Debian#

These instructions explain how to install Salt on Debian operating systems:

What is onedir?

Onedir is the Salt Project’s new packaging system. Onedir packages of Salt include the version of Python needed to run Salt and Salt’s required dependencies.

Beginning with the release of Salt 3006 (Sulfur), the Salt Project has phased out classic package builds for supported operating systems. Update your Salt infrastructure to the onedir packages as soon as possible. See Upgrade to onedir for more information.

Before you start#

Before installing Salt on your operating system, ensure that you first:

Install Salt on Debian 12 (Bookworm) amd64#

To install the Onedir packages of Salt on Debian 12 (Bookworm) for amd64 architecture:

  1. Run the following commands to import the Salt Project repository key, and to create the apt sources list file:

    Click the tab for the Salt version you would like to pin for updates:

    To pin your Salt upgrades to the Latest Onedir package of Salt for Debian 12 (Bookworm):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/12/amd64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/12/amd64/latest bookworm main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

    To pin your Salt upgrades to the Major Onedir package of Salt for Debian 12 (Bookworm):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/12/amd64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/12/amd64/3007 bookworm main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

    To pin your Salt upgrades to the Minor Onedir package of Salt for Debian 12 (Bookworm):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/12/amd64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/12/amd64/minor/3007.0 bookworm main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

  2. Run sudo apt-get update to update your packages.

  3. Install the salt-minion, salt-master, or other Salt components:

    sudo apt-get install salt-master
    sudo apt-get install salt-minion
    sudo apt-get install salt-ssh
    sudo apt-get install salt-syndic
    sudo apt-get install salt-cloud
    sudo apt-get install salt-api
    
  4. Enable and start the services for salt-minion, salt-master, or other Salt components:

    sudo systemctl enable salt-master && sudo systemctl start salt-master
    sudo systemctl enable salt-minion && sudo systemctl start salt-minion
    sudo systemctl enable salt-syndic && sudo systemctl start salt-syndic
    sudo systemctl enable salt-api && sudo systemctl start salt-api
    

    Note

    When you install a onedir version of Salt (3006 and later), Salt installs its own local version of Python and the dependencies needed for the core functionality of Salt.

    After installing a onedir verison of Salt, your system has both a global version of Python at the system level and a local version of Python used by Salt. This architecture change means that the Salt onedir paths for Python are different and you need to change how you install third-party Python dependencies that you use with Salt, including your state files. See Install dependencies for more information.

After installing Salt on your operating system, you need to complete the following post-installation steps:

Install Salt on Debian 12 (Bookworm) arm64#

To install the Onedir packages of Salt on Debian 12 (Bookworm) for arm64 architecture:

  1. Run the following commands to import the Salt Project repository key, and to create the apt sources list file:

    Click the tab for the Salt version you would like to pin for updates:

    To pin your Salt upgrades to the Latest Onedir package of Salt for Debian 12 (Bookworm):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/12/arm64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=arm64] https://repo.saltproject.io/salt/py3/debian/12/arm64/latest bookworm main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

    To pin your Salt upgrades to the Major Onedir package of Salt for Debian 12 (Bookworm):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/12/arm64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=arm64] https://repo.saltproject.io/salt/py3/debian/12/arm64/3007 bookworm main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

    To pin your Salt upgrades to the Minor Onedir package of Salt for Debian 12 (Bookworm):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/12/arm64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=arm64] https://repo.saltproject.io/salt/py3/debian/12/arm64/minor/3007.0 bookworm main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

  2. Run sudo apt-get update to update your packages.

  3. Install the salt-minion, salt-master, or other Salt components:

    sudo apt-get install salt-master
    sudo apt-get install salt-minion
    sudo apt-get install salt-ssh
    sudo apt-get install salt-syndic
    sudo apt-get install salt-cloud
    sudo apt-get install salt-api
    
  4. Enable and start the services for salt-minion, salt-master, or other Salt components:

    sudo systemctl enable salt-master && sudo systemctl start salt-master
    sudo systemctl enable salt-minion && sudo systemctl start salt-minion
    sudo systemctl enable salt-syndic && sudo systemctl start salt-syndic
    sudo systemctl enable salt-api && sudo systemctl start salt-api
    

    Note

    When you install a onedir version of Salt (3006 and later), Salt installs its own local version of Python and the dependencies needed for the core functionality of Salt.

    After installing a onedir verison of Salt, your system has both a global version of Python at the system level and a local version of Python used by Salt. This architecture change means that the Salt onedir paths for Python are different and you need to change how you install third-party Python dependencies that you use with Salt, including your state files. See Install dependencies for more information.

After installing Salt on your operating system, you need to complete the following post-installation steps:

Install Salt on Debian 11 (Bullseye) amd64#

To install the Onedir packages of Salt on Debian 11 (Bullseye) for amd64 architecture:

  1. Run the following commands to import the Salt Project repository key, and to create the apt sources list file:

    Click the tab for the Salt version you would like to pin for updates:

    To pin your Salt upgrades to the Latest Onedir package of Salt for Debian 11 (Bullseye):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/11/amd64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/11/amd64/latest bullseye main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

    To pin your Salt upgrades to the Major Onedir package of Salt for Debian 11 (Bullseye):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/11/amd64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/11/amd64/3007 bullseye main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

    To pin your Salt upgrades to the Minor Onedir package of Salt for Debian 11 (Bullseye):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/11/amd64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/11/amd64/minor/3007.0 bullseye main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

  2. Run sudo apt-get update to update your packages.

  3. Install the salt-minion, salt-master, or other Salt components:

    sudo apt-get install salt-master
    sudo apt-get install salt-minion
    sudo apt-get install salt-ssh
    sudo apt-get install salt-syndic
    sudo apt-get install salt-cloud
    sudo apt-get install salt-api
    
  4. Enable and start the services for salt-minion, salt-master, or other Salt components:

    sudo systemctl enable salt-master && sudo systemctl start salt-master
    sudo systemctl enable salt-minion && sudo systemctl start salt-minion
    sudo systemctl enable salt-syndic && sudo systemctl start salt-syndic
    sudo systemctl enable salt-api && sudo systemctl start salt-api
    

    Note

    When you install a onedir version of Salt (3006 and later), Salt installs its own local version of Python and the dependencies needed for the core functionality of Salt.

    After installing a onedir verison of Salt, your system has both a global version of Python at the system level and a local version of Python used by Salt. This architecture change means that the Salt onedir paths for Python are different and you need to change how you install third-party Python dependencies that you use with Salt, including your state files. See Install dependencies for more information.

After installing Salt on your operating system, you need to complete the following post-installation steps:

Install Salt on Debian 11 (Bullseye) arm64#

To install the Onedir packages of Salt on Debian 11 (Bullseye) for arm64 architecture:

  1. Run the following commands to import the Salt Project repository key, and to create the apt sources list file:

    Click the tab for the Salt version you would like to pin for updates:

    To pin your Salt upgrades to the Latest Onedir package of Salt for Debian 11 (Bullseye):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/11/arm64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/11/arm64/latest bullseye main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

    To pin your Salt upgrades to the Major Onedir package of Salt for Debian 11 (Bullseye):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/11/arm64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/11/arm64/3007 bullseye main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

    To pin your Salt upgrades to the Minor Onedir package of Salt for Debian 11 (Bullseye):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/11/arm64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/11/arm64/minor/3007.0 bullseye main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

  2. Run sudo apt-get update to update your packages.

  3. Install the salt-minion, salt-master, or other Salt components:

    sudo apt-get install salt-master
    sudo apt-get install salt-minion
    sudo apt-get install salt-ssh
    sudo apt-get install salt-syndic
    sudo apt-get install salt-cloud
    sudo apt-get install salt-api
    
  4. Enable and start the services for salt-minion, salt-master, or other Salt components:

    sudo systemctl enable salt-master && sudo systemctl start salt-master
    sudo systemctl enable salt-minion && sudo systemctl start salt-minion
    sudo systemctl enable salt-syndic && sudo systemctl start salt-syndic
    sudo systemctl enable salt-api && sudo systemctl start salt-api
    

    Note

    When you install a onedir version of Salt (3006 and later), Salt installs its own local version of Python and the dependencies needed for the core functionality of Salt.

    After installing a onedir verison of Salt, your system has both a global version of Python at the system level and a local version of Python used by Salt. This architecture change means that the Salt onedir paths for Python are different and you need to change how you install third-party Python dependencies that you use with Salt, including your state files. See Install dependencies for more information.

After installing Salt on your operating system, you need to complete the following post-installation steps:

Install Salt on Debian 10 (Buster) amd64#

To install the Onedir packages of Salt on Debian 10 (Buster) for amd64 architecture:

  1. Run the following commands to import the Salt Project repository key, and to create the apt sources list file:

    Click the tab for the Salt version you would like to pin for updates:

    To pin your Salt upgrades to the Latest Onedir package of Salt for Debian 10 (Buster):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/10/amd64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/10/amd64/latest buster main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

    To pin your Salt upgrades to the Major Onedir package of Salt for Debian 10 (Buster):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/10/amd64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/10/amd64/3007 buster main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

    To pin your Salt upgrades to the Minor Onedir package of Salt for Debian 10 (Buster):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/10/amd64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/10/amd64/minor/3007.0 buster main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

  2. Run sudo apt-get update to update your packages.

  3. Install the salt-minion, salt-master, or other Salt components:

    sudo apt-get install salt-master
    sudo apt-get install salt-minion
    sudo apt-get install salt-ssh
    sudo apt-get install salt-syndic
    sudo apt-get install salt-cloud
    sudo apt-get install salt-api
    
  4. Enable and start the services for salt-minion, salt-master, or other Salt components:

    sudo systemctl enable salt-master && sudo systemctl start salt-master
    sudo systemctl enable salt-minion && sudo systemctl start salt-minion
    sudo systemctl enable salt-syndic && sudo systemctl start salt-syndic
    sudo systemctl enable salt-api && sudo systemctl start salt-api
    

    Note

    When you install a onedir version of Salt (3006 and later), Salt installs its own local version of Python and the dependencies needed for the core functionality of Salt.

    After installing a onedir verison of Salt, your system has both a global version of Python at the system level and a local version of Python used by Salt. This architecture change means that the Salt onedir paths for Python are different and you need to change how you install third-party Python dependencies that you use with Salt, including your state files. See Install dependencies for more information.

After installing Salt on your operating system, you need to complete the following post-installation steps:

Install Salt on Debian 10 (Buster) arm64#

To install the Onedir packages of Salt on Debian 10 (Buster) for arm64 architecture:

  1. Run the following commands to import the Salt Project repository key, and to create the apt sources list file:

    Click the tab for the Salt version you would like to pin for updates:

    To pin your Salt upgrades to the Latest Onedir package of Salt for Debian 10 (Buster):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/10/arm64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/10/arm64/latest buster main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

    To pin your Salt upgrades to the Major Onedir package of Salt for Debian 10 (Buster):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/10/arm64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/10/arm64/3007 buster main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

    To pin your Salt upgrades to the Minor Onedir package of Salt for Debian 10 (Buster):

    mkdir /etc/apt/keyrings
    
    sudo curl -fsSL -o /etc/apt/keyrings/salt-archive-keyring-2023.gpg https://repo.saltproject.io/salt/py3/debian/10/arm64/SALT-PROJECT-GPG-PUBKEY-2023.gpg
    echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring-2023.gpg arch=amd64] https://repo.saltproject.io/salt/py3/debian/10/arm64/minor/3007.0 buster main" | sudo tee /etc/apt/sources.list.d/salt.list
    

    GPG key change

    The GPG key for the 3007.0 release is now named: SALT-PROJECT-GPG-PUBKEY-2023. You must import the new GPG key before upgrading or your upgrade will fail.

  2. Run sudo apt-get update to update your packages.

  3. Install the salt-minion, salt-master, or other Salt components:

    sudo apt-get install salt-master
    sudo apt-get install salt-minion
    sudo apt-get install salt-ssh
    sudo apt-get install salt-syndic
    sudo apt-get install salt-cloud
    sudo apt-get install salt-api
    
  4. Enable and start the services for salt-minion, salt-master, or other Salt components:

    sudo systemctl enable salt-master && sudo systemctl start salt-master
    sudo systemctl enable salt-minion && sudo systemctl start salt-minion
    sudo systemctl enable salt-syndic && sudo systemctl start salt-syndic
    sudo systemctl enable salt-api && sudo systemctl start salt-api
    

    Note

    When you install a onedir version of Salt (3006 and later), Salt installs its own local version of Python and the dependencies needed for the core functionality of Salt.

    After installing a onedir verison of Salt, your system has both a global version of Python at the system level and a local version of Python used by Salt. This architecture change means that the Salt onedir paths for Python are different and you need to change how you install third-party Python dependencies that you use with Salt, including your state files. See Install dependencies for more information.

After installing Salt on your operating system, you need to complete the following post-installation steps:

Browse the repo#

Browse the repo for Debian packages

Debian 3007.0