Comparison of open-source configuration management software
Updated: 5/20/2026, 7:09:55 PM Wikipedia source
This is a comparison of notable free and open-source configuration management software, suitable for tasks like server configuration, orchestration and infrastructure as code typically performed by a system administrator.
Tables
Ansible
Ansible
Col 1
Ansible
Language
Python
License
GPLv3+
Mutual auth.
Yes
Encryption
Yes
Verify mode
Yes
Agent-less
Yes
Incl. GUI
Yes
First release
2012-03-08
Latest stable release
2025-03-25 2
Bcfg2
Bcfg2
Col 1
Bcfg2
Language
Python
License
BSD 2-clause
Mutual auth.
Yes
Encryption
Yes
Verify mode
Yes
Agent-less
No
Incl. GUI
Yes
First release
2004-08-11
Latest stable release
2015-06-11 1
Capistrano
Capistrano
Col 1
Capistrano
Language
Ruby
License
MIT
Encryption
Yes
Agent-less
Yes
Incl. GUI
No
First release
2005
Latest stable release
2022-08-07 3
cdist
cdist
Col 1
cdist
Language
Python
License
GPLv3+
Mutual auth.
Yes
Encryption
Yes
Agent-less
Yes
First release
2010
Latest stable release
2021-08-24 6
Chef
Chef
Col 1
Chef
Language
Ruby, Erlang
License
Apache 2
Mutual auth.
Yes
Encryption
Yes
Verify mode
Yes
Agent-less
No
Incl. GUI
Yes
First release
2009-01-15 0
Latest stable release
2023-01-05 18 (client), 15 (server)
CFEngine
CFEngine
Col 1
CFEngine
Language
C
License
GPLv3
Mutual auth.
Yes
Encryption
Yes
Verify mode
Yes
Agent-less
No
Incl. GUI
Yes
First release
1993
Latest stable release
2026-05-08 3 ,
2026-05-08 3
Consfigurator
Consfigurator
Col 1
Consfigurator
Language
Common Lisp (SBCL)
License
GPLv3+
Mutual auth.
Yes
Encryption
Yes
Incl. GUI
No
Latest stable release
2024-07-26 1
Guix
Guix
Col 1
Guix
Language
Scheme (Guile)
License
GPLv3+
Mutual auth.
Yes
Encryption
Yes
Agent-less
No
Incl. GUI
No
Latest stable release
2022-12-19 1
ISconf
ISconf
Col 1
ISconf
Language
Python
License
GPL
Mutual auth.
Yes
Encryption
No
First release
1998
Latest stable release
2006-08-13 4
Juju
Juju
Col 1
Juju
Language
Python, Go
License
AGPL
Mutual auth.
Yes
Encryption
Yes
Verify mode
No
Agent-less
No
Incl. GUI
Yes
First release
2010-09-17
Latest stable release
2025-06-09 3
Local ConFiGuration system (LCFG)
Local ConFiGuration system (LCFG)
Col 1
Local ConFiGuration system (LCFG)
Language
Perl
License
GPL
Mutual auth.
Partial
Encryption
Partial
Verify mode
No
Agent-less
No
Incl. GUI
No
First release
1994
Latest stable release
Weekly Releases
NOC Project
NOC Project
Col 1
NOC Project
Language
Python
License
BSD 2
Mutual auth.
Yes
Encryption
Yes
Verify mode
Yes
Agent-less
Yes
Incl. GUI
Yes
First release
2012-03-08
Latest stable release
2015-05-20 15
OCS Inventory NG with GLPI
OCS Inventory NG with GLPI
Col 1
OCS Inventory NG with GLPI
Language
Perl, PHP, C++
License
GPL
Mutual auth.
No
Encryption
Yes
Agent-less
No
First release
2003
Latest stable release
2014-07-13
Open pc server integration (Opsi)
Open pc server integration (Opsi)
Col 1
Open pc server integration (Opsi)
Language
Python, Java
License
GPL
Mutual auth.
No
Encryption
Yes
Agent-less
No
First release
2004
Latest stable release
2013-03-01 4
PIKT
PIKT
Col 1
PIKT
Language
C
License
GPLv2+
Mutual auth.
Yes
Encryption
Yes
Agent-less
No
First release
1998
Latest stable release
2007-09-10 1
Puppet
Puppet
Col 1
Puppet
Language
Ruby, C++ & Clojure (server-side also Ruby before 4 )
License
Apache since 2 , GPL before then
Mutual auth.
Yes
Encryption
Yes
Verify mode
Yes
Agent-less
No
Incl. GUI
Yes
First release
2005-08-30
Latest stable release
2024-04 8 , 7 (client), 2024-04 8 , 7 (server)
Pyinfra
Pyinfra
Col 1
Pyinfra
Language
Python
License
MIT License
Mutual auth.
Yes
Encryption
Yes
Verify mode
Yes
Agent-less
Yes
First release
2016-08-10 0
Latest stable release
2025-01-30 3
Quattor
Quattor
Col 1
Quattor
Language
Perl, Python
License
Apache 2
Mutual auth.
Yes
Encryption
Yes
Verify mode
Partial
Agent-less
No
First release
2005-04-01
Latest stable release
2026-04-07 26
Radmind
Radmind
Col 1
Radmind
Language
C
License
BSD
Mutual auth.
Yes
Encryption
Yes
Agent-less
No
First release
2002-03-26
Latest stable release
2008-10-08 1
Rex
Rex
Col 1
Rex
Language
Perl
License
Apache
Mutual auth.
Yes
Encryption
Yes
Agent-less
Yes
First release
2010-11-05 0
Latest stable release
2025-07-05 1
Rudder
Rudder
Col 1
Rudder
Language
C, Scala, Rust
License
GPLv3, Apache 2
Mutual auth.
Yes
Encryption
Yes
Verify mode
Yes
Agent-less
No
Incl. GUI
Yes
First release
2011-10-31
Latest stable release
2025-11-19 9
SmartFrog
SmartFrog
Col 1
SmartFrog
Language
Java
License
Apache 2
Mutual auth.
Yes
Encryption
Yes
Agent-less
No
First release
2004-02-11
Latest stable release
2012-03-13 3
Salt
Salt
Col 1
Salt
Language
Python
License
Apache 2
Mutual auth.
Yes
Encryption
Yes
Verify mode
Yes
Agent-less
Both
Incl. GUI
Yes
First release
2011-03-17 0
Latest stable release
2023-05-05 v3006
Spacewalk
Spacewalk
Col 1
Spacewalk
Language
Java (C, Perl, Python, PL/SQL)
License
GPLv2
Mutual auth.
Yes
Encryption
Yes
Agent-less
No
First release
2008-06
Latest stable release
2019-01-14 2
STAF
STAF
Col 1
STAF
Language
C++
License
CPL
Mutual auth.
No
Encryption
Partial
Agent-less
No
First release
1998-02-16
Latest stable release
2012-12-16 3
Synctool
Synctool
Col 1
Synctool
Language
Python
License
GPLv2
Mutual auth.
Yes
Encryption
Yes
Verify mode
Yes
Agent-less
Yes
First release
2003
Latest stable release
2019-08-11 6
Uyuni
Uyuni
Col 1
Uyuni
Language
Java, Python, PL/SQL (Perl)
License
GPLv2, Apache 2
Mutual auth.
Yes
Encryption
Yes
Verify mode
Yes
Agent-less
Both
Incl. GUI
Yes
First release
2018-06
Latest stable release
2024-01-31-01 2024
| Language | License | Mutual auth. | Encryption | Verify mode | Agent-less | Incl. GUI | First release | Latest stable release | |
| Ansible | Python | GPLv3+ | Yes | Yes | Yes | Yes | Yes | 2012-03-08 | 2025-03-25 2 |
| Bcfg2 | Python | BSD 2-clause | Yes | Yes | Yes | No | Yes | 2004-08-11 | 2015-06-11 1 |
| Capistrano | Ruby | MIT | Yes | Yes | No | 2005 | 2022-08-07 3 | ||
| cdist | Python | GPLv3+ | Yes | Yes | Yes | 2010 | 2021-08-24 6 | ||
| Chef | Ruby, Erlang | Apache 2 | Yes | Yes | Yes | No | Yes | 2009-01-15 0 | 2023-01-05 18 (client), 15 (server) |
| CFEngine | C | GPLv3 | Yes | Yes | Yes | No | Yes | 1993 | 2026-05-08 3 , 2026-05-08 3 |
| Consfigurator | Common Lisp (SBCL) | GPLv3+ | Yes | Yes | No | 2024-07-26 1 | |||
| Guix | Scheme (Guile) | GPLv3+ | Yes | Yes | No | No | 2022-12-19 1 | ||
| ISconf | Python | GPL | Yes | No | 1998 | 2006-08-13 4 | |||
| Juju | Python, Go | AGPL | Yes | Yes | No | No | Yes | 2010-09-17 | 2025-06-09 3 |
| Local ConFiGuration system (LCFG) | Perl | GPL | Partial | Partial | No | No | No | 1994 | Weekly Releases |
| NOC Project | Python | BSD 2 | Yes | Yes | Yes | Yes | Yes | 2012-03-08 | 2015-05-20 15 |
| OCS Inventory NG with GLPI | Perl, PHP, C++ | GPL | No | Yes | No | 2003 | 2014-07-13 | ||
| Open pc server integration (Opsi) | Python, Java | GPL | No | Yes | No | 2004 | 2013-03-01 4 | ||
| PIKT | C | GPLv2+ | Yes | Yes | No | 1998 | 2007-09-10 1 | ||
| Puppet | Ruby, C++ & Clojure (server-side also Ruby before 4 ) | Apache since 2 , GPL before then | Yes | Yes | Yes | No | Yes | 2005-08-30 | 2024-04 8 , 7 (client), 2024-04 8 , 7 (server) |
| Pyinfra | Python | MIT License | Yes | Yes | Yes | Yes | 2016-08-10 0 | 2025-01-30 3 | |
| Quattor | Perl, Python | Apache 2 | Yes | Yes | Partial | No | 2005-04-01 | 2026-04-07 26 | |
| Radmind | C | BSD | Yes | Yes | No | 2002-03-26 | 2008-10-08 1 | ||
| Rex | Perl | Apache | Yes | Yes | Yes | 2010-11-05 0 | 2025-07-05 1 | ||
| Rudder | C, Scala, Rust | GPLv3, Apache 2 | Yes | Yes | Yes | No | Yes | 2011-10-31 | 2025-11-19 9 |
| SmartFrog | Java | Apache 2 | Yes | Yes | No | 2004-02-11 | 2012-03-13 3 | ||
| Salt | Python | Apache 2 | Yes | Yes | Yes | Both | Yes | 2011-03-17 0 | 2023-05-05 v3006 |
| Spacewalk | Java (C, Perl, Python, PL/SQL) | GPLv2 | Yes | Yes | No | 2008-06 | 2019-01-14 2 | ||
| STAF | C++ | CPL | No | Partial | No | 1998-02-16 | 2012-12-16 3 | ||
| Synctool | Python | GPLv2 | Yes | Yes | Yes | Yes | 2003 | 2019-08-11 6 | |
| Uyuni | Java, Python, PL/SQL (Perl) | GPLv2, Apache 2 | Yes | Yes | Yes | Both | Yes | 2018-06 | 2024-01-31-01 2024 |
| Language | License | Mutual auth | Encrypts | Verify mode | Agent-less | Have a GUI | First release | Latest stable release |
Ansible
Ansible
Col 1
Ansible
AIX
Yes
BSD
Yes
HP-UX
Yes
Linux
Yes
OS X
Yes
Solaris
Yes
Windows
Partial
Others
Yes
Bcfg2
Bcfg2
Col 1
Bcfg2
AIX
Partial
BSD
Yes
HP-UX
No
Linux
Yes
OS X
Partial
Solaris
Yes
Windows
No
Others
No
CFEngine
CFEngine
Col 1
CFEngine
AIX
Yes
BSD
Yes
HP-UX
Yes
Linux
Yes
OS X
Yes
Solaris
Yes
Windows
Yes (enterprise version only)
Others
Yes
cdist
cdist
Col 1
cdist
BSD
Yes
Linux
Yes
OS X
Yes
Windows
No
Chef
Chef
Col 1
Chef
AIX
Yes
BSD
Yes
HP-UX
Yes
Linux
Yes
OS X
Yes
Solaris
Yes
Windows
Yes
Others
Yes
Consfigurator
Consfigurator
Col 1
Consfigurator
BSD
Partial
Linux
Yes
Windows
No
Guix
Guix
Col 1
Guix
AIX
No
BSD
No
HP-UX
No
Linux
Partial
OS X
No
Solaris
No
Windows
No
Others
Partial
ISconf
ISconf
Col 1
ISconf
AIX
Yes
BSD
Yes
HP-UX
Yes
Linux
Yes
OS X
Yes
Solaris
Yes
Windows
No
Others
No
Juju
Juju
Col 1
Juju
Linux
Yes
Windows
Yes
Local ConFiGuration system (LCFG)
Local ConFiGuration system (LCFG)
Col 1
Local ConFiGuration system (LCFG)
AIX
No
BSD
No
HP-UX
No
Linux
Partial
OS X
Partial
Solaris
Partial
Windows
No
Others
No
OCS Inventory NG
OCS Inventory NG
Col 1
OCS Inventory NG
AIX
Yes
BSD
Yes
HP-UX
Yes
Linux
Yes
OS X
Yes
Solaris
Yes
Windows
Yes
Others
No
Open pc server integration (Opsi)
Open pc server integration (Opsi)
Col 1
Open pc server integration (Opsi)
AIX
No
BSD
No
HP-UX
No
Linux
Yes
OS X
No
Solaris
No
Windows
Yes
Others
No
PIKT
PIKT
Col 1
PIKT
AIX
Yes
BSD
Yes
HP-UX
Yes
Linux
Yes
OS X
Yes
Solaris
Yes
Windows
No
Others
Yes
Puppet
Puppet
Col 1
Puppet
AIX
Yes
BSD
Yes
HP-UX
Yes
Linux
Yes
OS X
Yes
Solaris
Yes
Windows
Yes
Others
Yes
Pyinfra
Pyinfra
Col 1
Pyinfra
BSD
Yes
Linux
Yes
OS X
Yes
Windows
Partial
Quattor
Quattor
Col 1
Quattor
AIX
No
BSD
No
HP-UX
No
Linux
Yes
OS X
Partial
Solaris
Yes
Windows
No
Others
No
Radmind
Radmind
Col 1
Radmind
AIX
Yes
BSD
Yes
HP-UX
No
Linux
Yes
OS X
Yes
Solaris
Yes
Windows
Yes
Others
No
Rex
Rex
Col 1
Rex
BSD
Yes
Linux
Yes
OS X
Yes
Solaris
Yes
Windows
Yes
Others
No
Rudder
Rudder
Col 1
Rudder
AIX
Yes
BSD
Partial
HP-UX
No
Linux
Yes
OS X
Partial
Solaris
Partial
Windows
Yes
Others
Yes
SmartFrog
SmartFrog
Col 1
SmartFrog
AIX
No
BSD
No
HP-UX
Yes
Linux
Yes
OS X
Yes
Solaris
Yes
Windows
Yes
Others
No
Salt
Salt
Col 1
Salt
AIX
Yes
BSD
Yes
HP-UX
Partial
Linux
Yes
OS X
Yes
Solaris
Yes
Windows
Yes
Others
Partial
Spacewalk
Spacewalk
Col 1
Spacewalk
AIX
No
BSD
No
HP-UX
No
Linux
Yes
OS X
No
Solaris
No
Windows
No
Others
No
STAF
STAF
Col 1
STAF
AIX
Yes
BSD
Yes
HP-UX
Yes
Linux
Yes
OS X
Yes
Solaris
Yes
Windows
Yes
Others
Yes
Synctool
Synctool
Col 1
Synctool
AIX
Yes
BSD
Yes
HP-UX
Yes
Linux
Yes
OS X
Yes
Solaris
Yes
Windows
No
Others
Yes
Uyuni
Uyuni
Col 1
Uyuni
AIX
No
BSD
No
HP-UX
No
Linux
Partial
OS X
No
Solaris
No
Windows
No
Others
No
| AIX | BSD | HP-UX | Linux | OS X | Solaris | Windows | Others | |
| Ansible | Yes | Yes | Yes | Yes | Yes | Yes | Partial | Yes |
| Bcfg2 | Partial | Yes | No | Yes | Partial | Yes | No | No |
| CFEngine | Yes | Yes | Yes | Yes | Yes | Yes | Yes (enterprise version only) | Yes |
| cdist | Yes | Yes | Yes | No | ||||
| Chef | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Consfigurator | Partial | Yes | No | |||||
| Guix | No | No | No | Partial | No | No | No | Partial |
| ISconf | Yes | Yes | Yes | Yes | Yes | Yes | No | No |
| Juju | Yes | Yes | ||||||
| Local ConFiGuration system (LCFG) | No | No | No | Partial | Partial | Partial | No | No |
| OCS Inventory NG | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Open pc server integration (Opsi) | No | No | No | Yes | No | No | Yes | No |
| PIKT | Yes | Yes | Yes | Yes | Yes | Yes | No | Yes |
| Puppet | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Pyinfra | Yes | Yes | Yes | Partial | ||||
| Quattor | No | No | No | Yes | Partial | Yes | No | No |
| Radmind | Yes | Yes | No | Yes | Yes | Yes | Yes | No |
| Rex | Yes | Yes | Yes | Yes | Yes | No | ||
| Rudder | Yes | Partial | No | Yes | Partial | Partial | Yes | Yes |
| SmartFrog | No | No | Yes | Yes | Yes | Yes | Yes | No |
| Salt | Yes | Yes | Partial | Yes | Yes | Yes | Yes | Partial |
| Spacewalk | No | No | No | Yes | No | No | No | No |
| STAF | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Synctool | Yes | Yes | Yes | Yes | Yes | Yes | No | Yes |
| Uyuni | No | No | No | Partial | No | No | No | No |
| AIX | BSD | HP-UX | Linux | OS X | Solaris | Windows | Others |
References
- Key pair: uses public/private key pairs and key fingerprints for mutual authentication, like SSH.
- Secure Shell: Uses the Secure Shell protocol for encryption.
- Certificate and Passwords: Uses SSL X certificate and fingerprint for clients to authenticate server, and passwords for
- SSL: Uses the Secure Sockets Layer, Transport Layer Security (TLS) for encryption.
- Full support for non-modifying determination of node compliance, including nodes not previously modified by a Bcfg2 conf
- Per request signed headers and pre-shared keys.
- Payload encryption via SSL if HTTPS proxy is configured.
- Chef 10 + (called why-run mode)
- HMAC: Uses HMAC signatures on all network traffic.
- Certificates: Uses SSL X Certificates for mutual authentication. Can use any SSL Certificate Authority to manage the Pub
- Using the --noop option
- Using the Audit mode.
- Network Trust: Trusts the network, like rsh.
- User-only Auth: User authenticates to server via password, but uses Network Trust to authenticate user to server, like t
- Secure Shell: Uses the Secure Shell protocol for authentication.
- Synctool performs a dry-run by default, and only modifies things when invoked with '--fix'.
- yes for managed machine; no for managing machine
- Encap, RPM, and POSIX file support only.
- FreeBSD.
- Debian, Ubuntu; Gentoo; RPM-based distributions (CentOS, Mandrake, Red Hat, RHEL, SLES, SuSE)