Skip to main content

Command: state push

The tofu state push command is used to manually upload a local state file to remote state. This command also works with local state.

This command should rarely be used. It is meant only as a utility in case manual intervention is necessary with the remote state.

Usage​

Usage: tofu state push [options] PATH

This command pushes the state specified by PATH to the currently configured backend.

If PATH is "-" then the state data to push is read from stdin. This data is loaded completely into memory and verified prior to being written to the destination state.

OpenTofu will perform a number of safety checks to prevent you from making changes that appear to be unsafe:

  • Differing lineage: If the "lineage" value in the state differs, OpenTofu will not allow you to push the state. A differing lineage suggests that the states are completely different and you may lose data.

  • Higher remote serial: If the "serial" value in the destination state is higher than the state being pushed, OpenTofu will prevent the push. A higher serial suggests that data is in the destination state that isn't accounted for in the local state being pushed.

Both of these safety checks can be disabled with the -force flag. This is not recommended. If you disable the safety checks and are pushing state, the destination state will be overwritten.

For configurations using the cloud backend or the remote backend only, tofu state push also accepts the option -ignore-remote-version.

This command also accepts the following options for tofu state push:

  • -lock=false - Don't hold a state lock during the operation. This is dangerous if others might concurrently run commands against the same workspace.

  • -lock-timeout=DURATION - Unless locking is disabled with -lock=false, instructs OpenTofu to retry acquiring a lock for a period of time before returning an error. The duration syntax is a number followed by a time unit letter, such as "3s" for three seconds.

  • ignore-remote-version.

  • -var 'NAME=VALUE' - Sets a value for a single input variable declared in the root module of the configuration. Use this option multiple times to set more than one variable. Refer to Input Variables on the Command Line for more information.

  • -var-file=FILENAME - Sets values for potentially many input variables declared in the root module of the configuration, using definitions from a "tfvars" file. Use this option multiple times to include values from more than one file.

There are several other ways to set values for input variables in the root module, aside from the -var and -var-file options. Refer to Assigning Values to Root Module Variables for more information.