Canonical Landscape vs CFEngine

Canonical Landscape manages Ubuntu desktops, servers, cloud instances, IoT devices, and other Ubuntu systems from a central portal. Administrators can handle updates, packages and repositories, run scripts remotely, set role-based access, and monitor machines. It can alert on updates and graph temperature, disk and memory use, system load, and custom metrics. One instance can manage up to 40,000 machines, with options to scale further. Deployment choices are Canonical-hosted SaaS, Managed Landscape, and self-hosted software; SaaS is bundled with Ubuntu Pro. A free SaaS account with Ubuntu Pro covers up to five machines. Managed Landscape costs $6,861 a year per physical machine on public clouds, VMware, OpenStack, or LXD, or $9,470 a year per physical machine on bare metal. No self-hosted price is listed; Ubuntu Pro is its main licensing mechanism. Landscape has a scriptable API and can integrate with configuration management, monitoring, and ticketing systems. Self-hosting requires the organization to install, host, and maintain it. SaaS does not currently offer repository mirroring or custom external identity-provider configuration.

CFEngine automates infrastructure, security, and compliance by moving managed systems toward a state defined in policy. Users describe desired infrastructure states in CFEngine’s domain-specific language, and lightweight agents work to bring each device into compliance. By default, an agent contacts the CFEngine hub every five minutes. The system runs on embedded devices, servers, cloud systems, and mainframes, and is designed for tens or hundreds of thousands of nodes. Enterprise adds the Mission Portal web interface, reporting backed by an SQL database, REST APIs, compliance reports, policy analysis, alerts, inventory and change reporting, file-integrity monitoring, and performance monitoring. Dashboards provide compliance and performance views, alerts, and customizable sharing. Secure bootstrap uses mutual authentication, key exchange, and encrypted TLS communication. Community Edition is free under GNU GPL, supports Linux, and includes community support. Enterprise is free for up to 25 hosts; pricing beyond that is available on request. The supported operating systems listed include Linux distributions and Windows.