Skip to content

Commit 3bd99fa

Browse files
committed
Update linux-install-with-puppet.md
1 parent a99c17c commit 3bd99fa

File tree

1 file changed

+32
-32
lines changed

1 file changed

+32
-32
lines changed

defender-endpoint/linux-install-with-puppet.md

Lines changed: 32 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ This article describes how to deploy Defender for Endpoint on Linux using Puppet
4141

4242
## Prerequisites and system requirements
4343

44-
For a description of prerequisites and system requirements, see [the main Defender for Endpoint on Linux page](microsoft-defender-endpoint-linux.md).
44+
For a description of prerequisites and system requirements, see [Microsoft Defender for Endpoint on Linux](microsoft-defender-endpoint-linux.md).
4545

4646
In addition, for Puppet deployment, you need to be familiar with Puppet administration tasks, have Puppet configured, and know how to deploy packages. Puppet has many ways to complete the same task. These instructions assume availability of supported Puppet modules, such as *apt* to help deploy the package. Your organization might use a different workflow. Refer to the [Puppet documentation](https://puppet.com/docs) for details.
4747

@@ -51,7 +51,7 @@ Download the onboarding package from Microsoft Defender portal.
5151

5252
[!INCLUDE [Defender for Endpoint repackaging warning](../includes/repackaging-warning.md)]
5353

54-
1. In Microsoft Defender portal, go to **Settings** > **Endpoints** > **Device management** > **Onboarding**.
54+
1. In the [Microsoft Defender portal](https://security.microsoft.com), go to **Settings** > **Endpoints** > **Device management** > **Onboarding**.
5555

5656
2. In the first drop-down menu, select **Linux Server** as the operating system. In the second drop-down menu, select **Your preferred Linux configuration management tool** as the deployment method.
5757

@@ -83,9 +83,9 @@ Download the onboarding package from Microsoft Defender portal.
8383

8484
## Create a Puppet manifest
8585

86-
You need to create a Puppet manifest for deploying Defender for Endpoint on Linux to devices managed by a Puppet server. This example makes use of the `apt` and `yumrepo` modules available from puppetlabs, and assumes that the modules have been installed on your Puppet server.
86+
You need to create a Puppet manifest for deploying Defender for Endpoint on Linux to devices managed by a Puppet server. This example makes use of the `apt` and `yumrepo` modules available from `puppetlabs`, and assumes that the modules are installed on your Puppet server.
8787

88-
1. Create the folders `install_mdatp/files` and `install_mdatp/manifests` under the modules folder of your Puppet installation. This folder is typically located in `/etc/puppetlabs/code/environments/production/modules` on your Puppet server.
88+
1. Under the **modules** folder if your Puppet installation, create the folders `install_mdatp/files` and `install_mdatp/manifests`. The **modules** folder is typically located at `/etc/puppetlabs/code/environments/production/modules` on your Puppet server.
8989

9090
2. Copy the `mdatp_onboard.json` file created earlier to the `install_mdatp/files` folder.
9191

@@ -111,15 +111,14 @@ You need to create a Puppet manifest for deploying Defender for Endpoint on Linu
111111
└── init.pp
112112
```
113113

114-
### Create manifest file
114+
### Create a manifest file
115115

116-
There are two ways to create manifest file:
116+
There are two ways to create a manifest file:
117117

118-
1. Create manifest using installer script.
118+
- Use an installer script; or
119+
- Configure your repositories manually.
119120

120-
2. Create manifest by configuring repositories manually.
121-
122-
#### Create manifest to deploy Defender for Endpoint using Installer Script
121+
#### Create a manifest to deploy Defender for Endpoint using an installer script
123122

124123
Add the following content to the `install_mdatp/manifests/init.pp` file. You can also download the file directly from [GitHub](https://teams.microsoft.com/l/message/19:2c1dc910-b8b7-415a-a9fd-2cd04843b43c_cb7ab2ef-8a66-4fcf-8c66-1723507f52df@unq.gbl.spaces/1734343607885?context=%7B%22contextType%22%3A%22chat%22%7D)
125124

@@ -161,8 +160,9 @@ class install_mdatp (
161160
}
162161
163162
}
163+
164164
```
165-
#### Create manifest to deploy Defender for Endpoint by configuring repositories manually
165+
#### Create a manifest to deploy Defender for Endpoint by configuring repositories manually
166166

167167
Defender for Endpoint on Linux can be deployed from one of the following channels:
168168

@@ -174,7 +174,7 @@ Each channel corresponds to a Linux software repository.
174174

175175
The choice of the channel determines the type and frequency of updates that are offered to your device. Devices in *insiders-fast* are the first ones to receive updates and new features, followed later by *insiders-slow*, and lastly by *prod*.
176176

177-
In order to preview new features and provide early feedback, it's recommended that you configure some devices in your enterprise to use either *insiders-fast* or *insiders-slow*.
177+
In order to preview new features and provide early feedback, we recommend that you configure some devices in your enterprise to use either *insiders-fast* or *insiders-slow*.
178178

179179
> [!WARNING]
180180
> Switching the channel after the initial installation requires the product to be reinstalled. To switch the product channel: uninstall the existing package, re-configure your device to use the new channel, and follow the steps in this document to install the package from the new location.
@@ -186,7 +186,7 @@ In the below commands, replace *[distro]* and *[version]* with the information y
186186
> [!NOTE]
187187
> In case of RedHat, Oracle Linux, Amazon Linux 2, and CentOS 8, replace *[distro]* with 'rhel'.
188188
189-
Add below contents to the `install_mdatp/manifests/init.pp` file
189+
Add the following content to the `install_mdatp/manifests/init.pp` file:
190190
191191
```bash
192192
# Puppet manifest to install Microsoft Defender for Endpoint on Linux.
@@ -288,7 +288,7 @@ class install_mdatp (
288288
289289
## Include the manifest inside the site.pp file
290290
291-
Include the above manifest in your `site.pp` file:
291+
Include the manifest described earlier in this article in your `site.pp` file:
292292
293293
```bash
294294
cat /etc/puppetlabs/code/environments/production/manifests/site.pp
@@ -300,11 +300,11 @@ node "default" {
300300
}
301301
```
302302
303-
Enrolled agent devices periodically poll the Puppet Server and install new configuration profiles and policies as soon as they are detected.
303+
Enrolled agent devices periodically poll the Puppet Server and install new configuration profiles and policies as soon as they're detected.
304304

305305
## Monitor Puppet deployment
306306

307-
On the agent device, you can also check the deployment status by running:
307+
On the agent device, you can also check the deployment status by running the following command:
308308

309309
```bash
310310
mdatp health
@@ -319,37 +319,37 @@ org_id : "[your organization identifier]"
319319
...
320320
```
321321

322-
- **healthy:** This confirm that Defender for Endpoint is successfully deployed and operational
323-
324-
- **health_issues**: This states the issues which caused the healthy status to become false.
325-
326-
- **licensed**: This confirms that the device is tied to your organization.
327-
328-
- **orgId**: This is your Defender for Endpoint organization identifier.
322+
- `healthy`: Confirm that Defender for Endpoint is successfully deployed and operational.
323+
- `health_issues`: States the issues which caused the healthy status to become false.
324+
- `licensed`: Confirms that the device is tied to your organization.
325+
- `orgId`: Your Defender for Endpoint organization identifier.
329326

330327
## Troubleshoot installation issues
331328

332-
For self-troubleshooting, do the following
329+
If you encounter issues during installation, try these self-troubleshooting steps:
333330

334-
1. Refer to [Log installation issues](https://github.com/meghapriyams/defender-docs-pr/blob/docs-editor/linux-install-with-ansible-1731590880/defender-endpoint/linux-resources.md#log-installation-issues) for more information on how to find the automatically generated log that is created by the installer when an error occurs.
331+
1. Refer to [Log installation issues](linux-resources.md#log-installation-issues) for more information on how to find the automatically generated log that is created by the installer when an error occurs.
335332

336-
1. Refer to [Installation issues](/defender-endpoint/linux-support-install) for more information on commonly occurring installation issues
333+
2. Refer to [Installation issues](/defender-endpoint/linux-support-install) for more information on commonly occurring installation issues
337334

338-
1. If health of the device is false, refer to [MDE agent health issues](/defender-endpoint/health-status)
335+
3. If health of the device is false, refer to [MDE agent health issues](/defender-endpoint/health-status)
339336

340-
1. For product performance issues, refer to [Troubleshoot performance issues](/defender-endpoint/linux-support-perf), [performance tuning](/defender-endpoint/linux-support-perf?branch=main)
337+
4. For product performance issues, refer to [Troubleshoot performance issues](/defender-endpoint/linux-support-perf), [performance tuning](/defender-endpoint/linux-support-perf?branch=main)
341338

342-
1. For proxy and connectivity issues, refer to [Troubleshoot cloud connectivity issues](/defender-endpoint/linux-support-connectivity)
339+
5. For proxy and connectivity issues, refer to [Troubleshoot cloud connectivity issues](/defender-endpoint/linux-support-connectivity)
343340

344-
To get support from Microsoft, raise a support ticket and provide log dump by [running client analyser](/defender-endpoint/run-analyzer-macos-linux)
341+
To get support from Microsoft, raise a support ticket and provide log files by using the [client analyser](/defender-endpoint/run-analyzer-macos-linux)
345342

346343
## How to configure policies for Microsoft Defender on Linux
347344

348-
You can configure AV/EDR settings on your endpoints using following methods 3. Refer to [set preferences](/defender-endpoint/linux-preferences) to learn more about the available settings 4. Refer to [security settings management](/mem/intune/protect/mde-security-integration) to configure settings via Microsoft Defender Portal
345+
You can configure antivirus and EDR settings on your endpoints using following methods:
346+
347+
- See [Set preferences for Microsoft Defender for Endpoint on Linux](/defender-endpoint/linux-preferences) to learn more about the available settings
348+
- See [security settings management](/mem/intune/protect/mde-security-integration) to configure settings in the Microsoft Defender portal.
349349

350350
## Operating system upgrades
351351

352-
When upgrading your operating system to a new major version, you must first uninstall Defender for Endpoint on Linux, install the upgrade, and finally reconfigure Defender for Endpoint on Linux on your device.
352+
When upgrading your operating system to a new major version, you must first uninstall Defender for Endpoint on Linux, install the upgrade, and then reconfigure Defender for Endpoint on Linux on your device.
353353

354354
## Uninstallation
355355

0 commit comments

Comments
 (0)