Skip to content

Commit 1d7c614

Browse files
authored
Merge pull request #2236 from meghapriyams/docs-editor/linux-install-with-puppet-1734698601
Update linux-install-with-puppet.md
2 parents 5f30cb3 + 727417c commit 1d7c614

File tree

1 file changed

+25
-40
lines changed

1 file changed

+25
-40
lines changed

defender-endpoint/linux-install-with-puppet.md

Lines changed: 25 additions & 40 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.collection:
1515
ms.topic: conceptual
1616
ms.subservice: linux
1717
search.appverid: met150
18-
ms.date: 12/16/2024
18+
ms.date: 12/24/2024
1919
---
2020

2121
# Deploy Microsoft Defender for Endpoint on Linux with Puppet
@@ -43,7 +43,7 @@ This article describes how to deploy Defender for Endpoint on Linux using Puppet
4343

4444
For a description of prerequisites and system requirements, see [Microsoft Defender for Endpoint on Linux](microsoft-defender-endpoint-linux.md).
4545

46-
In addition, for Puppet deployment, you need to be familiar with Puppet administration tasks, have Puppet configured, and know how to deploy packages. Puppet has many ways to complete the same task. These instructions assume availability of supported Puppet modules, such as *apt* to help deploy the package. Your organization might use a different workflow. Refer to the [Puppet documentation](https://puppet.com/docs) for details.
46+
In addition, for Puppet deployment, you need to be familiar with Puppet administration tasks, have Puppet configured, and know how to deploy packages. Puppet has many ways to complete the same task. These instructions assume availability of supported Puppet modules, such as *apt* to help deploy the package. Your organization might use a different workflow. For more information, see [Puppet documentation](https://puppet.com/docs).
4747

4848
## Download the onboarding package
4949

@@ -59,18 +59,7 @@ Download the onboarding package from Microsoft Defender portal.
5959

6060
:::image type="content" source="media/portal-onboarding-linux-2.png" alt-text="The option to download the onboarded package.":::
6161

62-
4. From a command prompt, verify that you have the file.
63-
64-
```bash
65-
ls -l
66-
```
67-
68-
```console
69-
total 8
70-
-rw-r--r-- 1 test staff 4984 Feb 18 11:22 WindowsDefenderATPOnboardingPackage.zip
71-
```
72-
73-
5. Extract the contents of the archive.
62+
4. Extract the contents of the archive.
7463

7564
```bash
7665
unzip WindowsDefenderATPOnboardingPackage.zip
@@ -111,7 +100,7 @@ You need to create a Puppet manifest for deploying Defender for Endpoint on Linu
111100
└── init.pp
112101
```
113102

114-
### Create a manifest file
103+
## Create a manifest file
115104

116105
There are two ways to create a manifest file:
117106

@@ -120,7 +109,14 @@ There are two ways to create a manifest file:
120109

121110
#### Create a manifest to deploy Defender for Endpoint using an installer script
122111

123-
Add the following content to the `install_mdatp/manifests/init.pp` file. You can also download the file directly from [GitHub](https://teams.microsoft.com/l/message/19:2c1dc910-b8b7-415a-a9fd-2cd04843b43c_cb7ab2ef-8a66-4fcf-8c66-1723507f52df@unq.gbl.spaces/1734343607885?context=%7B%22contextType%22%3A%22chat%22%7D)
112+
1. Download the installer bash script. Pull the [installer bash script](https://github.com/microsoft/mdatp-xplat/blob/master/linux/installation/mde_installer.sh) from Microsoft GitHub Repository or use the following command to download it.
113+
114+
115+
```bash
116+
wget https://raw.githubusercontent.com/microsoft/mdatp-xplat/refs/heads/master/linux/installation/mde_installer.sh /etc/puppetlabs/code/environments/production/modules/install_mdatp/files/
117+
```
118+
119+
2. Add the following content to the `install_mdatp/manifests/init.pp` file. You can also download the file directly from [GitHub](https://github.com/microsoft/mdatp-xplat/blob/master/linux/installation/third_party_installation_playbooks/puppet.install_mdatp_simplified.init.pp)
124120

125121
```bash
126122

@@ -160,33 +156,14 @@ class install_mdatp (
160156
}
161157

162158
}
163-
164159
```
165-
#### Create a manifest to deploy Defender for Endpoint by configuring repositories manually
166-
167-
Defender for Endpoint on Linux can be deployed from one of the following channels:
168-
169-
- *insiders-fast*, denoted as `[channel]`
170-
- *insiders-slow*, denoted as `[channel]`
171-
- *prod*, denoted as `[channel]` using the version name (see [Linux Software Repository for Microsoft Products](/linux/packages))
172-
173-
Each channel corresponds to a Linux software repository.
160+
>[!NOTE]
161+
>Installer script also supports other parameters such as channel, realtime protection, version, etc. To select from the list of available options, check help.
162+
>`./mde_installer.sh --help`
174163
175-
The choice of the channel determines the type and frequency of updates that are offered to your device. Devices in *insiders-fast* are the first ones to receive updates and new features, followed later by *insiders-slow*, and lastly by *prod*.
176-
177-
In order to preview new features and provide early feedback, we recommend that you configure some devices in your enterprise to use either *insiders-fast* or *insiders-slow*.
178-
179-
> [!WARNING]
180-
> Switching the channel after the initial installation requires the product to be reinstalled. To switch the product channel: uninstall the existing package, re-configure your device to use the new channel, and follow the steps in this document to install the package from the new location.
181-
182-
Note your distribution and version and identify the closest entry for it under `https://packages.microsoft.com/config/[distro]/`.
183-
184-
In the below commands, replace *[distro]* and *[version]* with the information you've identified:
185-
186-
> [!NOTE]
187-
> In case of RedHat, Oracle Linux, Amazon Linux 2, and CentOS 8, replace *[distro]* with 'rhel'.
164+
#### Create a manifest to deploy Defender for Endpoint by configuring repositories manually
188165

189-
Add the following content to the `install_mdatp/manifests/init.pp` file:
166+
Add the following content to the `install_mdatp/manifests/init.pp` file. You can also download it from [GitHub](https://github.com/microsoft/mdatp-xplat/blob/master/linux/installation/third_party_installation_playbooks/puppet.install_mdatp_manual.init.pp).
190167

191168
```bash
192169
# Puppet manifest to install Microsoft Defender for Endpoint on Linux.
@@ -286,6 +263,14 @@ class install_mdatp (
286263

287264
```
288265
266+
> [!NOTE]
267+
> Defender for Endpoint on Linux can be deployed from one of the following channels: **insiders-fast, insiders-slow, prod**. Each channel corresponds to a Linux software repository. The choice of the channel determines the type and frequency of the updates that are offered to your device. Devices in `insiders-fast` are the first ones to receive updates and new features in preview, followed by `insiders-slow`, and lastly by `prod`.
268+
>
269+
> Note your distribution and version and identify the closest entry for it under `https://packages.microsoft.com/config/[distro]/[version]`.
270+
271+
> [!Warning]
272+
> Switching the channel after the initial installation requires the product to be reinstalled. To switch the product channel: uninstall the existing package, re-configure your device to use the new channel, and follow the steps in this document to install the package from the new location.
273+
289274
## Include the manifest inside the site.pp file
290275
291276
Include the manifest described earlier in this article in your `site.pp` file:

0 commit comments

Comments
 (0)