CFEngine vs pyinfra

CFEngine automates infrastructure, security, and compliance by moving managed systems toward a state defined in policy. Users describe desired infrastructure states in CFEngine’s domain-specific language, and lightweight agents work to bring each device into compliance. By default, an agent contacts the CFEngine hub every five minutes. The system runs on embedded devices, servers, cloud systems, and mainframes, and is designed for tens or hundreds of thousands of nodes. Enterprise adds the Mission Portal web interface, reporting backed by an SQL database, REST APIs, compliance reports, policy analysis, alerts, inventory and change reporting, file-integrity monitoring, and performance monitoring. Dashboards provide compliance and performance views, alerts, and customizable sharing. Secure bootstrap uses mutual authentication, key exchange, and encrypted TLS communication. Community Edition is free under GNU GPL, supports Linux, and includes community support. Enterprise is free for up to 25 hosts; pricing beyond that is available on request. The supported operating systems listed include Linux distributions and Windows.

pyinfra is a free, Python-native tool for automating infrastructure across servers. It connects over SSH to run commands concurrently and idempotently, using Python deploys and inventories. Operations can describe a desired host state or issue specific commands, and `--dry` previews per-host changes before applying them. The project says it works from one host to 10,000, with parallel execution and real-time output. Target machines need a shell and SSH, but no agent, daemon, state file, or control plane. Documented connectors include SSH, Docker, Terraform, and the local machine; operations cover package managers, files, services, databases, security, and containers. It runs wherever Python runs, with Mac, Linux, and Windows listed as control systems. Python 3.10 or later is required; pyinfra 3.5.1 and later supports Python 3.10 through 3.13. The software is MIT licensed. The installation guidance recommends keeping pyinfra and its dependencies current and installing as a regular user rather than as root or with sudo. Help is directed to Matrix and Stack Overflow, while bug reports go to GitHub issues.