Puppet Module

The falcon Puppet module installs, configures, and manages the CrowdStrike Falcon sensor service across Linux, macOS, and Windows. It supports API-based downloads or local package installation, with full control over versioning, proxy settings, and service state.

View on GitHub

Installation

puppet module install crowdstrike-falcon

Or add to your Puppetfile:

mod 'crowdstrike-falcon'

Requirements

Purpose	Scope
Sensor package download	Sensor Download: READ
Version policy lookup	Sensor update policies: READ

Platform Support

• Debian/Ubuntu
• Red Hat/CentOS/Alma/Rocky
• Amazon Linux
• SUSE Linux Enterprise
• macOS
• Windows

Quick Start

# API install with CID registration
class { 'falcon':
  client_id     => Sensitive('YOUR_CLIENT_ID'),
  client_secret => Sensitive('YOUR_CLIENT_SECRET'),
  cid           => 'YOUR_CID_WITH_CHECKSUM',
}

Install Methods

The module supports two installation methods via the install_method parameter:

api (default) — Downloads the sensor package from the Falcon API. Version selection controlled by:

• version — Install a specific version (highest priority)
• update_policy — Use a sensor update policy to determine version
• version_decrement — Install N versions behind latest (0 = latest)

local — Install from a local file or URL. Requires package_options with at minimum a source path.

Content

Reference Full class parameters, resource types, and configuration options.