Installing Puppet Enterprise overview
This section covers *nix operating systems. To install PE on Windows, see installing Windows agents.
Downloading Puppet Enterprise
Start by downloading the tarball for the current version of Puppet Enterprise, along with the GPG signature (.asc), from the Puppet website.
Choosing an installer tarball
Puppet Enterprise is distributed in tarballs specific to your OS version and architecture.
Available *nix tarballs
|Filename ends with…||Will install on…|
||RHEL, CentOS, Scientific Linux, or Oracle Linux|
Note: Bindings for SELinux are available on RHEL 5, 6, and 7. They are not installed by default but are included in the puppet-agent package.
Verifying the installer
To verify the PE installer, import the Puppet public key and run a cryptographic verification of the tarball you downloaded. The Puppet public key is certified by Puppet and is available from public keyservers, such as
pgp.mit.edu, as well as Puppet. You’ll need to have GnuPG installed and the GPG signature (.asc file) that you downloaded with the PE tarball.
To import the Puppet public key, run:
wget -O - https://downloads.puppetlabs.com/puppetlabs-gpg-signing-key.pub | gpg --import
The result should be similar to:
gpg: key 4BD6EC30: public key "Puppet Labs Release Key (Puppet Labs Release Key) <email@example.com>" imported gpg: Total number processed: 1 gpg: imported: 1 (RSA: 1)
To print the fingerprint of our key, run:
gpg --fingerprint 0x1054b7a24bd6ec30
You should also see an exact match of the fingerprint of our key, which is printed on the verification:
Primary key fingerprint: 47B3 20EB 4C7C 375A A9DA E1A0 1054 B7A2 4BD6 EC30
Next, verify the release signature on the tarball by running:
$ gpg --verify puppet-enterprise-<version>-<platform>.tar.gz.asc
The result should be similar to:
gpg: Signature made Tue 18 Jun 2013 10:05:25 AM PDT using RSA key ID 4BD6EC30 gpg: Good signature from "Puppet Labs Release Key (Puppet Labs Release Key)"
Note: When you verify the signature but do not have a trusted path to one of the signatures on the release key, you will see a warning similar to:
Could not find a valid trust path to the key. gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner.
This warning is generated because you have not created a trust path to certify who signed the release key; it can be ignored.
Installing Puppet Enterprise
Your PE installation will go more smoothly if you know a few things in advance. Puppet Enterprise’s functions are spread across several different components which get installed and configured when you run the installer. You can choose to install multiple components on a single node (a “monolithic install”) or spread the components across multiple nodes (a “split install”), but you should note that the “agent” component gets installed on every node.
You should decide on your deployment needs before starting the install process. For each node where you’ll install a PE component, you should know the fully qualified domain name where that node can be reached and you should ensure that firewall rules are set up to allow access to the required ports.
With that knowledge in hand, the installation process will proceed in three stages:
You choose an installation method.
You install the main components of PE—the Puppet master, PuppetDB (and database support), and the PE console.
You install the Puppet agent on all the nodes you wish to manage with PE. Refer to the agent installation instructions
Choose an installation method
Before you begin, choose an installation method. We’ve provided a few paths to choose from.
Perform a guided installation using the web-based interface. Think of this as an installation interview in which we ask you exactly how you want to install PE. If you’re able to provide SSH credentials, this method will get you up and running fairly quickly. Choose from one of the following installation types:
Use the web-based interface to create an answer file that you can then add as an argument to the installer script to perform an installation (e.g.,
sudo ./puppet-enterprise-installer -a ~/my_answers.txt). Refer to installing with an answer file, which provides an overview on installing PE with an answer file.
Edit an answer file provided in the PE installation tarball. Check installing with an answer file to get started.
See the system requirements for any hardware-related specifications.
Note: Before getting started, we recommend you read about the Puppet Enterprise components to familiarize yourself with the parts that make up a PE installation.
About Puppet Enterprise components
Before beginning installation, you should familiarize yourself with the services and components that make up PE.
See the PE architecture overview for more information.
Notes, warnings, and tips
Verifying your license
When you purchased Puppet Enterprise, you should have been sent a
license.key file that lists how many nodes you can deploy. For PE to run without logging license warnings, you should copy this file to the Puppet master node as
/etc/puppetlabs/license.key. If you don’t have your license key file, please email firstname.lastname@example.org and we’ll re-send it.
Note that you can download and install Puppet Enterprise on up to 10 nodes at no charge. No license key is needed to run PE on up to 10 nodes.
Puppet Enterprise binaries and symlinks
PE installs its binaries in
/opt/puppetlabs/bin. To make essential Puppet tools available to all users, the installer automatically creates symlinks in
/usr/local/bin for the
mco binaries. Note that the symlinks will only be created if
/usr/local/bin is writeable.
Note that AIX and Solaris 10/11 users need to add
/usr/local/bin to their default path.
If you’re running Mac OS X agents, note that symlinks are not created until the first successful Puppet run that applies the agents’ catalogs.
Binaries provided by other PE components, such as those for interacting with PE’s installed PostgreSQL server, PuppetDB, or Ruby packages do not have symlinks created. To include these binaries in your default
$PATH, manually add them to your profile or run
Agent installation instructions can be found at installing PE agents.