#19 of 28 infrastructure automation tools · Updated October 2026
Foreman review 2026
The Foreman (with Katello) · Dependable builder
Foreman ranks #19 of 28 infrastructure automation tools in the Infrastructure Automation Ledger 2026, with a Ledger Index of 52 out of 100. Foreman is the widest open source host lifecycle tool, released every quarter since 2013, and the engine that Red Hat sells as Satellite.
Scores
Source: Infrastructure Automation Ledger 2026, edition 2026-10-16. How each score works: methodology.
Pros
- Bare metal and day-2 operations4/5
Cons
- AI assistance0/5
- State, planning and safety1.5/5
- Configuration management depth2.5/5
What the Ledger says
Foreman keeps a quarterly rhythm that few tools in this Ledger match, and its bare-metal lifecycle (discovery, PXE, images, content, errata) is the deepest in the group outside Ironic. Its scores are held back by what it is not: there is no plan mode, no configuration engine of its own, and the Puppet path it was built around is being removed in favour of OpenVox. The 5.0 release is a packaging turn, with EL10 available only through the new container installer and no migration from RPM installs. A buyer should check whether the Proxmox VE plugin works against Proxmox VE 8 or 9 before building on it, because its compatibility table stops below 8.0.
Foreman has no AI generation and no AI in its own operations. Agents can drive the REST API, and an official MCP server exists only as an experimental repository without a release.
Capability by area
Buying, lock-in and release record
Technical lock-in(lower is better)
- Formats1.5
- ERB and kickstart templates in a PostgreSQL database; everything reachable through the REST API
- Export path2
- API and Hammer export everything; no export to another provisioning tool
- Stack coupling2
- Katello needs Pulp, Candlepin and PostgreSQL; Smart Proxy services for DHCP, DNS and TFTP
- Hardware / cloud coupling0.5
- Any x86 server; fully offline capable
- Skills and tooling coupling2
- Foreman-specific concepts (host groups, Smart Proxies) on top of standard Linux skills; Satellite skills transfer
Release credibility
- Cadence4.5
- Quarterly releases on a three-month rhythm since 2013; 3.17 2025-12, 3.18 2026-03, 3.19 2026-06, 5.0 2026-09
- Roadmap transparency3
- Public code, issue tracker and release-team posts; no dated roadmap
- Say-do3
- Few formal announcements; 5.0 shipped what the release candidates described; the Puppet removal (5.2) and Ubuntu 22.04 end (5.1) are pending and known only from a secondary source
- Velocity3
- Each release mixes framework maintenance (Rails, Ruby, PatternFly) with one or two capabilities; 5.0 was mostly packaging
- Lifecycle stability2.5
- Only the latest two releases get fixes, about six months each; the installer is being replaced; EL10 only through containers with no migration path from RPM installs
Partners and services
- Partner programme openness2
- No partner programme; open code and open downloads
- Multi-tenancy and self-service3
- Organisations and locations with RBAC; no portal for requesters
- API and infrastructure-as-code3.5
- REST API, Hammer CLI and foreman-ansible-modules; no Terraform provider found
- Skills and certification2
- Community documentation; certification exists only for Red Hat Satellite
Alternatives to Foreman
Questions about Foreman
Is Foreman any good?
Foreman ranks #19 of 28 infrastructure automation tools in the Infrastructure Automation Ledger 2026, with a Ledger Index of 52 out of 100. Its strongest areas are bare metal and day-2 operations. Its weakest are ai assistance, state, planning and safety, configuration management depth.
What are the best alternatives to Foreman?
The closest by Ledger Index are Satellite (52.5), Semaphore UI (53.3), CFEngine (54.1), Terragrunt (54.3).
How much lock-in does Foreman bring?
Foreman scores 8 out of 25 on technical lock-in (lower is better). Export path: API and Hammer export everything; no export to another provisioning tool.
User reviews of Foreman
No reviews yet
Be the first to say how Foreman worked for you.
Write a review
No account needed and no email asked. We read every review before it appears and remove adverts, spam and personal attacks.