Foreman
theforeman.org
What it is
Foreman is a free, open-source lifecycle management tool for physical and virtual servers. System administrators can use it to automate repetitive tasks, deploy applications, and manage on-premise or cloud systems. It provisions bare-metal machines and resources from providers including Amazon EC2, Google Compute Engine, OpenStack, Libvirt, oVirt, and VMware. Configuration integrations include Puppet, Ansible, Chef, and Salt; Foreman also collects Ansible reports and facts. Administrators can work through a web frontend, REST API, or Linux CLI, including Hammer CLI access to API calls. Role-based access control and integrations such as LDAP, FreeIPA, and Microsoft Active Directory support access management. Host groups, bulk management, health reports, and audits help organize systems and review changes. A typical deployment has a Foreman server, Smart Proxy servers, and managed hosts. The quickstart lists Enterprise Linux 9, Debian 12 and 13, and Ubuntu 22.04 and 24.04, and requires 4 GB of memory. Installation configures multiple system components, and setup requires Linux system administration knowledge.
Spec sheet
- Purpose
- Foreman is an open-source tool for managing servers through provisioning, configuration, orchestration, and monitoring.Read 1 Oct 2026 · theforeman.org
- Intended users
- Foreman is aimed at system administrators, and the project says getting started requires a degree of Linux system administration knowledge.Read 1 Oct 2026 · theforeman.org
- Support
- Community support is available through the Discourse support board and a public Matrix room; the project says its support room is not an official support channel.Read 1 Oct 2026 · theforeman.org
- Access control
- Foreman provides role-based access control and can use LDAP or FreeIPA for authentication and authorization.Read 30 Sep 2026 · theforeman.org
- Access controls
- Foreman supports fine-grained role-based access control and authentication integrations including LDAP, FreeIPA, and Microsoft Active Directory.Read 1 Oct 2026 · theforeman.org
- Architecture
- A typical Foreman deployment contains a Foreman server, Smart Proxy servers, and managed hosts.Read 30 Sep 2026 · docs.theforeman.org
- Auditing
- Foreman includes an audits system that records how, who, and when changes occurred.Read 30 Sep 2026 · theforeman.org
- Automation
- Foreman helps system administrators automate repetitive tasks, deploy applications, and manage servers on-premise or in the cloud.Read 30 Sep 2026 · theforeman.org
- CLI
- The Hammer CLI provides access to Foreman API calls for administration and automation.Read 30 Sep 2026 · theforeman.org
- Cloud integrations
- The product page lists Amazon EC2, Google Compute Engine, OpenStack, Libvirt, oVirt, VMware, and other providers for hybrid cloud management.Read 1 Oct 2026 · theforeman.org
- Configuration integrations
- Foreman supports Puppet, Ansible, Chef, and Salt for configuration management.Read 1 Oct 2026 · theforeman.org
- Configuration management
- Foreman includes configuration management support for Puppet and Salt and collects Ansible reports and facts.Read 30 Sep 2026 · theforeman.org
- Extensibility
- Foreman has a pluggable architecture that allows it to be extended in many directions.Read 30 Sep 2026 · theforeman.org
- Installation platforms
- The Foreman 5.0 quickstart lists Enterprise Linux 9, Debian 12 and 13, and Ubuntu 22.04 and 24.04 as supported platforms.Read 1 Oct 2026 · theforeman.org
- Installation requirements
- The quickstart says installation requires 4 GB of memory and warns that the installer configures multiple system components.Read 1 Oct 2026 · theforeman.org
- Inventory and audits
- Foreman supports host groups and bulk management, and provides historical changes for auditing or troubleshooting.Read 1 Oct 2026 · theforeman.org
- Management interfaces
- Foreman provides a web frontend, a RESTful API, and a CLI for Linux.Read 1 Oct 2026 · theforeman.org
- Monitoring
- Foreman reports show what happened on nodes and indicate which hosts are healthy or outdated.Read 30 Sep 2026 · theforeman.org
- Project history
- Ohad Levy created an empty Rails project and named it the Foreman project on July 15, 2009.Read 30 Sep 2026 · theforeman.org
- Provisioning
- Foreman provisions bare-metal systems and instances across virtualization environments and public or private clouds.Read 1 Oct 2026 · theforeman.org
- REST API
- Foreman provides a RESTful API for tasks such as registering hosts and assigning user roles.Read 30 Sep 2026 · theforeman.org
- Security compliance
- Smart Proxy can perform OpenSCAP security compliance scans on hosts and upload compliance reports to Foreman.Read 30 Sep 2026 · docs.theforeman.org
- Security limitation
- Foreman can run on a FIPS-enabled host, but Foreman itself is not FIPS-certified.Read 30 Sep 2026 · docs.theforeman.org
- Security process
- The project accepts vulnerability reports privately and says it aims to fix high-severity issues in the current stable release.Read 1 Oct 2026 · theforeman.org
- Server scale
- The project says Foreman is used by organizations managing from tens to tens of thousands of servers.Read 1 Oct 2026 · theforeman.org
- Supported server platform
- Foreman server and Smart Proxy servers can run on Enterprise Linux 9, and community packages are provided only for x86_64.Read 30 Sep 2026 · docs.theforeman.org
Plans and prices
Strong points and limits
Strong points
- Free and open-source self-managed installation
- Provisions bare metal and cloud resources
- Web frontend, REST API, and Linux CLI
- Supports Puppet, Ansible, Chef, and Salt
- Audits record who changed what and when
Limits
- Requires Linux system administration knowledge
- Quickstart requires 4 GB of memory
- Foreman itself is not FIPS-certified
Who it suits
Foreman is aimed at system administrators managing physical or virtual infrastructure across on-premise and cloud environments. It suits teams comfortable with Linux administration and self-managed installation.
Verdict
Foreman brings provisioning, configuration integrations, access controls, and auditing into a server-management tool. Its self-managed installation and Linux administration requirements are important considerations before adoption.
Where Specifiction places it
- IT Automation Software#10 of 778.8
- IT Configuration Management Software#4 of 278.7
- Bare Metal as a Service (BMaaS) Software#2 of 128.8
- OS Deployment Software#5 of 298.6
- Bare Metal Provisioning Software#5 of 288.7
- Orchestration / Provisioning Software#5 of 278.7
- OS Imaging & Deployment Software#5 of 248.6
- Data Center Automation#6 of 228.6