A second source for Salt packages: mirror.gardience.com
A free, verified mirror of the open-source Salt packages for Debian, Ubuntu, RHEL-family Linux, and Windows, synced nightly from packages.broadcom.com. Same layout, same signatures, one host name to change.
In 2024 the Salt packages moved hosts, and installs everywhere broke overnight (what happened). Golden images, CI jobs, and enrollment scripts all pointed at an address that stopped answering. One source for something your whole fleet depends on is a risk worth removing, so we now run a second one.
mirror.gardience.com/salt is a free mirror of the open-source Salt packages: Salt 3006 LTS, 3007, and 3008 LTS for Debian and Ubuntu, RHEL, Rocky, AlmaLinux, Oracle Linux, and Amazon Linux, and the Windows installers. It syncs from packages.broadcom.com every night.
Unmodified, and checked before it is published#
The mirror holds the same files the Salt Project publishes, byte for byte. The Debian and RPM repositories keep the Salt Project's own signed indexes, so apt and dnf check every package against the Salt Project's key exactly as they do upstream. We sign nothing.
Each night the sync verifies the Salt Project's signatures with a pinned key, checks every package against the signed index and against the checksum the upstream server publishes, and refuses anything that does not match. Packages are published first and indexes last, so the mirror never lists a file it does not have. The time of the last sync is at mirror.gardience.com/salt/status.json.
One host name to change#
The mirror keeps Broadcom's folder layout, so anything that works with packages.broadcom.com/artifactory works with mirror.gardience.com/salt. The Salt bootstrap script takes it with -R:
sh bootstrap-salt.sh -R mirror.gardience.com/salt -X stable 3008.5The mirror page has the apt and dnf setup lines and the Windows installers. Pin a version and hold it, so a routine update never moves Salt by surprise.
What it is not#
It is not a fork, and the Salt Project remains the source. Salt is a trademark of its owner, and the mirror is not affiliated with or endorsed by the Salt Project or Broadcom. The packages are open source under the Apache 2.0 license.
Gardience, a supported console for Windows and Linux fleets on open-source Salt, is moving its own agent installs onto the same mirror in its next release. If you run Salt and want patching, compliance, and approvals on top of it, try it free.
Try Gardience on your own machines
One supported console for Windows and Linux on open-source Salt: patching, a scored STIG/CIS-aligned baseline, drift repair, event-driven automation, two-person approval and a tamper-evident audit log. Flat yearly pricing, not per node.
Free 90-day trial (25 nodes)See it work Compare