A free mirror of the open-source Salt packages for Debian, Ubuntu, RHEL-family Linux, and Windows, synced every night from the Salt Project's own repository. If the upstream host moves or has an outage, your installs keep working.
The same files the Salt Project publishes, byte for byte. The Debian and RPM repositories keep the Salt Project's own signed indexes, so apt and dnf check every package with the Salt Project's key, exactly as they do upstream. We sign nothing.
Every night the sync verifies the Salt Project's signatures with a pinned key, checks every package against the signed index and the checksum the upstream server publishes, and refuses anything that does not match. Packages go up first and indexes last, so the mirror never lists a file it does not have.
Salt 3006 LTS, 3007, and 3008 LTS: Debian and Ubuntu (amd64 and arm64), RHEL, Rocky, AlmaLinux, Oracle Linux, and Amazon Linux (x86_64 and aarch64), and the Windows installers. Last sync.
Debian and Ubuntu. Keep the Salt Project's key; only the address changes.
sudo mkdir -p /etc/apt/keyrings
curl -fsSL https://mirror.gardience.com/salt/api/security/keypair/SaltProjectKey/public | sudo tee /etc/apt/keyrings/salt-archive-keyring.asc >/dev/null
echo "deb [signed-by=/etc/apt/keyrings/salt-archive-keyring.asc] https://mirror.gardience.com/salt/saltproject-deb/ stable main" | sudo tee /etc/apt/sources.list.d/salt.list
sudo apt-get update && sudo apt-get install salt-minion=3008.5RHEL, Rocky, AlmaLinux, Oracle Linux, and Amazon Linux.
sudo tee /etc/yum.repos.d/salt.repo >/dev/null <<'EOF'
[salt-repo]
name=Salt (Gardience mirror)
baseurl=https://mirror.gardience.com/salt/saltproject-rpm/
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://mirror.gardience.com/salt/api/security/keypair/SaltProjectKey/public
enabled=1
EOF
sudo dnf install salt-minion-3008.5Windows. Installers are at https://mirror.gardience.com/salt/saltproject-generic/windows/VERSION/, for example Salt-Minion-3008.5-Py3-AMD64.msi. Check them against SHA256SUMS; they are also signed by the Salt Project.
The Salt bootstrap script. The mirror keeps Broadcom's folder layout, so pass it with -R: sh bootstrap-salt.sh -R mirror.gardience.com/salt -X stable 3008.5. Anything else that uses packages.broadcom.com/artifactory works the same way with mirror.gardience.com/salt.
Check the key before you trust it: its fingerprint is 10857FFD D3F91EAE 577A21D6 64CBBC81 73D76B3F, the Salt Project's own key. Pin a version and hold it (apt-mark hold or dnf versionlock) so routine updates never move Salt by surprise.
In 2024 the Salt packages moved hosts and installs everywhere broke overnight (what happened). Gardience is built on open-source Salt, so we keep a second copy for our customers and anyone else who needs one. The Salt Project remains the source; this is a mirror. Salt is a trademark of its owner, and this mirror is not affiliated with or endorsed by the Salt Project or Broadcom. The packages are open source under the Apache 2.0 license.