A year or so ago I migrated from cfengine to puppet. Lately I've been less than pleased with puppet. It has issues with using too much memory (especially when recursing directories with many files), it recently broke on any directory string ending in a slash, and version 0.24.4 clients are not compatible with servers before 0.24.4. I took a look around but the landscape hasn't changed much. I suspect bcfg2 might use less resources but I really dislike the idea of using XML configuration files. I'm not sure puppet's syntax is the best either but at least it's relatively concise and powerful. And I'm not going back to cfengine. So I guess puppet remains the best option, but that may not be saying much.