Foreman

Foreman is a free, self-managed tool for managing physical and virtual servers through their lifecycle. It helps system administrators automate repetitive tasks, deploy applications, and administer on-premises or cloud infrastructure. Foreman can provision bare-metal systems and resources from providers including Amazon EC2, Google Compute Engine, OpenStack, Libvirt, oVirt, and VMware. Configuration management support includes Puppet, Salt, Ansible, and Chef; it can also collect Ansible reports and facts. Administrators can use its web frontend, REST API, or Linux CLI, including Hammer for API-based administration and automation. Host groups, bulk management, node reports, and audits help organize systems and review changes. Role-based access controls and integrations such as LDAP, FreeIPA, and Microsoft Active Directory address access management. A typical deployment uses a Foreman server, Smart Proxy servers, and managed hosts. Supported installation platforms listed include Enterprise Linux 8–10, Debian, Fedora, openSUSE/SUSE Linux Enterprise Server, and Ubuntu. The quickstart lists 4 GB of memory as an installation requirement. Foreman can run on a FIPS-enabled host, but the software itself is not FIPS-certified.

Foreman brings provisioning, configuration management, access controls, and auditing into one server-management tool. It is aimed at administrators comfortable with Linux and self-managed installations.

Foreman suits system administrators managing physical or virtual servers across on-premises and cloud environments. The project says getting started requires Linux system administration knowledge.

Overview

Foreman is a self-managed platform for provisioning and operating physical and virtual servers across on-premises and cloud environments. It is best suited to Linux administrators coordinating a mixed fleet, rather than teams looking for a hosted, low-maintenance service. Its breadth and zero license cost are compelling, but installation and upkeep require real systems expertise.

Key features

Foreman provisions bare-metal systems and resources on Amazon EC2, Google Compute Engine, OpenStack, Libvirt, oVirt, VMware and other providers. Host groups and bulk management help administrators coordinate large fleets, while reports flag healthy or outdated hosts and historical audits show who changed what and when. This gives teams useful operational oversight; it also means Foreman is a broad management layer to maintain, not a lightweight deployment utility.

Configuration support spans Puppet, Ansible, Chef and Salt, though the integrations differ: Foreman supports Puppet and Salt, and collects Ansible facts and reports. The web interface is joined by a REST API for tasks such as registering hosts and assigning roles, while Hammer CLI exposes API calls for administration and automation. Those options suit teams that want to combine interactive management with scripted workflows.

Role-based access controls can work with LDAP, FreeIPA or Microsoft Active Directory. Smart Proxy can run OpenSCAP compliance scans on hosts and send reports to Foreman. The project accepts vulnerability reports privately and aims to address high-severity issues in its current stable release. Foreman can run on a FIPS-enabled host, but Foreman itself is not FIPS-certified, an important distinction for regulated environments.

A typical deployment includes a Foreman server, Smart Proxy servers and managed hosts. The Foreman 5.0 quickstart covers Enterprise Linux 9, Debian 12 and 13, and Ubuntu 22.04 and 24.04; supported server and proxy packages include Enterprise Linux 9, with community packages only for x86_64. Installation requires 4 GB of memory, and the installer configures multiple system components. That setup is reasonable for administrators comfortable with Linux, but a poor match for teams seeking a simple appliance or hosted console.

Pricing

Foreman is free and open source, with a self-managed installation. The Foreman plan costs nothing and includes the platform without a paid tier or per-seat price to weigh. The tradeoff is operational: the organization must install and run the system itself. Community support is available through Discourse and a public Matrix room, but the project says the support room is not an official channel.

Platforms

Foreman is available through web, API and Linux CLI interfaces, and is self-hosted. Supported managed-server platforms include Amazon Linux, Debian, Enterprise Linux 8–10, Fedora, openSUSE/SUSE Linux Enterprise Server and Ubuntu. The server and Smart Proxy can run on Enterprise Linux 9; package architecture support for community packages is limited to x86_64.

Who it's for

Foreman makes sense for system administrators who need provisioning, configuration visibility, access controls and audit history in one self-managed environment, particularly across physical machines and multiple cloud platforms. The project says it is used for estates from tens to tens of thousands of servers, but scale does not remove the Linux administration requirement. Teams without that expertise, or those needing Foreman itself to be FIPS-certified, should look elsewhere.

Pros and cons

• Pro: Broad provisioning coverage, from bare metal to several public and private cloud platforms, suits heterogeneous server estates.
• Pro: API, Hammer CLI and web access give administrators distinct routes for manual work and automation.
• Pro: Role-based access, directory authentication options and change audits support controlled administration and troubleshooting.
• Con: Self-managed installation configures multiple system components and requires Linux systems knowledge, adding setup and maintenance responsibility.
• Con: Foreman is not FIPS-certified, even when hosted on a FIPS-enabled system.
• Con: Community support channels are not an official support service.

Alternatives

Canonical Landscape is worth considering for Ubuntu Pro users who want a free SaaS account capped at five machines, or a managed Landscape offering for public clouds, VMware, OpenStack or LXD at 6861. Choose Juju instead if an open-source orchestration engine with Linux, macOS and Windows support better fits the need. Salt is another free, Apache 2.0-licensed option for teams centered on configuration management. Terraform offers a free tier capped at 500 managed resources, one concurrent remote run and one concurrent agent run, which may suit teams whose needs fit those limits.

CFEngine offers a free Community Edition with Linux support and community support; its Enterprise Edition may be relevant to teams considering a different edition. Nix is a free open-source package manager rather than a server lifecycle platform. Pulumi has a free tier for one user, with unlimited projects, stacks, environments, updates and history, making it a different option for teams whose work fits that model. Rudder offers a free open-source core for teams seeking that alternative. For broader browsing, see IT Configuration Management Software, Bare Metal Provisioning Software, OS Deployment Software and IT Automation Software.

Verdict

Choose Foreman if Linux administrators need a free, self-hosted control point for provisioning and tracking a diverse server fleet, with access controls and useful audit history. Its main drawback is the expertise and ongoing work its installation demands; teams wanting managed simplicity or FIPS-certified software should choose another approach.