The pioneering open-source configuration management tool - now continued by the community as OpenVox.
Puppet pioneered declarative, model-driven configuration management: agents pull their desired state from a central server and enforce it across Linux, Unix and Windows fleets, with thousands of ready-made modules on the Puppet Forge. The source code remains Apache-2.0, but Perforce moved new builds behind a EULA in early 2025 and open-source Puppet 7 reached end of life in April 2025. The codebase continues as the community fork OpenVox, which is the maintained migration path. Open-source Puppet receives no further updates, including the critical November 2026 security fixes - see our coverage.
Screenshot: a Puppet agent run from 2014 by Puppet Labs (Apache License 2.0, via Wikimedia Commons).
Describe the desired state in Puppet code; agents enforce it idempotently on every run.
Puppet Server compiles catalogs; PuppetDB stores facts, reports and inventory data.
Thousands of ready-made community modules for common services and applications.
Agents for Linux, Unix and Windows systems; server components run on Linux.
The source code remains under the Apache License 2.0, but Perforce no longer publishes updated open-source builds. New development ships as the proprietary Puppet Core, free only up to 25 nodes under a EULA.
No. Open-source Puppet 7 reached end of life in April 2025 and receives no updates, including fixes for the critical November 2026 vulnerabilities. The Vox Pupuli community continues the codebase as OpenVox.
OpenVox, the free community fork maintained by Vox Pupuli. Migration guides cover the move from Puppet 7 to OpenVox 8 and then to OpenVox 9.