You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/linux-install-with-puppet.md
+25-40Lines changed: 25 additions & 40 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,7 +15,7 @@ ms.collection:
15
15
ms.topic: conceptual
16
16
ms.subservice: linux
17
17
search.appverid: met150
18
-
ms.date: 12/16/2024
18
+
ms.date: 12/24/2024
19
19
---
20
20
21
21
# Deploy Microsoft Defender for Endpoint on Linux with Puppet
@@ -43,7 +43,7 @@ This article describes how to deploy Defender for Endpoint on Linux using Puppet
43
43
44
44
For a description of prerequisites and system requirements, see [Microsoft Defender for Endpoint on Linux](microsoft-defender-endpoint-linux.md).
45
45
46
-
In addition, for Puppet deployment, you need to be familiar with Puppet administration tasks, have Puppet configured, and know how to deploy packages. Puppet has many ways to complete the same task. These instructions assume availability of supported Puppet modules, such as *apt* to help deploy the package. Your organization might use a different workflow. Refer to the [Puppet documentation](https://puppet.com/docs) for details.
46
+
In addition, for Puppet deployment, you need to be familiar with Puppet administration tasks, have Puppet configured, and know how to deploy packages. Puppet has many ways to complete the same task. These instructions assume availability of supported Puppet modules, such as *apt* to help deploy the package. Your organization might use a different workflow. For more information, see [Puppet documentation](https://puppet.com/docs).
47
47
48
48
## Download the onboarding package
49
49
@@ -59,18 +59,7 @@ Download the onboarding package from Microsoft Defender portal.
59
59
60
60
:::image type="content" source="media/portal-onboarding-linux-2.png" alt-text="The option to download the onboarded package.":::
61
61
62
-
4. From a command prompt, verify that you have the file.
63
-
64
-
```bash
65
-
ls -l
66
-
```
67
-
68
-
```console
69
-
total 8
70
-
-rw-r--r-- 1 test staff 4984 Feb 18 11:22 WindowsDefenderATPOnboardingPackage.zip
71
-
```
72
-
73
-
5. Extract the contents of the archive.
62
+
4. Extract the contents of the archive.
74
63
75
64
```bash
76
65
unzip WindowsDefenderATPOnboardingPackage.zip
@@ -111,7 +100,7 @@ You need to create a Puppet manifest for deploying Defender for Endpoint on Linu
111
100
└── init.pp
112
101
```
113
102
114
-
### Create a manifest file
103
+
## Create a manifest file
115
104
116
105
There are two ways to create a manifest file:
117
106
@@ -120,7 +109,14 @@ There are two ways to create a manifest file:
120
109
121
110
#### Create a manifest to deploy Defender for Endpoint using an installer script
122
111
123
-
Add the following content to the `install_mdatp/manifests/init.pp` file. You can also download the file directly from [GitHub](https://teams.microsoft.com/l/message/19:2c1dc910-b8b7-415a-a9fd-2cd04843b43c_cb7ab2ef-8a66-4fcf-8c66-1723507f52df@unq.gbl.spaces/1734343607885?context=%7B%22contextType%22%3A%22chat%22%7D)
112
+
1. Download the installer bash script. Pull the [installer bash script](https://github.com/microsoft/mdatp-xplat/blob/master/linux/installation/mde_installer.sh) from Microsoft GitHub Repository or use the following command to download it.
2. Add the following content to the `install_mdatp/manifests/init.pp` file. You can also download the file directly from [GitHub](https://github.com/microsoft/mdatp-xplat/blob/master/linux/installation/third_party_installation_playbooks/puppet.install_mdatp_simplified.init.pp)
124
120
125
121
```bash
126
122
@@ -160,33 +156,14 @@ class install_mdatp (
160
156
}
161
157
162
158
}
163
-
164
159
```
165
-
#### Create a manifest to deploy Defender for Endpoint by configuring repositories manually
166
-
167
-
Defender for Endpoint on Linux can be deployed from one of the following channels:
168
-
169
-
- *insiders-fast*, denoted as `[channel]`
170
-
- *insiders-slow*, denoted as `[channel]`
171
-
- *prod*, denoted as `[channel]` using the version name (see [Linux Software Repository for Microsoft Products](/linux/packages))
172
-
173
-
Each channel corresponds to a Linux software repository.
160
+
>[!NOTE]
161
+
>Installer script also supports other parameters such as channel, realtime protection, version, etc. To select from the list of available options, check help.
162
+
>`./mde_installer.sh --help`
174
163
175
-
The choice of the channel determines the type and frequency of updates that are offered to your device. Devices in*insiders-fast* are the first ones to receive updates and new features, followed later by *insiders-slow*, and lastly by *prod*.
176
-
177
-
In order to preview new features and provide early feedback, we recommend that you configure some devices in your enterprise to use either *insiders-fast* or *insiders-slow*.
178
-
179
-
> [!WARNING]
180
-
> Switching the channel after the initial installation requires the product to be reinstalled. To switch the product channel: uninstall the existing package, re-configure your device to use the new channel, and follow the steps in this document to install the package from the new location.
181
-
182
-
Note your distribution and version and identify the closest entry for it under `https://packages.microsoft.com/config/[distro]/`.
183
-
184
-
In the below commands, replace *[distro]* and *[version]* with the information you've identified:
185
-
186
-
> [!NOTE]
187
-
> In case of RedHat, Oracle Linux, Amazon Linux 2, and CentOS 8, replace *[distro]* with 'rhel'.
164
+
#### Create a manifest to deploy Defender for Endpoint by configuring repositories manually
188
165
189
-
Add the following content to the `install_mdatp/manifests/init.pp` file:
166
+
Add the following content to the `install_mdatp/manifests/init.pp` file. You can also download it from [GitHub](https://github.com/microsoft/mdatp-xplat/blob/master/linux/installation/third_party_installation_playbooks/puppet.install_mdatp_manual.init.pp).
190
167
191
168
```bash
192
169
# Puppet manifest to install Microsoft Defender for Endpoint on Linux.
@@ -286,6 +263,14 @@ class install_mdatp (
286
263
287
264
```
288
265
266
+
> [!NOTE]
267
+
> Defender forEndpoint on Linux can be deployed from one of the following channels: **insiders-fast, insiders-slow, prod**. Each channel corresponds to a Linux software repository. The choice of the channel determines the type and frequency of the updates that are offered to your device. Devicesin`insiders-fast` are the first ones to receive updates and new features in preview, followed by `insiders-slow`, and lastly by `prod`.
268
+
>
269
+
> Note your distribution and version and identify the closest entry for it under `https://packages.microsoft.com/config/[distro]/[version]`.
270
+
271
+
> [!Warning]
272
+
> Switching the channel after the initial installation requires the product to be reinstalled. To switch the product channel: uninstall the existing package, re-configure your device to use the new channel, and follow the steps in this document to install the package from the new location.
273
+
289
274
## Include the manifest inside the site.pp file
290
275
291
276
Include the manifest described earlier in this article in your `site.pp` file:
0 commit comments