Infrastructure operations

Fleet intelligence becomes room-aware command and remote support.

FreeSCIM connects identity authority to physical Linux workstations through reviewed Foreman inventory, Puppet facts, rooms, seats, power state, network reachability, jump paths, SSH, VNC, and Guacamole readiness.

Foreman inventoryPuppet factsper-seat WoLSSH / VNCjump relays
FreeSCIM classroom floor plan showing workstation health, SSH, VNC, and Wake-on-LAN controls

Infrastructure signals joined into one operator surface

Foreman
PuppetPuppet
Red HatRHEL
FreeIPA
LinuxLinux
Apache GuacamoleGuacamole
OpenSSH
Remote console
Command surfaces

See the room. Select the seat. Understand the path.

The interface can move from fleet context to a physical workstation without losing inventory provenance, current health, authorization, relay choice, or evidence.

ROOM

Classroom and floor-plan views

Room cards, grouped hosts, floor plans, per-seat health, power state, console readiness, and data provenance make the physical estate legible.

buildingroomseathealthprovenance
PWR

Per-seat power

Room-aware WoL plus bounded SSH reboot and power-off paths with reasons and audit evidence.

WoLrebootpower-off
FACT

Foreman and Puppet enrichment

Host identity, interfaces, MAC addresses, host groups, operating-system facts, environment context, and readiness enrich the workstation model.

dry-run importbackupconflict detection
RMT

Remote console planning

Inventory-driven SSH and VNC plans, tokenized Guacamole launches, jump-vantage probes, and dedicated relay selection.

guacdjumplaunch token
VNC

On-demand VNC vortex

VNC activation and jump-spoke creation occur only when needed instead of leaving a fleet-wide listener exposed.

ephemeralboundedaudited
Room-aware FreeSCIM workstation operations surface
Actual relay vantage

Launchability is tested from the path that will carry the session.

A workstation can appear reachable from the application while remaining unreachable from the relay that must serve it. FreeSCIM evaluates console readiness from the dedicated jump and guacd path, then records the selected relay, blocker, and operator context.

01

Application to jumpControl-plane reachability, relay identity, authorization, and service readiness.

02

Jump to seatReal SSH or VNC reachability from the network vantage that matters.

03

Launch and evidenceTokenized session, selected path, action owner, outcome, and remediation.

Safety model

Powerful actions stay precise, attributable, and bounded.

The platform is deliberately not a giant unrestricted “control everything” button. Each action is scoped to the right host, relay, authority, and reason.

Per-seat before bulkPrecise workstation actions can remain available while room-wide wake stays disabled.
Explicit authorizationPower and console actions require the correct role, path, and evidence.
Secrets outside codeRemote credentials and deployment keys remain outside the public repository.
Identity separationDisposable guest identities remain distinct from scoped support service identities.
State provenanceConfigured, cached, and live endpoint states are visibly labeled.
Reason and outcomeThe selected action, operator, reason, result, and blocker are recorded together.
A true infrastructure control plane

Identity context reaches the physical workstation.

FreeSCIM can show which workstation a user may reach, what Foreman and Puppet know about it, whether it is online, how it can be awakened, which jump path reaches it, and how a bounded support session can be opened.

View the full estate graphInspect remote-session evidence