This document catalogs potential management utilities for a deployment of Fedora-based desktops.
- Reporting on enrolled machine compliance
- Reporting on applied security updates
- Operable against SaaS (e.g. hosted Chef, Azure AD) or lightweight cloud services (S3)
- Can remediate security configuration, not just audit
- Has provisioning-friendly design to accelerate new machine setup by IT
- Can configure setups like GPG smart card support and GPG-SSH agent integration
- Can support Windows or Mac desktops as well
- Used by other organizations to management developer desktops
- Requires deployment of a complex, self-managed server (e.g. FreeIPA)
Fleet Commander provides desktop management in a form similar to Microsoft's Group Policy tools. However, because it stores the data differently than Group Policy, it cannot rely on a standard Windows Server (or Azure AD Domain Services) deployment; it must use FreeIPA. FreeIPA also supports Windows.
The Foreman is primarily based on Puppet and can aggregate OpenSCAP results.
Spacewalk seems maintained but mostly deprecated in favor of The Foreman (with Katello).