← Back to home
Comparison · Infra & APIs

Cobbler vs Pacemaker

A side-by-side editorial comparison of Cobbler and Pacemaker — release velocity, themes, recent moves, and the top alternatives to consider.

Cobbler vs Pacemaker: at a glance

FeatureCobblerPacemaker
SectorInfra & APIsInfra & APIs
Velocity score0.06.3
Sparks · 30d01
Top themesprovisioning, backport-branch, cve-backports, distro-packaginghigh availability, cluster security, tls authentication, dual branch releases
Last editorial update2h ago3h ago
WebsiteVisit →Visit →

What is Cobbler?

A backport branch kept alive for downstreams, with the main line nowhere in sight.

Every release in Cobbler's visible history describes itself the same way: backports from main to make Cobbler more stable for the community. The 3.3.x line has absorbed real work under that framing — collection indices, lazy loading, new XML-RPC endpoints — but none of it originates here. The most recent item is a 3.2.3 build carrying the CVE-2024-47533 fix to an older branch, with its Fixed and Added sections left as literal TBD placeholders.

Read the full Cobbler trajectory →

What is Pacemaker?

Pacemaker is putting TLS and X509 auth between its cluster nodes, then hardening the wire code.

Two branches ship in parallel: the 3.0.x line carrying new work and 2.1.x taking backported fixes. The 3.0 series added TLS for Pacemaker Remote nodes, X509 authentication, TLS certificates for remote CIB operations, and then PSK authentication for those same operations, alongside large-IPC and multipart message support. The most recent releases on both branches are the same security train, fixing CVE-2026-10649 and a set of integer overflows and size checks in the remote message code.

Read the full Pacemaker trajectory →

Cobbler vs Pacemaker: editorial side-by-side

C
Cobbler
INFRA · APIS
0.0

A backport branch kept alive for downstreams, with the main line nowhere in sight.

◆ Current state

Every release in Cobbler's visible history describes itself the same way: backports from main to make Cobbler more stable for the community. The 3.3.x line has absorbed real work under that framing — collection indices, lazy loading, new XML-RPC endpoints — but none of it originates here. The most recent item is a 3.2.3 build carrying the CVE-2024-47533 fix to an older branch, with its Fixed and Added sections left as literal TBD placeholders.

◆ Where it's heading

This is a stabilization branch serving downstream packagers rather than a product advancing on its own. The work that does land splits cleanly into three buckets: distribution coverage (Ubuntu 22.04, Debian 12, AlmaLinux, RHEL9, openSUSE and SLE signatures), API surface for integrators, and security backports. 3.3.3 flagged dump_vars as the replacement for get_blended_data as of 3.4.0 — a version that has not appeared in any release since.

◆ Prediction

Expect continued single-purpose backports to 3.3.x and older branches as CVEs surface; the entries give no indication of when or whether the 3.4.0 work these releases keep deferring to will ship.

P
Pacemaker
INFRA · APIS
6.3

Pacemaker is putting TLS and X509 auth between its cluster nodes, then hardening the wire code.

◆ Current state

Two branches ship in parallel: the 3.0.x line carrying new work and 2.1.x taking backported fixes. The 3.0 series added TLS for Pacemaker Remote nodes, X509 authentication, TLS certificates for remote CIB operations, and then PSK authentication for those same operations, alongside large-IPC and multipart message support. The most recent releases on both branches are the same security train, fixing CVE-2026-10649 and a set of integer overflows and size checks in the remote message code.

◆ Where it's heading

The cluster's internal transport is being rebuilt on the assumption that the network between nodes is not trusted. Authentication and encryption arrived first, and the fixes that followed, overflow guards and a maximum remote message size, are the hardening pass on the same code paths. Release discipline is heavy and visible: each version ships a release candidate with an identical commit set days earlier, and every 3.0 release documents the regressions it introduced and where they were fixed.

◆ Prediction

Remote CIB operations now support both X509 certificates and PSK, and the recent fixes all sit in message framing and size limits; further work is most likely to continue in that message-handling code rather than adding another authentication mechanism.

Alternatives to Cobbler and Pacemaker

Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Cobbler or Pacemaker.

See all Cobbler alternatives → · See all Pacemaker alternatives →

Recent activity from Cobbler and Pacemaker

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 11d agoPacemaker3.0.3: CVE-2026-10649 and remote message overflow fixes
  2. 28d agoPacemaker3.0.2: PSK auth for remote CIB operations
  3. 28d agoPacemaker3.0.1: TLS and X509 authentication for Pacemaker Remote
  4. 28d agoPacemaker3.0.3-rc1: release candidate for the CVE fix set
  5. 1mo agoCobblerCobbler 3.2.3 backports the CVE-2024-47533 admin API fix
  6. 1mo agoPacemaker2.1.11: CVE-2026-10649 backported to the maintenance branch
  7. 1mo agoPacemaker2.1.11-rc1: release candidate for the 2.1 CVE backport
  8. 1y agoCobblerCobbler 3.3.7 closes an admin-API authentication bypass
  9. 2y agoCobblerCobbler 3.3.6 adds EFI support to buildiso
  10. 2y agoCobblerCobbler 3.3.5 adds collection indices and lazy loading
  11. 2y agoCobblerCobbler 3.3.4 extends packaging to Ubuntu 22.04 and Debian 12
  12. 4y agoCobblerCobbler 3.3.3 adds resolved-value XML-RPC endpoints for Uyuni

Frequently asked questions

What is the difference between Cobbler and Pacemaker?

They serve adjacent needs but don't currently overlap on shipped themes. Pacemaker is currently shipping more aggressively (velocity 6.3 vs 0.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is Cobbler better than Pacemaker?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Pacemaker is currently shipping more aggressively (velocity 6.3 vs 0.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.

What are the best alternatives to Cobbler?

Top Cobbler alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Cobbler alternatives" section above for the current picks, or visit /alternatives/cobbler for the full list with editorial commentary on each.

What are the best alternatives to Pacemaker?

Top Pacemaker alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Pacemaker alternatives" section above for the current picks, or visit /alternatives/pacemaker for the full list with editorial commentary on each.