Passing OpenTofu or Terraform outputs to Ansible inventories is not a dedicated module. Both IaC introductions give only an overview of Pulumi and CloudFormation. A Crossplane course is in preparation.

When these skills are useful

Does your team still set up environments by hand? Code lets you record and repeat those steps, and review changes together before applying them. Choose a course based on which tasks your colleagues will handle.

The foundation: Linux and the terminal

The OpenTofu, Terraform and Ansible introductions require Linux terminal practice; Ansible also requires SSH. Working on code together calls for Git skills too. Start with the relevant foundations wherever you need more practice.

FROM YOUR TASK TO A COURSE

Which workshop covers your task?

  • Declare infrastructureProviders, resources, modules, plan/apply

    OpenTofu and Terraform turn infrastructure code into resources.

    • Providers connect the code to the platform’s APIs.
    • Modules group resources into reusable building blocks with inputs and outputs.
    • Plan and apply separate reviewing a change from applying it.

    Introduction to OpenTofu (DW21) and Introduction to Terraform (DW20) teach this workflow with the respective tool. The cloud labs run on AWS.

    View in the catalogue
  • Store state securelyRemote state, locking, encryption

    State maps your code to existing resources and needs protected storage.

    • Remote state with locking guards against competing state changes.
    • OpenTofu encrypts state and plan on the client before they reach the backend.
    • Self-hosted backends in Introduction to OpenTofu (DW21) include S3-compatible storage with Garage or Ceph, and PostgreSQL.

    The OpenTofu course covers these storage options and encryption; Introduction to Terraform (DW20) covers remote state on AWS with locking and separation by environment and component.

    View in the catalogue
  • Adopt existing resources and migrateimport block, moved/removed, OpenTofu ← Terraform

    Existing resources can be brought into code; switching tools requires additional checks.

    • import maps existing resources to a declarative description.
    • moved and removed record renaming and removal from state in code.
    • Moving to OpenTofu requires checking state compatibility, registry references and the Terraform project’s lock file.

    In Introduction to OpenTofu (DW21), you practise state operations and migrate a Terraform project. Introduction to Terraform (DW20) covers state operations for existing resources.

    View in the catalogue
  • Configure serversInventory, playbook, role, idempotency

    Ansible configures existing servers over SSH without an agent on the target systems.

    • Static inventories organise hosts into groups and hold variables; dynamic cloud inventories are outside the course.
    • Playbooks and roles structure packages, services and configuration files.
    • Idempotent tasks make no change when the desired state is already in place.

    In Introduction to Ansible (DW23), you practise this with web servers and an application with a database.

    View in the catalogue
  • Protect credentials in code and stateAnsible Vault, state encryption, ephemeral values

    Secrets need different safeguards depending on where they are stored.

    • Ansible Vault encrypts variables and files for playbooks instead of leaving them in plain text in code.
    • OpenTofu encrypts state and plan and offers ephemeral resources; Terraform keeps ephemeral values and write-only arguments out of state. Encryption alone does not remove secrets from state.
    • HashiCorp Vault and OpenBao are standalone secrets platforms; OpenBao is the open-source fork of HashiCorp Vault. Their introduction courses are in preparation.

    Introduction to Ansible (DW23) covers Ansible Vault, Introduction to OpenTofu (DW21) state encryption and ephemeral resources, Introduction to Terraform (DW20) ephemeral values and write-only arguments.

    View in the catalogue
  • Check changes before applyTests, lint, scans, plan in the merge request

    Checks are already part of the introductions; their scope differs.

    • Introduction to OpenTofu (DW21) and Introduction to Terraform (DW20) cover tests with mocking, TFLint, Checkov and Trivy, plus a pipeline skeleton with the plan as a merge request comment.
    • Platform tools receive an overview: Atlantis, Scalr and env0 in the OpenTofu course; HCP Terraform, Atlantis and Terragrunt in the Terraform course. Their setup is not a dedicated course module.
    • Introduction to Ansible (DW23) covers ansible-lint and dry runs with --check and --diff. CI integration remains an outlook; AWX administration and custom modules are outside the course.

    Introduction to GitLab CI/CD (DW14) goes deeper into GitLab CI/CD without teaching OpenTofu, Terraform or Ansible.

    View in the catalogue

CORE TERMS

, , , ,

Infrastructure as Code
Infrastructure as Code records infrastructure in files that can be versioned. Resources are created or changed from this description instead of being configured individually by hand.
State
State stores the mapping between infrastructure code and resources. OpenTofu and Terraform use this information to calculate planned changes.
Plan
The plan shows which resources would be created, changed or removed. Applying the plan puts those changes into effect.
Idempotency
An idempotent task can be repeated without causing further changes once the desired state is in place.
Drift
Drift is a difference between code and running infrastructure, for example after manual changes. A plan can reveal it before apply; with Ansible, a dry run using --check helps where the modules support it.

BUILDING BLOCKS

, , , , ,

Provider
Providers connect OpenTofu or Terraform to the APIs used to manage resources.
Module
A module groups related resources. Inputs and outputs let you reuse this building block across configurations.
Inventory
An inventory lists the servers managed by Ansible, with groups and variables. Introduction to Ansible (DW23) covers static inventories; dynamic cloud inventories are outside the course.
Playbook
An Ansible playbook specifies which configuration tasks run on which servers and in what order.
Role
An Ansible role groups tasks, templates, handlers and variables into a reusable unit. In Introduction to Ansible (DW23), you organise a playbook into roles and examine their dependencies.
Ansible Vault
Ansible Vault encrypts individual variables or entire files for Ansible playbooks. It provides file encryption within an Ansible project.

Which task comes first for your team?

Answer a few questions about your task, experience and tools. The finder recommends a course and shows which skills you need before attending.

Find your starting point

MATCHED TO YOUR TASK

Provision infrastructure or configure servers?

Use OpenTofu or Terraform to create infrastructure from code. Choose OpenTofu for an open-source starting point or a planned move from Terraform. If your organisation requires Terraform, choose the Terraform course. Add Ansible when you need to configure existing servers.

OPEN SOURCE, INCL. MIGRATION

Beginner

Introduction to OpenTofu

3 daysLive onlineCourse code: DW21

You should be comfortable with the Linux terminal, a text editor and basic cloud concepts. Neither Terraform experience nor programming skills are required.

Your learning path

Before: Introduction to Linux

Course code: DW18

Now: Introduction to OpenTofu

Create infrastructure as code with OpenTofu, encrypt state and plan, and practise migrating an existing Terraform project

Then: Introduction to Kubernetes

Course code: DW2

View workshop

IF TERRAFORM IS MANDATED

Beginner

Introduction to Terraform

You should be comfortable with the Linux terminal, a text editor and basic cloud concepts. The course introduces Terraform and HCL; programming skills are not required.

3 daysCourse code: DW20View workshop

IF YOU NEED TO CONFIGURE EXISTING SERVERS

Beginner

Introduction to Ansible

You should be comfortable with the Linux terminal and SSH. Ansible and YAML are introduced in the course; Python knowledge is not required.

3 daysCourse code: DW23View workshop

COURSE CONTENT AND PREREQUISITES

Compare OpenTofu, Terraform and Ansible courses

What will you practise, what should you already know and what is outside the course? Compare the three introductions here. Tool details are based on the project documentation (as of September 2026).

STARTING POINT

Suited for

DW21 Introduction to OpenTofu
Teams that want to provision infrastructure with open-source tooling or use OpenTofu to take over a Terraform project
DW20 Introduction to Terraform
Teams with a Terraform or HCP Terraform mandate that want to describe infrastructure as code and review changes
DW23 Introduction to Ansible
Teams that want to configure existing servers consistently with playbooks and roles

Not suitable if

DW21 Introduction to OpenTofu
you must use HCP Terraform for your work
DW20 Introduction to Terraform
your main task is configuring packages and services on existing servers
DW23 Introduction to Ansible
your main task is provisioning networks, VMs and cloud resources

Prerequisites

DW21 Introduction to OpenTofu
Linux terminal, a text editor and basic cloud concepts; no programming skills required
DW20 Introduction to Terraform
Linux terminal, a text editor and basic cloud concepts; no programming skills required
DW23 Introduction to Ansible
Linux terminal and SSH; no prior Python or YAML knowledge required

TOOLS IN USE

Task

DW21 Introduction to OpenTofu
Describe resources as code, plan and apply changes; cloud labs on AWS
DW20 Introduction to Terraform
Describe resources as code, plan and apply changes; cloud labs on AWS
DW23 Introduction to Ansible
Manage packages, services and configuration files on existing servers over SSH

State and storage

DW21 Introduction to OpenTofu
Remote state with locking; also S3-compatible and PostgreSQL backends for self-hosting
DW20 Introduction to Terraform
Remote state with locking and separation by environment and component
DW23 Introduction to Ansible
No state file; tasks check state during execution

Licence and stewardship

DW21 Introduction to OpenTofu
MPL 2.0, CNCF Sandbox project (Linux Foundation)
DW20 Introduction to Terraform
Business Source License, developed by HashiCorp (IBM)
DW23 Introduction to Ansible
Licensing is outside the course; the focus is server configuration

Secrets and team workflow

DW21 Introduction to OpenTofu
State and plan encryption plus ephemeral resources; tests, scans and a pipeline skeleton with a plan comment
DW20 Introduction to Terraform
Ephemeral values and write-only arguments; tests, scans and a pipeline skeleton with a plan comment
DW23 Introduction to Ansible
Ansible Vault, ansible-lint and dry runs; CI integration as an outlook only

Existing estate and migration

DW21 Introduction to OpenTofu
import/moved/removed and migration of a Terraform project
DW20 Introduction to Terraform
import/moved/removed for existing resources
DW23 Introduction to Ansible
Connect existing servers directly through the inventory

Lab environment

DW21 Introduction to OpenTofu
Cloud labs on AWS; also self-hosted state backends using S3-compatible storage and PostgreSQL
DW20 Introduction to Terraform
Cloud labs on AWS
DW23 Introduction to Ansible
Managed Linux hosts over SSH

FORMAT AND LEARNING PATH

Duration

DW21 Introduction to OpenTofu
3 days
DW20 Introduction to Terraform
3 days
DW23 Introduction to Ansible
3 days

Level

DW21 Introduction to OpenTofu
Beginner
DW20 Introduction to Terraform
Beginner
DW23 Introduction to Ansible
Beginner

Price

DW21 Introduction to OpenTofu
€1,665.00per person, plus 19% VAT
DW20 Introduction to Terraform
€1,665.00per person, plus 19% VAT
DW23 Introduction to Ansible
€1,665.00per person, plus 19% VAT

Possible next step

DW21 Introduction to OpenTofu
Next: Introduction to Ansible or Introduction to GitLab CI/CD
DW20 Introduction to Terraform
Next: Introduction to Ansible or Introduction to GitLab CI/CD
DW23 Introduction to Ansible
Next: Introduction to OpenTofu or Introduction to Terraform

Workshop pages

Agenda & dates

FOUNDATIONS, TOOLS AND TEAM WORKFLOWS

IaC training and foundation courses

Course pages list the agenda, prerequisites and published dates. You can register your interest in courses that are in preparation. These courses are not yet bookable.

Workshop index

7 published workshops, 4 learning goals
3 workshops

Foundations for terminal work and collaboration

Linux terminal practice is required for OpenTofu, Terraform and Ansible, with SSH also required for Ansible. Git helps version and review changes together; Git and GitLab prepare you for pipeline work.

  • DW18Introduction to LinuxLearn the Linux terminal, permissions and SSH as foundations for IT automation3 days
  • DW19Introduction to Git for TeamsTrack infrastructure code changes with Git and coordinate them through branches and reviews3 days
  • DW26Introduction to Git and GitLabUse Git and GitLab to collaborate on changes and prepare for pipeline work3 days
5 workshops

Provision infrastructure as code

Choose OpenTofu or Terraform for provisioning infrastructure. OpenTofu Advanced, Terraform Advanced and Introduction to Crossplane are in preparation and not yet bookable.

  • DW21Introduction to OpenTofuCreate infrastructure as code with OpenTofu, encrypt state and plan, and practise migrating an existing Terraform project3 days
  • DW20Introduction to TerraformCreate cloud resources as code with Terraform, reuse modules and prepare team changes with remote state, tests and a pipeline skeleton3 days
  • DW54OpenTofu AdvancedIn preparation: OpenTofu Advanced, focusing on self-hosting and supplying modules in isolated networksRequest
  • DW53Terraform AdvancedIn preparation: Terraform Advanced, focusing on the HashiCorp platform and governance for larger teamsRequest
  • DW58Introduction to CrossplaneIn preparation: Introduction to Crossplane for cloud resources through Kubernetes APIs and self-service offeringsRequest
2 workshops

Configure and automate servers

The Ansible introduction covers playbooks, roles and repeatable server configuration. Ansible Advanced is in preparation, with planned topics including testing, AWX and Event-Driven Ansible, and is not yet bookable.

  • DW23Introduction to AnsibleConfigure existing servers over SSH, organise playbooks into roles and encrypt variables and files with Ansible Vault3 days
  • DW55Ansible AdvancedIn preparation: Ansible Advanced for testing with Molecule, AWX and Event-Driven AnsibleRequest
3 workshops

Roll out and secure as a team

GitLab CI/CD goes deeper into pipeline work. Introduction to HashiCorp Vault and Introduction to OpenBao for central secrets management are in preparation and not yet bookable. OpenBao is the open-source fork of HashiCorp Vault.

  • DW14Introduction to GitLab CI/CDUse GitLab CI/CD for automated checks and controlled delivery2 days
  • DW56Introduction to HashiCorp VaultIn preparation: Introduction to HashiCorp Vault for central secrets management in the HashiCorp ecosystem and choosing an editionRequest
  • DW57Introduction to OpenBaoIn preparation: Introduction to OpenBao, the open-source fork of HashiCorp Vault, for self-hosting and migrationRequest

Bookable workshops link to their detail pages. Entries marked "Request" are in preparation and open a non-binding corporate training request.

ONE POSSIBLE COURSE SEQUENCE

Which courses build on each other?

If your team provisions infrastructure and configures servers, start with OpenTofu or Terraform, then add Ansible. For existing servers, you can start directly with Ansible. GitLab CI/CD develops your pipeline skills and requires Git knowledge. Each workshop is booked individually.

Recommended route

Suggested route, not a fixed sequence

  1. 01

    OPENTOFU OR TERRAFORM

    Create infrastructure from code

  2. 02

    ANSIBLE

    Configure existing servers consistently

  3. 03

    GITLAB CI/CD

    Automate checks and delivery

FEEDBACK FROM OUR WORKSHOPS

What participants say about the trainer and format

This feedback comes from our container workshops, taught by the same trainer in the same live online format. We do not yet have reviews from the IaC courses.

DW1 Introduction to Docker

„The seminar gave a very good overview of Docker administration, with a look at Kubernetes and how this knowledge simplifies everyday work. Many small, easy-to-follow examples with hands-on exercises and a focus on best practice consolidated what we learned. The instructor had an answer to every question, and for very specific questions he came back with a fitting example. The alternation between introductions and exercises was very well organised.“

Sebastian A.

DMI GmbH & Co. KG, Introduction to Docker

Participant voice on DW1

„Nico is a very friendly and technically skilled instructor. He answered all questions well. You quickly notice that he combines academic expertise with many years of professional practice.“

Philipp van Wickevoort Crommelin

parcIT GmbH, Introduction to Docker

Participant voice on DW4

„It was fun and I learned a lot that I can actually apply directly in my company. The trainer's approach was very hands-on, and he repeatedly brought in real-world examples.“

Felix R.

Dirk Rossmann GmbH, Docker and Kubernetes Essentials

Vincent Sturm - DevNinjas

Which IaC course does your team need?

Vincent Sturm

Key Account Manager

Tell us what your team does manually today and what it wants to automate. We will help you choose a course and check whether its Linux, SSH or Git skills meet the prerequisites.

vincent@devninjas.io
+49 221 9865099-4
WhatsApp Chat

Questions about choosing your IaC training

OpenTofu or Terraform: which course fits our team?

The OpenTofu course suits teams wanting a tool under an open-source licence or planning a move from Terraform; the Terraform course suits teams required to use Terraform.

Terraform has used the Business Source License (BSL) 1.1 since version 1.6. OpenTofu uses the MPL 2.0 open-source licence and is a CNCF Sandbox project. Both use HCL to describe infrastructure and plan and apply to review and carry out changes. The OpenTofu workshop (DW21) covers self-hosted state backends and a Terraform migration. The Terraform course (DW20) covers HCP Terraform only in outline.

Terraform or Ansible: when do we need both?

Terraform or OpenTofu and Ansible complement each other when your team first provisions infrastructure and then configures the servers.

Terraform or OpenTofu create networks and virtual machines. Ansible installs packages and configures services on them. If the servers already exist, you can start with the Ansible workshop (DW23); you need Linux terminal and SSH skills. For cloud provisioning alone, choose OpenTofu or Terraform. There is no fixed course order.

Can we migrate Terraform projects to OpenTofu?

You can migrate Terraform code and state to OpenTofu when the features and providers in use are compatible.

In the OpenTofu workshop (DW21), you practise migrating a Terraform project and check state compatibility, registry references and the lock file. For your own project, use this process to assess compatibility and any dependencies on HCP Terraform. That assessment determines whether your environment can move without changes.

What experience do I need for IaC training?

The IaC courses on OpenTofu, Terraform and Ansible require Linux terminal skills, but no programming experience.

OpenTofu and Terraform also require familiarity with a text editor and basic cloud concepts. Ansible requires SSH skills; you learn YAML during the course. Introduction to Linux (DW18) covers missing terminal foundations. Git knowledge helps teams work on code together; Introduction to Git (DW19) is one way to build those skills.

Do the IaC courses suit Azure or our own data centre?

The IaC concepts transfer to Azure and on-premises data centres; the OpenTofu and Terraform courses use AWS for their cloud exercises.

You learn how providers manage resources and how plan and apply review and carry out changes. You do not practise Azure services or provisioning in your data centre; those need separate adaptations. The OpenTofu workshop (DW21) also covers self-hosted state backends: S3-compatible storage such as Garage or Ceph, and PostgreSQL for storing infrastructure state.

Does Terraform's BSL licence restrict internal use?

Terraform's BSL licence permits internal use according to HashiCorp's licensing FAQ, including production infrastructure and internal services. An internal CI/CD pipeline can therefore use Terraform to provision the organisation's own infrastructure.

The restriction concerns competitive offerings to third parties that embed or host HashiCorp software. Whether a particular external offering falls within that restriction requires checking the licence terms. This summary of the vendor's position does not replace legal review of your business model.

How do Ansible Vault, HashiCorp Vault and OpenBao differ?

Ansible Vault encrypts variables and files for playbooks; HashiCorp Vault and OpenBao are standalone platforms for central secrets management.

Introduction to Ansible covers Ansible Vault. OpenBao is an MPL 2.0-licensed fork of HashiCorp Vault hosted by the OpenSSF. In the OpenTofu workshop (DW21), you use OpenBao as a key provider for state encryption, without covering full platform operations. Dedicated introductions to HashiCorp Vault and OpenBao are in preparation and are not yet bookable. Dates have not been set.

Do I need my own AWS account for the IaC exercises?

You do not need your own AWS account for DevNinjas IaC exercises: DevNinjas provides the cloud accounts and resources at no additional cost. This applies to the OpenTofu, Terraform and Ansible workshops.

OpenTofu and Terraform courses use AWS resources; the Ansible course involves configuring Linux hosts over SSH. You use the prepared DevNinjas Dojo environment during the booked course and need a browser and internet access.