Alternatives to CFEngine

A configuration management and automation system that keeps servers in a defined, compliant state. The listings below can replace it for an important use case. Each note says what changes if you switch.

Replacements

Listings that take over the same core job as CFEngine.

  • Puppet

    A configuration management and infrastructure automation tool that enforces the intended state of servers.

    PaidProprietaryWindowsLinuxCommand line

    Puppet also enforces declared server state with its own language, adds the Puppet Forge module library, but is a paid, closed-source product.

  • Salt

    Open-source automation framework for remote execution, configuration management and orchestration across many servers.

    FreeOpen sourceLinuxSelf-hostedCommand line

    Salt is free and open source, adding remote execution and event-driven automation, though states, grains and pillars take time to learn.

  • Chef

    An infrastructure automation platform for configuration management, compliance audits and workflow orchestration across servers.

    PaidProprietaryWindowsmacOSLinuxSelf-hosted

    Chef offers policy-as-code configuration with scheduled compliance auditing across Windows, macOS and Linux, but is paid with sales-led pricing.

  • Rudder

    Open-source configuration management and compliance platform for Linux and Windows systems.

    FreemiumOpen sourceWindowsLinuxSelf-hosted

    Rudder is open source with continuous enforcement plus patch, vulnerability and CIS or NIST benchmark auditing for both Linux and Windows.

  • Uyuni

    An open-source server for patching, configuring and provisioning large fleets of Linux machines using Salt.

    FreeOpen sourceLinuxWebSelf-hosted

    Uyuni is a free Salt-based server focused on patching, configuring and provisioning Linux fleets through a web interface.

Similar software

Related functionality, not a direct replacement.