Before Salt can be used for provisioning on the desired machine, the binaries need to be
installed. Since Salt supports many different distributions and versions of operating systems,
the Salt installation process is handled by this shell script bootstrap-salt.sh
. This
script runs through a series of checks to determine operating system type and version to then
install the Salt binaries using the appropriate methods.
Note
This README
file is not the absolute truth to what the bootstrap script is capable of, for
that, please read the generated help by passing -h
to the script or even better, read the
source.
In case you found a bug, please read I Found a Bug first before submitting a new issue. The examples there show how to get the latest development version of the bootstrap script. Chances are high that your issue was already fixed.
If you're looking for the one-liner to install Salt, please scroll to the bottom and use the instructions for Installing via an Insecure One-Liner.
Note
In every two-step example, you would be well-served to examine the downloaded file and examine it to ensure that it does what you expect.
The Salt Bootstrap script has a wide variety of options that can be passed as well as several ways of obtaining the bootstrap script itself.
Note
These examples below show how to bootstrap Salt directly from GitHub or other Git repository. Run the script without any parameters to get latest stable Salt packages for your system from SaltStack corporate repository. See first example in the Install using wget section.
Using curl
to install latest development version from GitHub:
curl -o bootstrap_salt.sh -L https://bootstrap.saltstack.com
sudo sh bootstrap_salt.sh git develop
If you want to install a specific release version (based on the Git tags):
curl -o bootstrap_salt.sh -L https://bootstrap.saltstack.com
sudo sh bootstrap_salt.sh git v2016.3.2
To install a specific branch from a Git fork:
curl -o bootstrap_salt.sh -L https://bootstrap.saltstack.com
sudo sh bootstrap_salt.sh -g https://github.com/myuser/salt.git git mybranch
If all you want is to install a salt-master
using latest Git:
curl -o bootstrap_salt.sh -L https://bootstrap.saltstack.com
sudo sh bootstrap_salt.sh -M -N git develop
If your host has Internet access only via HTTP proxy:
PROXY='http://user:[email protected]:3128'
curl -o bootstrap_salt.sh -L -x "$PROXY" https://bootstrap.saltstack.com
sudo sh bootstrap_salt.sh -H "$PROXY" git
Using wget
to install your distribution's stable packages:
wget -O bootstrap_salt.sh https://bootstrap.saltstack.com
sudo sh bootstrap_salt.sh
Installing a specific version from git using wget
:
wget -O bootstrap_salt.sh https://bootstrap.saltstack.com
sudo sh bootstrap_salt.sh -P git v2015.8.11
Note
On the above example we added -P which will allow PIP packages to be installed if required but it's not a necessary flag for Git based bootstraps.
If you already have Python installed, python 2.6
, then it's as easy as:
python -m urllib "https://bootstrap.saltstack.com" > bootstrap_salt.sh
sudo sh bootstrap_salt.sh git develop
All Python versions should support the following in-line code:
python -c 'import urllib; print urllib.urlopen("https://bootstrap.saltstack.com").read()' > bootstrap_salt.sh
sudo sh bootstrap_salt.sh git develop
On a FreeBSD base system you usually don't have either of the above binaries available. You do
have fetch
available though:
fetch -o bootstrap_salt.sh https://bootstrap.saltstack.com
sudo sh bootstrap_salt.sh
If you have any SSL issues install ca_root_nssp
:
pkg install ca_root_nssp
And either copy the certificates to the place where fetch can find them:
cp /usr/local/share/certs/ca-root-nss.crt /etc/ssl/cert.pem
Or link them to the right place:
ln -s /usr/local/share/certs/ca-root-nss.crt /etc/ssl/cert.pem
The following examples illustrate how to install Salt via a one-liner.
Note
Warning! These methods do not involve a verification step and assume that the delivered file is trustworthy.
Any of the example above which use two-lines can be made to run in a single-line configuration with minor modifications.
Installing the latest stable release of Salt (default):
curl -L https://bootstrap.saltstack.com | sudo sh
Using wget
to install your distribution's stable packages:
wget -O - https://bootstrap.saltstack.com | sudo sh
Installing the latest develop branch of Salt:
curl -L https://bootstrap.saltstack.com | sudo sh -s -- git develop
Note
Bootstrap may fail to install Salt on the cutting-edge version of distributions with frequent release cycle, such as: Amazon Linux, Fedora, openSUSE Tumbleweed or Ubuntu non-LTS. Check the versions from the list below. Also, see the Unsupported Distro and Adding Support for Other Operating Systems sections.
- Debian GNU/Linux 7/8
- Linux Mint Debian Edition 1 (based on Debian 8)
- Kali Linux 1.0 (based on Debian 7)
- Raspbian 8 (limited support for
armhf
architecture, see the note below)
Note
Installation of Salt packages on Debian 8 based distribution from repo.saltstack.com repository
is currently supported for amd64
(x86-64
) and armhf
architechtures ONLY. Use git
bootstrap mode as described above to install Salt on other architechtures, such as i386
or
armel
. You also may need to disable repository configuration and allow pip
installations
by providing -r
and -P
options to the bootstrap script, i.e.:
wget -O - https://bootstrap.saltstack.com | sudo sh -s -- -r -P git develop
- Amazon Linux 2012.09/2013.03/2013.09/2014.03/2014.09
- CentOS 5/6/7
- Fedora 17/18/20/21/22
- Oracle Linux 5/6/7
- Red Hat Enterprise Linux 5/6/7
- Scientific Linux 5/6/7
- openSUSE 12/13
- openSUSE Leap 42
- openSUSE Tumbleweed 2015
- SUSE Linux Enterprise Server 11 SP1/11 SP2/11 SP3/12
- Elementary OS 0.2 (based on Ubuntu 12.04)
- Linaro 12.04
- Linux Mint 13/14/16/17/18
- Trisquel GNU/Linux 6 (based on Ubuntu 12.04)
- Ubuntu 10.x/11.x/12.x/13.x/14.x/15.x/16.04
- Arch Linux
- Gentoo
BSD:
- OpenBSD (
pip
installation) - FreeBSD 9/10/11
SunOS:
- SmartOS
You found a Linux distribution which we still do not support or we do not correctly identify? Please run the following commands and report their output when creating a ticket:
sudo find /etc/ -name \*-release -print -exec cat {} \;
command lsb_release -a
The following operating systems are detected, but Salt and its dependencies installation functions are not developed yet:
BSD:
- NetBSD
Linux:
- Slackware
SunOS
- OpenIndiana
- Oracle Solaris
- OmniOS (Illumos)
In order to install Salt for a distribution you need to define:
- To Install Dependencies, which is required, one of:
install_<distro>_<major_version>_<install_type>_deps
install_<distro>_<major_version>_<minor_version>_<install_type>_deps
install_<distro>_<major_version>_deps
install_<distro>_<major_version>_<minor_version>_deps
install_<distro>_<install_type>_deps
install_<distro>_deps
- Optionally, define a minion configuration function, which will be called if the
-c
option is passed. One of:
config_<distro>_<major_version>_<install_type>_salt
config_<distro>_<major_version>_<minor_version>_<install_type>_salt
config_<distro>_<major_version>_salt
config_<distro>_<major_version>_<minor_version>_salt
config_<distro>_<install_type>_salt
config_<distro>_salt
config_salt [THIS ONE IS ALREADY DEFINED AS THE DEFAULT]
- Optionally, define a Salt master pre-seed function, which will be called if the
-k
(pre-seed master keys) option is passed. One of:
preseed_<distro>_<major_version>_<install_type>_master
preseed_<distro>_<major_version>_<minor_version>_<install_type>_master
preseed_<distro>_<major_version>_master
preseed_<distro>_<major_version>_<minor_version>_master
preseed_<distro>_<install_type>_master
preseed_<distro>_master
preseed_master [THIS ONE IS ALREADY DEFINED AS THE DEFAULT]
- To install salt, which, of course, is required, one of:
install_<distro>_<major_version>_<install_type>
install_<distro>_<major_version>_<minor_version>_<install_type>
install_<distro>_<install_type>
- Optionally, define a post install function, one of:
install_<distro>_<major_version>_<install_type>_post
install_<distro>_<major_version>_<minor_version>_<install_type>_post
install_<distro>_<major_version>_post
install_<distro>_<major_version>_<minor_version>_post
install_<distro>_<install_type>_post
install_<distro>_post
- Optionally, define a start daemons function, one of:
install_<distro>_<major_version>_<install_type>_restart_daemons
install_<distro>_<major_version>_<minor_version>_<install_type>_restart_daemons
install_<distro>_<major_version>_restart_daemons
install_<distro>_<major_version>_<minor_version>_restart_daemons
install_<distro>_<install_type>_restart_daemons
install_<distro>_restart_daemons
Attention!
The start daemons function should be able to restart any daemons which are running, or start if they're not running.
- Optionally, define a daemons running function, one of:
daemons_running_<distro>_<major_version>_<install_type>
daemons_running_<distro>_<major_version>_<minor_version>_<install_type>
daemons_running_<distro>_<major_version>
daemons_running_<distro>_<major_version>_<minor_version>
daemons_running_<distro>_<install_type>
daemons_running_<distro>
daemons_running [THIS ONE IS ALREADY DEFINED AS THE DEFAULT]
- Optionally, check enabled Services:
install_<distro>_<major_version>_<install_type>_check_services
install_<distro>_<major_version>_<minor_version>_<install_type>_check_services
install_<distro>_<major_version>_check_services
install_<distro>_<major_version>_<minor_version>_check_services
install_<distro>_<install_type>_check_services
install_<distro>_check_services
Below is an example for Ubuntu Oneiric (the example may not be up to date with the script):
install_ubuntu_11_10_deps() {
apt-get update
apt-get -y install python-software-properties
add-apt-repository -y 'deb http://us.archive.ubuntu.com/ubuntu/ oneiric universe'
add-apt-repository -y ppa:saltstack/salt
}
install_ubuntu_11_10_post() {
add-apt-repository -y --remove 'deb http://us.archive.ubuntu.com/ubuntu/ oneiric universe'
}
install_ubuntu_stable() {
apt-get -y install salt-minion
}
install_ubuntu_restart_daemons() {
for fname in minion master syndic; do
# Skip if not meant to be installed
[ $fname = "minion" ] && [ $INSTALL_MINION -eq $BS_FALSE ] && continue
[ $fname = "master" ] && [ $INSTALL_MASTER -eq $BS_FALSE ] && continue
[ $fname = "syndic" ] && [ $INSTALL_SYNDIC -eq $BS_FALSE ] && continue
if [ -f /sbin/initctl ]; then
# We have upstart support
/sbin/initctl status salt-$fname > /dev/null 2>&1
if [ $? -eq 0 ]; then
# upstart knows about this service, let's stop and start it.
# We could restart but earlier versions of the upstart script
# did not support restart, so, it's safer this way
/sbin/initctl stop salt-$fname > /dev/null 2>&1
/sbin/initctl start salt-$fname > /dev/null 2>&1
[ $? -eq 0 ] && continue
# We failed to start the service, let's test the SysV code bellow
fi
fi
/etc/init.d/salt-$fname stop > /dev/null 2>&1
/etc/init.d/salt-$fname start
done
}
Since there is no install_ubuntu_11_10_stable()
it defaults to the unspecified version script.
The bootstrapping script must be plain POSIX sh
only, not bash
or another shell script.
By design the targeting for each operating system and version is very specific. Assumptions of
supported versions or variants should not be made, to avoid failed or broken installations.
If you found a possible problem, or bug, please try to bootstrap using the develop version. The issue you are having might have already been fixed and it's just not yet included in the stable version.
curl -o bootstrap_salt.sh -L https://bootstrap.saltstack.com/develop
sudo sh bootstrap_salt.sh git develop
Or the insecure one liner:
curl -L https://bootstrap.saltstack.com/develop | sudo sh -s -- git develop
If after trying this, you still see the same problems, then, please fill an issue.
You can use Vagrant to easily test changes on a clean machine. The Vagrantfile
defaults to an
Ubuntu box. First, install Vagrant, then:
vagrant up
vagrant ssh
Also you are able to run and use Salt inside Docker container on Linux machine.
Let's prepare the Docker image using provided Dockerfile
to install both Salt Master and Minion
with the bootstrap script:
docker build -t local/salt-bootstrap .
Start your new container with Salt services up and running:
docker run --detach --name salt --hostname salt local/salt-bootstrap
And finally "enter" the running container and make Salt fully operational:
docker exec -i -t salt /bin/bash
salt-key -A -y
Salt is ready and working in the Docker container with Minion authenticated on Master.
Note
The Dockerfile
here inherits Ubuntu 14.04 public image with Upstart configured as init system.
Consider it as an example or starting point of how to make your own Docker images with suitable
Salt components, custom configurations and even pre-accepted Minion key already installed.