SaltStack Package Repo

Download and install the 3001 release of SaltStack.


These instructions are for an older release of SaltStack. You might want to view instructions for the latest release instead.

Bootstrap works across many platforms and is the easiest way to get started. If you cannot use Bootstrap or if you prefer packages, click the tab for your platform.

Latest release: 3001.3 (November 3, 2020)

SALT CVE

SaltStack has identified three CVE’s that need your attention. For more information, click here
CVE-2020-16846
CVE-2020-17490
CVE-2020-25592
Patches can be found in the salt-patches repository on GitLab

ARCHIVE.REPO.SALTSTACK.COM

SEP 22 was accepted which means that all unsupported and CVE affected releases have been moved to https://archive.repo.saltstack.com. If you get 404 errors from your package manager, the release you were using probably moved there. Please consider upgrading to a supported version of Salt. Click here for more information.

UPGRADE FROM PYCRYPTO

For Salt releases before 3001, the PyCrypto library provided by your system packages is likely unmaintained and insecure. SaltStack strongly recommends upgrading to a more maintained library. See Hardening Salt for more info. Starting with Salt version 3001, either Pycryptodome, Pycryptodomex, or M2Crypto is installed as a dependency of Salt.

PYTHON 2.7 DEPRECATED

In light of Python 2.7 reaching its End of Life (EOL) on Jan 1st 2020, Python 2 has been deprecated and is not longer supported starting with the 3001 release.




Bootstrap - Multi-Platform

Salt Bootstrap is a shell script that detects the target platform and selects the best installation method. (Supported Platforms)

On the Salt master

Run these commands on the system that you want to use as the central management point.

curl -L https://bootstrap.saltstack.com -o install_salt.sh
sudo sh install_salt.sh -P -M -x python3

Your Salt master can manage itself, so a Salt minion is installed along with the Salt master. If you do not want to install the minion, also pass the -N option.

On each Salt minion

Run these commands on each system that you want to manage using Salt.

curl -L https://bootstrap.saltstack.com -o install_salt.sh
sudo sh install_salt.sh -P -x python3

Post-installation configuration


Debian 10 (buster) PY3

Debian 9 (stretch) PY3

Installs the latest release. Updating installs the latest minor release but not a new major version.

  1. Run the following command to import the SaltStack repository key:
    wget -O - https://repo.saltstack.com/py3/debian/10/amd64/3001/SALTSTACK-GPG-KEY.pub | sudo apt-key add -
    wget -O - https://repo.saltstack.com/py3/debian/9/amd64/3001/SALTSTACK-GPG-KEY.pub | sudo apt-key add -
  2. Save the following file to /etc/apt/sources.list.d/saltstack.list:
    deb http://repo.saltstack.com/py3/debian/10/amd64/3001 buster main
    deb http://repo.saltstack.com/py3/debian/9/amd64/3001 stretch main
  3. Run sudo apt-get update

  4. Install the salt-minion, salt-master, or other Salt components:
    • sudo apt-get install salt-master
    • sudo apt-get install salt-minion
    • sudo apt-get install salt-ssh
    • sudo apt-get install salt-syndic
    • sudo apt-get install salt-cloud
    • sudo apt-get install salt-api
  5. (Upgrade only) Restart all upgraded services, for example:
    sudo systemctl restart salt-minion
    sudo systemctl restart salt-minion

Post-installation configuration


  1. Run the following command to import the SaltStack repository key:
    wget -O - https://repo.saltstack.com/py3/debian/10/amd64/archive/3001.3/SALTSTACK-GPG-KEY.pub | sudo apt-key add -
    wget -O - https://repo.saltstack.com/py3/debian/9/amd64/archive/3001.3/SALTSTACK-GPG-KEY.pub | sudo apt-key add -
  2. Save the following file to /etc/apt/sources.list.d/saltstack.list:
    deb http://repo.saltstack.com/py3/debian/10/amd64/archive/3001.3 buster main
    deb http://repo.saltstack.com/py3/debian/9/amd64/archive/3001.3 stretch main
  3. Run sudo apt-get update

  4. Install the salt-minion, salt-master, or other Salt components:
    • sudo apt-get install salt-master
    • sudo apt-get install salt-minion
    • sudo apt-get install salt-ssh
    • sudo apt-get install salt-syndic
    • sudo apt-get install salt-cloud
    • sudo apt-get install salt-api
  5. (Upgrade only) Restart all upgraded services, for example:
    sudo systemctl restart salt-minion
    sudo systemctl restart salt-minion

Post-installation configuration


Redhat / CentOS 8 PY3

Redhat / CentOS 7 PY3

Installs the latest release. Updating installs the latest minor release but not a new major version.

  1. Run the following commands to install the SaltStack repository and key:
    sudo yum install https://repo.saltstack.com/py3/redhat/salt-py3-repo-3001.el8.noarch.rpm
    sudo yum install https://repo.saltstack.com/py3/redhat/salt-py3-repo-3001.el7.noarch.rpm 
  2. Run sudo yum clean expire-cache

  3. Install the salt-minion, salt-master, or other Salt components:
    • sudo yum install salt-master
    • sudo yum install salt-minion
    • sudo yum install salt-ssh
    • sudo yum install salt-syndic
    • sudo yum install salt-cloud
    • sudo yum install salt-api
  4. (Upgrade only) Restart all upgraded services, for example:
    sudo systemctl restart salt-minion
    sudo systemctl restart salt-minion

Post-installation configuration


Installs a specific release. Updating doesn’t change the release that is installed.

  1. Run the following commands to install the SaltStack repository and key:

    sudo rpm --import https://repo.saltstack.com/py3/redhat/8/x86_64/archive/3001.3/SALTSTACK-GPG-KEY.pub
    sudo rpm --import https://repo.saltstack.com/py3/redhat/7/x86_64/archive/3001.3/SALTSTACK-GPG-KEY.pub
  2. Save the following file to /etc/yum.repos.d/saltstack.repo:

    [saltstack-repo]
    name=SaltStack repo for RHEL/CentOS 8 PY3
    baseurl=https://repo.saltstack.com/py3/redhat/8/$basearch/archive/3001.3
    enabled=1
    gpgcheck=1
    gpgkey=https://repo.saltstack.com/py3/redhat/8/$basearch/archive/3001.3/SALTSTACK-GPG-KEY.pub
    [saltstack-repo]
    name=SaltStack repo for RHEL/CentOS 7 PY3
    baseurl=https://repo.saltstack.com/py3/redhat/7/$basearch/archive/3001.3
    enabled=1
    gpgcheck=1
    gpgkey=https://repo.saltstack.com/py3/redhat/7/$basearch/archive/3001.3/SALTSTACK-GPG-KEY.pub
  3. Run sudo yum clean expire-cache

  4. Install the salt-minion, salt-master, or other Salt components:
    • sudo yum install salt-master
    • sudo yum install salt-minion
    • sudo yum install salt-ssh
    • sudo yum install salt-syndic
    • sudo yum install salt-cloud
    • sudo yum install salt-api
  5. (Upgrade only) Restart all upgraded services, for example:
    sudo systemctl restart salt-minion
    sudo systemctl restart salt-minion

Post-installation configuration


Ubuntu 20 (focal) PY3

Ubuntu 18 (bionic) PY3

Ubuntu 16 (xenial) PY3

Installs the latest release. Updating installs the latest minor release but not a new major version.

  1. Run the following command to import the SaltStack repository key:
    wget -O - https://repo.saltstack.com/py3/ubuntu/20.04/amd64/3001/SALTSTACK-GPG-KEY.pub | sudo apt-key add -
    wget -O - https://repo.saltstack.com/py3/ubuntu/18.04/amd64/3001/SALTSTACK-GPG-KEY.pub | sudo apt-key add -
    wget -O - https://repo.saltstack.com/py3/ubuntu/16.04/amd64/3001/SALTSTACK-GPG-KEY.pub | sudo apt-key add -
  2. Save the following file to /etc/apt/sources.list.d/saltstack.list:
    deb http://repo.saltstack.com/py3/ubuntu/20.04/amd64/3001 focal main
    deb http://repo.saltstack.com/py3/ubuntu/18.04/amd64/3001 bionic main
    deb http://repo.saltstack.com/py3/ubuntu/16.04/amd64/3001 xenial main
  3. Run sudo apt-get update

  4. Install the salt-minion, salt-master, or other Salt components:
    • sudo apt-get install salt-master
    • sudo apt-get install salt-minion
    • sudo apt-get install salt-ssh
    • sudo apt-get install salt-syndic
    • sudo apt-get install salt-cloud
    • sudo apt-get install salt-api
  5. (Upgrade only) Restart all upgraded services, for example:
    sudo systemctl restart salt-minion
    sudo systemctl restart salt-minion
    sudo systemctl restart salt-minion

Post-installation configuration


Installs a specific release. Updating doesn’t change the release that is installed.

  1. Run the following command to import the SaltStack repository key:
    wget -O - https://repo.saltstack.com/py3/ubuntu/20.04/amd64/archive/3001.3/SALTSTACK-GPG-KEY.pub | sudo apt-key add -
    wget -O - https://repo.saltstack.com/py3/ubuntu/18.04/amd64/archive/3001.3/SALTSTACK-GPG-KEY.pub | sudo apt-key add -
    wget -O - https://repo.saltstack.com/py3/ubuntu/16.04/amd64/archive/3001.3/SALTSTACK-GPG-KEY.pub | sudo apt-key add -
  2. Save the following file to /etc/apt/sources.list.d/saltstack.list:
    deb http://repo.saltstack.com/py3/ubuntu/20.04/amd64/archive/3001.3 focal main
    deb http://repo.saltstack.com/py3/ubuntu/18.04/amd64/archive/3001.3 bionic main
    deb http://repo.saltstack.com/py3/ubuntu/16.04/amd64/archive/3001.3 xenial main
  3. Run sudo apt-get update

  4. Install the salt-minion, salt-master, or other Salt components:
    • sudo apt-get install salt-master
    • sudo apt-get install salt-minion
    • sudo apt-get install salt-ssh
    • sudo apt-get install salt-syndic
    • sudo apt-get install salt-cloud
    • sudo apt-get install salt-api
  5. (Upgrade only) Restart all upgraded services, for example:
    sudo systemctl restart salt-minion
    sudo systemctl restart salt-minion
    sudo systemctl restart salt-minion

Post-installation configuration


SLES 11 SP4

SLES 12

SLES 12 SP1

SLES 12 SP2

SLES 12 SP3

SLES 12 SP4

SLES 15

openSUSE Leap 15.0

openSUSE Leap 15.1

openSUSE Leap 42.2

openSUSE Leap 42.3

openSUSE Tumbleweed

Installs the latest version currently available from SUSE. (These packages are only a mirror from SUSE)

  1. Run the following command to add the SaltStack repository:
    sudo zypper addrepo http://repo.saltstack.com/opensuse/SLE_11_SP4/systemsmanagement:saltstack:products.repo
    sudo zypper addrepo http://repo.saltstack.com/opensuse/SLE_12/systemsmanagement:saltstack:products.repo
    sudo zypper addrepo http://repo.saltstack.com/opensuse/SLE_12_SP1/systemsmanagement:saltstack:products.repo
    sudo zypper addrepo http://repo.saltstack.com/opensuse/SLE_12_SP2/systemsmanagement:saltstack:products.repo
    sudo zypper addrepo http://repo.saltstack.com/opensuse/SLE_12_SP3/systemsmanagement:saltstack:products.repo
    sudo zypper addrepo http://repo.saltstack.com/opensuse/SLE_12_SP4/systemsmanagement:saltstack:products.repo
    sudo zypper addrepo http://repo.saltstack.com/opensuse/SLE_15/systemsmanagement:saltstack:products.repo
    sudo zypper addrepo http://repo.saltstack.com/opensuse/openSUSE_Leap_15.0/systemsmanagement:saltstack:products.repo
    sudo zypper addrepo http://repo.saltstack.com/opensuse/openSUSE_Leap_15.1/systemsmanagement:saltstack:products.repo
    sudo zypper addrepo http://repo.saltstack.com/opensuse/openSUSE_Leap_42.2/systemsmanagement:saltstack:products.repo
    sudo zypper addrepo http://repo.saltstack.com/opensuse/openSUSE_Leap_42.3/systemsmanagement:saltstack:products.repo
    sudo zypper addrepo http://repo.saltstack.com/opensuse/openSUSE_Tumbleweed/systemsmanagement:saltstack:products.repo
  2. Refresh the package list:

    sudo zypper refresh
  3. Install the salt-minion, salt-master, or other Salt components:
    • sudo zypper install salt-master
    • sudo zypper install salt-minion
    • sudo zypper install salt-ssh
    • sudo zypper install salt-syndic
    • sudo zypper install salt-cloud
    • sudo zypper install salt-api
    • sudo zypper install salt-proxy
  4. (Upgrade only) Restart all upgraded services, for example:
    sudo systemctl restart salt-minion

    or

    sudo service salt-minion restart

Post-installation configuration


Fedora 31

Fedora 32

The 3001 branch for Fedora will no longer receive updates since Fedora only receives the latest updates for packages. The latest salt branch will continue to receive updates for Fedora going forward.

  1. Packages are available in the standard Fedora repositories. Install the salt-minion, salt-master, or other Salt components:
    • sudo dnf install salt-master
    • sudo dnf install salt-minion
    • sudo dnf install salt-ssh
    • sudo dnf install salt-syndic
    • sudo dnf install salt-cloud
    • sudo dnf install salt-api

Post-installation configuration


Windows PY3

Windows PY3 MSI

Installation executables:

Silent Installation Options

The installer can be run silently by providing the /S option at the command line. The options /master and /minion-name allow for configuring the master hostname and minion name, respectively. Here’s an example of running a silent installation from the command line:

Salt-Minion-3001.2-Py3-AMD64-Setup.exe /S /master=yoursaltmaster /minion-name=yourminionname

Silent Installation Options

The installer can be run silently by providing the /quiet and /norestart option at the command line. The options MASTER and MINION_ID allow for configuring the master hostname and minion name, respectively. Here’s an example of running a silent installation from the command line:

msiexec /i Salt-Minion-3001.2-Py3-AMD64.msi /quiet /norestart MASTER=yoursaltmaster MINION_ID=yourminionname

Post-installation configuration


macOS PY3

Installation executables:

OS X Gatekeeper settings might prevent installation of the Salt package. If a warning appears during installation, open System Preferences > Security & Privacy > click Open Anyway

Initial Configuration

After the installation completes, run the following to configure the Salt minion ID, the Salt master location, and to start the required services.

sudo salt-config -i yourminionname -m yoursaltmaster

Start and Stop the Minion Service

On OS X, the Salt minion configuration file is in the standard /etc/salt/minion location. To stop the Salt minion, run the following:

sudo launchctl stop com.saltstack.salt.minion

To start the Salt minion, run the following:

sudo launchctl start com.saltstack.salt.minion

Post-installation configuration


Amazon Linux 2 PY3

Installs the latest release. Updating installs the latest minor release but not a new major version.

  1. Run the following commands to install the SaltStack repository and key:
    sudo yum install https://repo.saltstack.com/py3/amazon/salt-py3-amzn2-repo-3001.amzn2.noarch.rpm
  2. Run sudo yum clean expire-cache

  3. Install the salt-minion, salt-master, or other Salt components:
    • sudo yum install salt-master
    • sudo yum install salt-minion
    • sudo yum install salt-ssh
    • sudo yum install salt-syndic
    • sudo yum install salt-cloud
    • sudo yum install salt-api
  4. (Upgrade only) Restart all upgraded services, for example:
    sudo service salt-minion restart 

Post-installation configuration


Installs a specific release. Updating doesn’t change the release that is installed.

  1. Run the following commands to install the SaltStack repository and key:

    sudo rpm --import https://repo.saltstack.com/py3/amazon/2/x86_64/archive/3001.3/SALTSTACK-GPG-KEY.pub
  2. Save the following file to /etc/yum.repos.d/saltstack-amzn.repo:

    [saltstack-amzn-repo]
    name=SaltStack repo for Amazon Linux 2
    baseurl=https://repo.saltstack.com/py3/amazon/2/$basearch/archive/3001.3
    failovermethod=priority
    priority=10
    enabled=1
    gpgcheck=1
    gpgkey=https://repo.saltstack.com/py3/amazon/2/$basearch/archive/3001.3/SALTSTACK-GPG-KEY.pub
  3. Run sudo yum clean expire-cache

  4. Install the salt-minion, salt-master, or other Salt components:
    • sudo yum install salt-master
    • sudo yum install salt-minion
    • sudo yum install salt-ssh
    • sudo yum install salt-syndic
    • sudo yum install salt-cloud
    • sudo yum install salt-api
  5. (Upgrade only) Restart all upgraded services, for example:
    sudo service salt-minion restart 

Post-installation configuration


Raspbian 10 (buster) PY3

Raspbian 9 (stretch) PY3

Installs the latest release. Updating installs the latest minor release but not a new major version.

  1. Run the following command to import the SaltStack repository key:
    wget -O - https://repo.saltstack.com/py3/debian/10/armhf/3001/SALTSTACK-GPG-KEY.pub | sudo apt-key add -
    wget -O - https://repo.saltstack.com/py3/debian/9/armhf/3001/SALTSTACK-GPG-KEY.pub | sudo apt-key add -
  2. Save the following file to /etc/apt/sources.list.d/saltstack.list:
    deb http://repo.saltstack.com/py3/debian/10/armhf/3001 buster main
    deb http://repo.saltstack.com/py3/debian/9/armhf/3001 stretch main
  3. Run sudo apt-get update

  4. Install the salt-minion, salt-master, or other Salt components:
    • sudo apt-get install salt-master
    • sudo apt-get install salt-minion
    • sudo apt-get install salt-ssh
    • sudo apt-get install salt-syndic
    • sudo apt-get install salt-cloud
    • sudo apt-get install salt-api
  5. (Upgrade only) Restart all upgraded services, for example:

    sudo systemctl restart salt-minion

Post-installation configuration


Installs a specific release. Updating doesn’t change the release that is installed.

  1. Run the following command to import the SaltStack repository key:
    wget -O - https://repo.saltstack.com/py3/debian/10/armhf/archive/3001.3/SALTSTACK-GPG-KEY.pub | sudo apt-key add -
    wget -O - https://repo.saltstack.com/py3/debian/9/armhf/archive/3001.3/SALTSTACK-GPG-KEY.pub | sudo apt-key add -
  2. Save the following file to /etc/apt/sources.list.d/saltstack.list:
    deb http://repo.saltstack.com/py3/debian/10/armhf/archive/3001.3 buster main
    deb http://repo.saltstack.com/py3/debian/9/armhf/archive/3001.3 stretch main
  3. Run sudo apt-get update

  4. Install the salt-minion, salt-master, or other Salt components:
    • sudo apt-get install salt-master
    • sudo apt-get install salt-minion
    • sudo apt-get install salt-ssh
    • sudo apt-get install salt-syndic
    • sudo apt-get install salt-cloud
    • sudo apt-get install salt-api
  5. (Upgrade only) Restart all upgraded services, for example:

    sudo systemctl restart salt-minion

Post-installation configuration


Create a Local Mirror of the SaltStack Package Repo

The SaltStack package repo supports mirroring using an s3 api compatible sync tool such as the aws-cli, or rclone. Note that we use a custom endpoint so we can switch buckets easily. Please sync no more than once per day.

rclone example:

RCLONE_CONFIG_S3_TYPE=s3 RCLONE_CONFIG_S3_PROVIDER=Other RCLONE_CONFIG_S3_ENV_AUTH=false RCLONE_CONFIG_S3_ENDPOINT=https://s3.repo.saltstack.com rclone sync --fast-list --use-server-modtime -v s3:s3/ ./fullrepo/

Please make sure to include the --use-server-modtime flags as not doing so will drastically increase our costs.

If you can’t use the --use-server-modtime flag because your version of rclone is too old, you can use the -c flag:

RCLONE_CONFIG_S3_TYPE=s3 RCLONE_CONFIG_S3_PROVIDER=Other RCLONE_CONFIG_S3_ENV_AUTH=false RCLONE_CONFIG_S3_ENDPOINT=https://s3.repo.saltstack.com rclone sync --fast-list -c -v s3:s3/ ./fullrepo/

If you want to exclude the redhat version symlinks to save space, you can use an exclude:

RCLONE_CONFIG_S3_TYPE=s3 RCLONE_CONFIG_S3_PROVIDER=Other RCLONE_CONFIG_S3_ENV_AUTH=false RCLONE_CONFIG_S3_ENDPOINT=https://s3.repo.saltstack.com rclone sync --fast-list --use-server-modtime -v --exclude '**/redhat/???*/**' --delete-excluded s3:s3/ ./fullrepo/

aws-cli example:

aws --no-sign-request --endpoint-url https://s3.repo.saltstack.com s3 sync --delete --exact-timestamps s3://s3/ ./fullrepo/

For syncing https://archive.repo.saltstack.com, the endpoint url is https://s3.archive.repo.saltstack.com. Everything else is the same.

Other Platforms

For installation on other platforms and alternative installation methods, see the SaltStack Installation Instructions.