October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
VGSources
Blog

How to Install and Configure Salt Master and Minion Servers on Ubuntu

Install Salt on Ubuntu from the SaltProject repository, configure master and minion roles, accept keys securely, open the required firewall ports, and verify communication with test.ping.
Length9 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Install Salt from the current SaltProject APT repository, place salt-master on one Ubuntu host and salt-minion on every managed host, set each minion’s master: address, allow the master’s Salt ports through any firewall, accept each minion key, and enable both services. A minion cannot receive Salt commands until its key is accepted on the master.

The exact repository signing-key path, Ubuntu codename list, and release pin can change. Use the current SaltProject Debian/Ubuntu installation guide for those repository lines, then use the configuration and verification procedure below. Do not copy an old tutorial’s codename or an obsolete apt-key command.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What the finished setup looks like

Salt uses a master-and-minion model. The master stores the accepted public keys and publishes jobs. Each minion maintains a connection to the master, receives jobs, and returns results. You normally need one master host and one minion package on every Ubuntu system you intend to manage.

  • Master: runs salt-master, listens for minion connections, and is where you run administrative Salt commands.
  • Minion: runs salt-minion, identifies itself with a key, and points to the master in /etc/salt/minion.
  • Trust boundary: the master must explicitly accept each minion key before commands are authorized.
  • Network path: minions must be able to reach the master on TCP ports 4505 and 4506 when the default listener configuration is used.

This guide assumes separate Ubuntu hosts or virtual machines with administrative sudo access. You can run a master and minion on the same machine for a lab, but production deployments normally separate the control host from managed systems.

#1 Best Overall
Sale
Gaoye Blue Light Blocking Glasses
  • BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
  • EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
  • COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
  • LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
  • WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.

Check prerequisites and Ubuntu’s codename

Before adding a repository, confirm the operating system and release on every host. The guides reviewed cover Ubuntu 18.04, 20.04, 22.04 and 24.04-era systems, but support changes over time; check the current SaltProject guide for the release you are installing today.

  1. Log in to the host and inspect its release metadata:
    cat /etc/os-release
  2. If available, print the codename exposed by Ubuntu’s release metadata:
    . /etc/os-release && printf '%sn' "$VERSION_CODENAME"
  3. Record the fully qualified hostname or reachable IP address of the master. Every minion must resolve that name, either through DNS or an /etc/hosts entry.
  4. Confirm that clocks, routing, and package-manager access are working. A stale package index or blocked outbound HTTPS connection can look like a Salt configuration failure later.

Codename errors are a common installation problem. In particular, a community guide used the older focal codename for an Ubuntu 24.04 installation. Do not substitute a codename from another release: select the codename and repository entry shown for your actual Ubuntu version in the current official guide.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Add the official SaltProject APT repository

Use the SaltProject repository rather than an old distribution package or a copied 2014-era tutorial. The repository provides the supported Salt packages and the installation guide’s signing-key and APT-source instructions.

  1. On each host, install the basic tools required by the current repository instructions. A typical starting point is:
    sudo apt-get update
    sudo apt-get install -y ca-certificates curl gnupg
  2. Open the current SaltProject Debian/Ubuntu installation instructions and choose your Ubuntu release. Copy its signing-key installation and APT source commands exactly. The key location and source syntax are version-sensitive, so do not reconstruct them from an older article.
  3. Apply the repository preference pin shown by that guide if it still applies to your selected Salt release. The documented 3008-series procedure used an APT priority of 1001; verify the release series and complete stanza on the live guide before creating the preference file.
  4. Refresh package metadata and confirm that APT can see Salt packages:
    sudo apt-get update
    apt-cache policy salt-master salt-minion

If apt-get update reports a missing key, an invalid signature, or a release-file error, stop and correct the repository definition. Installing from a mismatched Ubuntu codename can produce packages that appear available but fail during dependency resolution or service startup.

Install the master and minion packages

Install the master role

On the host that will control the environment, install the master package:

Rank #2
Windex Gaming Cleaning Wipes, Pre-Moistened Wipes to Instantly Clean all Gaming Gear and Electronics, Resealable Packaging for a Freshness Lock, 25 count (Pack of 1)
  • WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
  • AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
  • PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
  • ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
  • COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
sudo apt-get install -y salt-master

Installing the package does not by itself establish trust with any minion. You still need to configure reachability, start the service, and accept keys.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Install the minion role

On every managed Ubuntu host, install the minion package:

sudo apt-get install -y salt-minion

Install only the role each host needs unless you deliberately want a combined lab node. Keeping the control plane on a designated master makes firewall rules, key review, and troubleshooting easier.

Configure the Salt master

The packaged master configuration is suitable for many straightforward installations. You only need to edit it when the default behavior does not match your network, such as a host with multiple interfaces or a requirement to bind Salt to one address.

Bind the master to a specific interface when necessary

  1. Open the master configuration:
sudoedit /etc/salt/master
  1. Set the interface directive to the address that minions can reach. For example, the value should be the master’s routable address, not a loopback-only address:
    interface: <master_ip>
  2. Save the file and restart the service so the listener uses the new binding:
sudo systemctl restart salt-master

Do not add unrelated options copied from an old configuration reference. The default master configuration is intentionally broad, and option names or defaults outside the basic interface setting should be checked against the current Salt documentation before use.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
LISEN Cell Phone Stand Phone Holder for Desk, Office Decor Gadgets for Men
  • Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
  • Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
  • Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
  • ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
  • Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)

Allow Salt traffic through UFW or another firewall

By default, the master listens on TCP 4505 and 4506 on all interfaces. If UFW is active, allow both ports on the master:

sudo ufw allow 4505/tcp
sudo ufw allow 4506/tcp
sudo ufw status verbose

Apply equivalent rules in cloud security groups, network firewalls, or host firewalls outside UFW. Where your network policy permits, restrict the source to the minion subnet instead of exposing the ports broadly. The important requirement is that each minion can establish a connection to the selected master address.

If you bind the master to one interface, make sure the firewall rule and DNS name point to that same reachable address. A rule on the wrong interface will look identical to a stopped service from the minion’s perspective.

Configure every minion to find the master

Set the master address

  1. On each minion, open its configuration file:
sudoedit /etc/salt/minion
  1. Set the master value to the master’s resolvable hostname or IP address:
master: <master_hostname_or_ip>
  1. Save the file. Restart the minion after the master service and firewall are ready:
sudo systemctl restart salt-minion

If no master value is set, a minion looks for a host named salt. That behavior can work when DNS already maps salt to the master, or when you add a deliberate entry to /etc/hosts, but an explicit master: setting is clearer and avoids accidental connections to the wrong host.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Check identity and duplicate names

Each minion’s key is associated with its minion ID. Ensure hostnames or explicitly configured IDs are unique before accepting keys; duplicate identities make it difficult to tell which machine a command targets. If you change a machine’s identity after key exchange, treat the resulting pending key as a trust decision rather than accepting it automatically.

Rank #4
Ledagic IC+RGBW USB Powered Led Light Bar with App & Remote Control, 2 Pack
  • Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
  • Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
  • 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
  • Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
  • USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC

Enable the services at boot

Enable and start the master on the control host:

sudo systemctl enable --now salt-master
sudo systemctl status salt-master --no-pager

Enable and start the minion on every managed host:

sudo systemctl enable --now salt-minion
sudo systemctl status salt-minion --no-pager

enable --now both registers the service for future boots and starts it immediately. If a service fails, inspect its status and journal before changing configuration:

sudo journalctl -u salt-master -b --no-pager
sudo journalctl -u salt-minion -b --no-pager

Review and accept minion keys on the master

Starting a minion creates a key request on the master. Acceptance is an explicit trust step; until it is complete, remote execution will not work.

  1. On the master, list all known keys:
sudo salt-key --list all
  1. Compare the pending key name with the hostname or identity you intended to enroll. Do not accept an unfamiliar request.
  2. Accept the verified key by its minion ID:
sudo salt-key -a <minion_id>
  1. Run salt-key --list all again and confirm that the ID now appears in the accepted section.

For a first installation, accept keys one at a time so an unexpected request cannot be mistaken for a batch of known hosts. If a machine was rebuilt, compare the new fingerprint or identity through your normal inventory process before accepting its replacement key.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Verify the connection and execute a first command

After the key is accepted, test one minion from the master:

sudo salt '<minion_id>' test.ping

A successful response returns a positive result from that minion. To test every accepted minion, use:

Best Value
Sale
HUANUO FlowLift™ Dual Monitor Stand, Fully Adjustable Gaming Monitor Desk Mount for 13–32″ Computer Screens, Full Motion VESA 75x75/100x100 with C-Clamp & Grommet Base, Each Arm Holds 4.4 to 19.8 lbs
  • Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
  • Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
  • Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
  • Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
  • Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
sudo salt '*' test.ping

If the wildcard test returns no response from one host, test that ID individually. This separates a single-host problem from a master-wide problem. Once connectivity is confirmed, use a read-only information command such as:

sudo salt '<minion_id>' test.version

Keep the first commands simple. Package changes, service restarts, and state applications should wait until key membership and basic communication are correct.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Troubleshoot the common failure modes

The minion is listed as unaccepted

  • Run sudo salt-key --list all on the master and copy the exact pending ID.
  • Confirm that the request belongs to the machine you intended to enroll.
  • Accept that ID, then rerun the individual test.ping.
  • If the ID keeps returning after a rebuild, investigate duplicate names or a changed key instead of repeatedly accepting requests.

The minion cannot reach the master

  • Check the minion’s master: line for spelling, indentation, and the correct hostname or address.
  • Verify name resolution from the minion. If you rely on a hostname, confirm DNS or the intended /etc/hosts entry.
  • Check that salt-master is active on the master and that it is bound to the interface you expect.
  • Review UFW, cloud security groups, and upstream firewalls for the two required Salt listener ports.
  • Read the minion journal for connection and authentication errors, then correct one cause at a time before restarting.

The repository fails on Ubuntu 24.04 or another newer release

Recheck the repository entry against the current official guide and the host’s actual codename. Do not change a 24.04 host to an older codename merely because a third-party page says it worked. Remove or correct the mismatched source, refresh APT metadata, and install again.

The master starts but minions still time out

  • Review the master’s interface setting. A binding to a non-routable or inactive address prevents connections even when the process is running.
  • Confirm the minion is using the same address or DNS name that the firewall permits.
  • Restart salt-master after an interface change and salt-minion after changing its master: value.
  • Use service status and journal output on both sides; a successful process status alone does not prove network reachability.

Keep Salt packages under deliberate upgrade control

Salt upgrades can change behavior, so choose an upgrade policy rather than allowing an unrelated system upgrade to change the control plane unexpectedly. The official installation guide documents holding a package so a system-wide upgrade skips it. On an installation where you have decided to hold the roles, the usual APT mechanism is:

sudo apt-mark hold salt-master salt-minion

Record which hosts are held and review release notes before removing the hold. When you are ready to upgrade, unhold the relevant package, refresh the repository metadata, upgrade in a maintenance window, and verify service status and minion responses before proceeding to the next group of hosts. The exact supported Salt release and repository pin should always come from the current SaltProject instructions, not an old Ubuntu tutorial.

Installation checklist

  • Every host runs a currently supported Ubuntu release for the Salt package series you selected.
  • The SaltProject repository, signing key, codename, and any release pin match the host’s Ubuntu version.
  • The master has salt-master; each managed host has salt-minion.
  • Each minion has a correct master: value or an intentionally configured salt hostname.
  • The master’s listener interface is reachable from the minion network.
  • TCP 4505 and 4506 are permitted through every firewall in the path.
  • Both services are enabled and running.
  • Every pending key was checked and accepted deliberately.
  • An individual test.ping succeeds before you run larger commands.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.