This table specifies the file paths in a Puppet installation and the corresponding settings, denoted as :setting. The 3.x column shows the difference of the specification vs the 3.x implementation.
- puppet-agent (*nix)
- puppet-agent (Windows)
- puppet-agent (non-root)
- puppetdb
- puppetserver
- puppetmaster
- razor-server
- Notes
The package will create the following services puppet, mcollective, and pxp-agent,
all running as root by default. It will not create a puppet user or group.
The files annotated by an '*' indicate that they are created by package installation.
Path Setting 3.x
/etc/puppetlabs * n/a
/etc/puppetlabs/client-tools * # default client tool settings
puppet-access.conf *
puppet-orchestrator.conf *
puppetdb.conf *
/etc/puppetlabs/code * # :codedir contents moved from :confdir
environments * # :environmentpath
production *
hieradata *
environment.conf *
manifests *
modules *
hiera.yaml * # :hiera_config (deprecated location, puppet and hiera look here first)
modules * # user modulepath
/etc/puppetlabs/code-staging # staging directory n/a
environments
production
hieradata
environment.conf
manifests
modules
hiera.yaml # only if using deprecated default location
modules
/etc/puppetlabs/mcollective *
client.cfg *
facts.yaml *
server.cfg *
/etc/puppetlabs/puppet * # :confdir /etc/puppet
auth.conf * # :rest_authconfig
autosign.conf # :autosign
binder_config.yaml # :binder_config
csr_attributes.yaml # :csr_attributes
custom_trusted_oid_mapping.yaml # :trusted_oid_mapping_file
device.conf # :deviceconfig
fileserver.conf # :fileserverconfig
hiera.yaml * # :hiera_config
puppet.conf * # :config
routes.yaml # :route_file
ssl # :ssldir /etc/puppet/ssl
/etc/puppetlabs/pxp-agent *
modules * # stores configuration files for pxp-agent modules
pxp-module-puppet.conf * # configuration file of the pxp module puppet
pxp-agent.conf # pxp-agent configuration file
/opt/puppetlabs/bin * # symlink targets of puppet related binaries
facter@ * -> /opt/puppetlabs/puppet/bin/facter
hiera@ * -> /opt/puppetlabs/puppet/bin/hiera
mco@ * -> /opt/puppetlabs/puppet/bin/mco
puppet@ * -> /opt/puppetlabs/puppet/bin/puppet
/opt/puppetlabs/facter *
facts.d * # external facts directory (not pluginsync'ed)
/opt/puppetlabs/mcollective/
plugins # user installed plugins
/opt/puppetlabs/puppet * # ruby-puppet root
bin *
facter *
gem *
hiera *
mco *
mcollectived *
openssl *
puppet *
pxp-agent *
ruby *
virt-what *
cache * # :vardir /var/lib/puppet
bucket # :bucketdir
client_yaml # :clientyamldir
client_data # :client_datadir
clientbucket # :clientbucketdir
devices # :devicedir
facts.d # :pluginfactdest (pluginsync'ed)
lib # :libdir
facts # used to generate :factpath
puppet-module # :module_working_dir
reports # :reportdir
server_data # :server_datadir
state # :statedir
yaml # :yamldir
include *
facter *
openssl *
lib *
libaugeas.so *
libcrypto.so *
libfacter.so *
libruby.so *
libssl.so *
ruby *
vendor_ruby * # ruby code
facter.rb *
hiera.rb *
mcollective.rb *
puppet.rb *
virt-what *
virt-what-cpuid-helper *
modules * # system modulepath /usr/share/puppet/modules
share *
augeas *
man *
vim *
locale *
config.yaml * # configuration file used by the gettext-setup gem
<lang_COUNTRY> *
LC_MESSAGES *
<project>.mo * # One directory for each supported locale,
# containing the MO files for each project.
# Example for English:
# /opt/puppetlabs/puppet/share/locale/en_US/LC_MESSAGES/puppet.mo
ssl *
VERSION # puppet-agent package version
/opt/puppetlabs/pxp-agent *
modules *
pxp-module-puppet *
spool * # directory containing results of pxp-agent modules
/var/log/puppetlabs *
mcollective
mcollective.log
puppet * # :logdir /var/lib/puppet/log
puppet.log # not enabled by default
pxp-agent *
pxp-agent.log # enabled by default
pxp-access.log # not enabled by default
/var/run/puppetlabs * # :rundir /var/lib/puppet/run
agent.pid # :pidfile
mcollectived.pid
pxp-agent.pid
On recent versions of Windows, e.g. 2008 & 2012, the installation path
defaults to C:\Program Files\Puppet Labs and the common app data
directory defaults to C:\ProgramData. On 2003, common app data is
under C:\Documents and Settings\All Users\Application Data. Also
when installing puppet-agent 32-bit on 64-bit windows, the
installation path defaults to C:\Program Files (x86)\Puppet Labs. The examples below assume 2008/2012 and puppet-agent (64-bit).
The package will create the following services puppet, mcollective,
and pxp-agent, all running as LocalSystem by default. It will not
create a puppet user or group.
Path Setting 3.x
C:\ProgramData n/a
C:\ProgramData\PuppetLabs\client-tools # default client tool settings
puppet-access.conf *
puppet-orchestrator.conf *
puppetdb.conf *
C:\ProgramData\PuppetLabs\code * # :codedir contents moved from C:\ProgramData\PuppetLabs\puppet\etc (:confdir)
environments * # :environmentpath
production *
environment.conf *
manifests *
modules *
hiera.yaml * # :hiera_config (deprecated location, puppet and hiera look here first)
hieradata * # n/a
modules * # user modulepath
C:\ProgramData\PuppetLabs\facter * same
facts.d * # external facts directory (not pluginsync'ed)
C:\ProgramData\PuppetLabs\mcollective
plugins * # user installed plugins
etc * same
client.cfg
facts.yaml
server.cfg
var * same
log *
mcollective.log
C:\ProgramData\PuppetLabs\puppet
-------------------------------------------------------------------------------------------------------
cache # :vardir C:\ProgramData\PuppetLabs\puppet\var
bucket # :bucketdir
client_yaml # :clientyamldir
client_data # :client_datadir
clientbucket # :clientbucketdir
devices # :devicedir
facts.d # :pluginfactdest (pluginsync'ed)
lib # :libdir
facts # used to generate :factpath
reports # :reportdir
server_data # :server_datadir
state # :statedir
yaml # :yamldir
-------------------------------------------------------------------------------------------------------
etc * # :confdir same
auth.conf # :rest_authconfig
autosign.conf # :autosign
binder_config.yaml # :binder_config
csr_attributes.yaml # :csr_attributes
custom_trusted_oid_mapping.yaml # :trusted_oid_mapping_file
device.conf # :deviceconfig
fileserver.conf # :fileserverconfig
hiera.yaml * # :hiera_config
puppet.conf * # :config
routes.yaml # :route_file
ssl # :ssldir
-------------------------------------------------------------------------------------------------------
var *
log # :logdir same
puppet.log # not enabled by default
run # :rundir same
agent.pid # :pidfile
C:\ProgramData\PuppetLabs\pxp-agent *
etc *
pxp-agent.conf # pxp-agent configuration file
modules * # stores configuration files for pxp-agent modules
pxp-module-puppet.conf # configuration file of the pxp module puppet (optionally, to override puppet.bat location)
var *
log *
pxp-agent.log # enabled by default
pxp-access.log # not enabled by default
spool * # directory containing results of pxp-agent modules
run *
C:\Program Files\Puppet Labs\Puppet
VERSION # puppet-agent package version
C:\Program Files\Puppet Labs\Puppet\bin *
environment.bat * # setup LOAD_PATH
facter.bat * # bat file wrappers
hiera.bat *
mco.bat *
puppet.bat *
puppet_shell.bat * # targets for shortcuts
run_facter_interactive.bat *
run_puppet_interactive.bat *
C:\Program Files\Puppet Labs\Puppet\facter *
bin * # executables and dlls
facter.exe *
libfacter.so *
lib*.dll * # gcc, mingw, boost libraries
inc * # facter headers
facter *
lib *
facter.rb * # ruby bindings
C:\Program Files\Puppet Labs\Puppet\hiera *
bin *
hiera * # ruby bin wrapper
lib *
hiera.rb *
C:\Program Files\Puppet Labs\Puppet\mcollective *
bin *
mcollectived * # ruby bin wrapper
mco *
lib *
mcollective.rb *
C:\Program Files\Puppet Labs\Puppet\misc *
LICENSE.rtf * # license
puppetlabs.ico * # icon for start menu shortcut
puppetres.dll * # event log message resource dll
versions.txt * # versions of components
C:\Program Files\Puppet Labs\Puppet\puppet *
bin *
puppet * # ruby bin wrapper
lib *
puppet.rb *
share *
locale *
config.yaml * # configuration file used by the gettext-setup gem
<lang_COUNTRY> *
LC_MESSAGES\<project>.mo *# One directory for each supported locale,
# containing the MO files for each project.
# Example for English:
# C:\Program Files\Puppet Labs\Puppet\puppet\locale\en_US\LC_MESSAGES\puppet.mo
C:\Program Files\Puppet Labs\Puppet\pxp-agent *
bin *
pxp-agent.exe *
lib*.dll * # gcc, mingw, boost libraries
# pxp-agent also loads openssl libraries (below)
modules *
pxp-module-puppet *
pxp-module-puppet.bat *
C:\Program Files\Puppet Labs\Puppet\service *
daemon.rb * # windows service daemon
nssm.exe * # NSSM used to run pxp-agent
C:\Program Files\Puppet Labs\Puppet\sys *
ruby *
bin *
ruby.exe *
ssleay32.dll * # openssl dll
libeay32.dll * # openssl dll
lib*.dll * # yaml, iconv, gdbi & ffi libraries
include *
lib *
share *
tools *
bin *
elevate.exe * # Used to elevate interactive commands
C:\Windows\Temp # :module_working_dir
When running as non-root on *nix and Windows, puppet will use the
following top-level paths, where ~ is expanded to the user's home
directory. On Windows this is C:\Users\username (or C:\Documents and Settings\username for Windows 2003).
Only the top-level paths are different when running as non-root. Files
and directories that descend from the top-level are the same when
running as root and non-root, e.g. puppet.conf is always
$confdir/puppet.conf. As a result, only the top-level paths are shown.
~/.puppetlabs/client-tools # user-specific client tool settings
~/.puppetlabs/etc/puppet # :confdir ~/.puppet
~/.puppetlabs/etc/code # :codedir n/a
~/.puppetlabs/opt/puppet/cache # :vardir ~/.puppet/var
~/.puppetlabs/var/run # :rundir ~/.puppet/var/run
~/.puppetlabs/var/log # :logdir ~/.puppet/var/log
~/.puppetlabs/opt/facter/facts.d # n/a ~/.facter/facts.d
On Windows, when not running on the SYSTEM account
~/AppData/Local/Temp # :module_working_dir
These sections describe other Puppet packages that rely on puppet-agent to create the initial directory layout. It does not attempt to specify the full set of file paths for these packages, just cases where the other package has a dependency on puppet-agent.
/etc/puppetlabs/puppet
puppetdb.conf
The package will install a service named puppetserver, create a
puppet user and group, and run the service as the puppet user.
/etc/puppetlabs/puppetserver
logback.xml
conf.d
puppetserver.conf
/opt/puppetlabs/bin # symlinks of puppet server binaries
puppetserver@ -> /opt/puppetlabs/server/apps/puppetserver/bin/puppetserver
/opt/puppetlabs/server # serverside apps live underneath
apps
httpd # httpd app dir
bin
httpd
lib
puppetserver # puppetserver app dir
bin
puppetserver
lib
bin # symlinks of server binaries
httpd@ -> /opt/puppetlabs/server/apps/httpd/bin/httpd
puppetserver@ -> /opt/puppetlabs/server/apps/puppetserver/bin/puppetserver
data
puppetserver # :vardir (and $HOME for services that use it)
bucket # :bucketdir
filesync # file sync service datadir
client
storage
reports # :reportdir
server_data # :server_datadir
yaml # :yamldir
/var/log/puppetlabs
puppetserver * # writeable by puppetserver
puppetserver.log
/var/run/puppetlabs # :rundir /var/lib/puppet/run
puppetserver # writeable by puppetserver
puppetserver.pid
This is a compatibility package using passenger to serve a ruby based puppetmaster.
The package will install a service named puppetmaster, create a
puppet user and group, and run the service as the puppet user.
/opt/puppetlabs/server * # serverside apps live underneath
data *
puppetmaster * # :vardir (and $HOME for services that use it)
bucket # :bucketdir
reports # :reportdir
server_data # :server_datadir
yaml # :yamldir
/var/log/puppetlabs
puppetmaster * # writeable by puppetmaster
puppetmaster.log
/var/run/puppetlabs # :rundir /var/lib/puppet/run
puppetmaster * # writeable by puppetmaster
puppetmaster.pid
The package will install a service named razor-server, create a razor
user and group, and run the service as the razor user.
/etc/puppetlabs/razor-server /etc/razor
config.yaml
razor-torquebox.sh
shiro.ini
/opt/puppetlabs/bin
razor-admin -> /opt/puppetlabs/server/apps/razor-server/share/razor-server/bin/razor-binary-wrapper
/opt/puppetlabs/server/bin
razor-admin -> /opt/puppetlabs/server/apps/razor-server/share/razor-server/bin/razor-binary-wrapper
/opt/puppetlabs/server/apps/razor-server
bin
jruby -> /opt/puppetlabs/server/apps/razor-server/share/torquebox/jruby/bin/jruby
sbin
torquebox -> /opt/puppetlabs/server/apps/razor-server/share/torquebox/jruby/bin/torquebox
share
razor-server /opt/razor
bin
razor-admin
razor-binary-wrapper
brokers
lib
razor-server.env /usr/share/razor-server/razor-server.env
shiro.ini
vendor
torquebox /opt/razor-torquebox
jboss
jruby
var/razor /var/lib/razor
/opt/puppetlabs/server/data/razor-server
repo /var/lib/razor/repo-store
/var/log/puppetlabs/razor-server /var/log/razor-server
/var/run/puppetlabs/razor-server /run/razor-server
The current specification calls for the puppet-agent and puppetserver to continue sharing an ssldir. The main reason being the node running the puppetserver needs to use the agent's private key when acting as an SSL client. There are issues with this approach, but it's not something
we are trying to solve now.