Skip to content

Latest commit

 

History

History
872 lines (748 loc) · 34.2 KB

file_paths.md

File metadata and controls

872 lines (748 loc) · 34.2 KB
Raw

Puppet Installation Layout

These tables specify the file paths in a Puppet installation and the corresponding settings, denoted as :setting.

Index

Index

puppet-agent 6 (*nix)

The package will create the following services, all running as root by default:

  • puppet,
  • pxp-agent

It will not create a puppet user or group.

The structure of the Puppet 6 agent on *nix differs from Puppet 5 in that:

  • /opt/puppetlabs/puppet/vendor_modules has been added to hold core puppet modules
  • mcollective and all of its files have been removed

The files and directories annotated by an '*' below indicate that they are created by package installation.

Path                                  Setting
---------------------------------------------
/etc/puppetlabs *

/etc/puppetlabs/client-tools *        # default client tool settings
    puppet-access.conf *
    puppet-orchestrator.conf *
    puppetdb.conf *

/etc/puppetlabs/code *                # :codedir
    environments *                    # :environmentpath
      production *
        hieradata *
        environment.conf *
        manifests *
        modules *
    hiera.yaml *                      # :hiera_config (deprecated location, puppet and hiera look here first)
    modules *                         # user modulepath

/etc/puppetlabs/code-staging          # staging directory
    environments
      production
        hieradata
        environment.conf
        manifests
        modules
    hiera.yaml                        # only if using deprecated default location
    modules

/etc/puppetlabs/puppet *              # :confdir
    auth.conf *                       # :rest_authconfig
    autosign.conf                     # :autosign
    binder_config.yaml                # :binder_config
    csr_attributes.yaml               # :csr_attributes
    custom_trusted_oid_mapping.yaml   # :trusted_oid_mapping_file
    device.conf                       # :deviceconfig
    fileserver.conf                   # :fileserverconfig
    hiera.yaml *                      # :hiera_config
    puppet.conf *                     # :config
    routes.yaml                       # :route_file
    devices                           # :deviceconfdir
    ssl                               # :ssldir

/etc/puppetlabs/pxp-agent *
    modules *                         # stores configuration files for pxp-agent modules
        pxp-module-puppet.conf *      # configuration file of the pxp module puppet
    pxp-agent.conf                    # pxp-agent configuration file

/opt/puppetlabs/bin *                 # symlink targets of puppet related binaries
    facter@ *                         -> /opt/puppetlabs/puppet/bin/facter
    hiera@ *                          -> /opt/puppetlabs/puppet/bin/hiera
    puppet@ *                         -> /opt/puppetlabs/puppet/bin/puppet

/opt/puppetlabs/facter *
    facts.d *                         # external facts directory (not pluginsync'ed)

/opt/puppetlabs/puppet *              # ruby-puppet root
    bin *
        facter *
        gem *
        hiera *
        openssl *
        puppet *
        pxp-agent *
        ruby *
        virt-what *
    cache *                           # :vardir
        bucket                        # :bucketdir
        client_yaml                   # :clientyamldir
        client_data                   # :client_datadir
        clientbucket                  # :clientbucketdir
        devices                       # :devicedir
        facts.d                       # :pluginfactdest (pluginsync'ed)
        lib                           # :libdir
        facts                         # used to generate :factpath
        puppet-module                 # :module_working_dir
        reports                       # :reportdir
        server_data                   # :server_datadir
        state                         # :statedir
        yaml                          # :yamldir
    include *
        facter *
        openssl *
    lib *
        libaugeas.so *
        libcrypto.so *
        libfacter.so *
        libruby.so *
        libssl.so *
        ruby *
            vendor_ruby *             # ruby code
                facter.rb *
                hiera.rb *
                puppet.rb *
        virt-what *
            virt-what-cpuid-helper *
    modules *                         # system modulepath
    share *
        augeas *
        man *
        vim *
        locale *
            config.yaml *             # configuration file used by the gettext-setup gem
            <lang_COUNTRY> *
                LC_MESSAGES *
                    <project>.mo *    # One directory for each supported locale,
                                      # containing the MO files for each project.
                                      # Example for English:
                                      # /opt/puppetlabs/puppet/share/locale/en_US/LC_MESSAGES/puppet.mo
    ssl *
    vendor_modules *                  # :vendormoduledir
    VERSION                           # puppet-agent package version

/opt/puppetlabs/pxp-agent *
    modules *
        pxp-module-puppet *
    spool *                            # directory containing results of pxp-agent modules
    tasks-cache *                      # directory containing a cache of files for all downloaded tasks

/var/log/puppetlabs *
    puppet *                          # :logdir                      /var/lib/puppet/log
        puppet.log                    # not enabled by default
    pxp-agent *
        pxp-agent.log                 # enabled by default
        pcp-access.log                # not enabled by default

/var/run/puppetlabs *                 # :rundir                      /var/lib/puppet/run
    agent.pid                         # :pidfile
    pxp-agent.pid

puppet-agent 6 (Windows)

On Windows:

  • The installation path defaults to Puppet Labs\Puppet under the Program Files directory. For example, on a default Windows installation, this would be C:\Program Files\Puppet Labs\Puppet
  • The common app data directory defaults to PuppetLabs in the ProgramData directory. On a default Windows installation, this would be C:\ProgramData\PuppetLabs

The package will create the following services:

  • puppet,
  • pxp-agent

These services run as LocalSystem by default, but the PUPPET_AGENT_ACCOUNT_USER MSI property can be used to override this setting (see the Windows installation documentation for deatils).

Installation of puppet-agent will not create a puppet user or group.

The structure of the Puppet 6 agent on Windows differs from Puppet 5 in that:

  • C:\Program Files\Puppet Labs\Puppet\puppet\vendor_modules has been added to hold core puppet modules
  • mcollective and all of its associated files have been removed
  • To make the paths in the Windows agent more consistent with other platforms, install paths have changed as follows:
    • The base of the ruby installation has moved from C:\Program Files\Puppet Labs\Puppet\sys\ruby to C:\Program Files\Puppet Labs\Puppet\puppet
    • Tools (like elevate.exe) have similarly moved from C:\Program Files\Puppet Labs\Puppet\sys\tools to C:\Program Files\Puppet Labs\Puppet\puppet\bin
    • The agent components facter, hiera, and pxp-agent no longer have their own dedicated install locations at C:\Program Files\Puppet Labs\Puppet\<component-name>; they are installed to the same prefix as other projects (C:\Program Files\Puppet Labs\Puppet\puppet)

The listing below shows the file structure of a default installation of puppet-agent. The files and directories annotated by an * indicate that they are created during the installation.

This listing assumes default Windows paths; the paths may vary when Windows has been customized.

Path                                        Setting
---------------------------------------------------
C:\ProgramData\PuppetLabs *
    code *                                  # :codedir
        environments *                      # :environmentpath
          production *
            data *
            environment.conf *
            manifests *
            modules *
        modules *                           # user modulepath
    facter *
        facts.d *                           # external facts directory (not pluginsync'ed)
    puppet *
        cache *                             # :vardir
            bucket                          # :bucketdir
            client_yaml *                   # :clientyamldir
            client_data *                   # :client_datadir
            clientbucket *                  # :clientbucketdir
            devices                         # :devicedir
            facts                           # used to generate :factpath
            facts.d *                       # :pluginfactdest (pluginsync'ed)
            lib *                           # :libdir
            locales *                       #
            preview *
            reports                         # :reportdir
            server_data                     # :server_datadir
            state *                         # :statedir
            yaml                            # :yamldir
        etc *                               # :confdir
            auth.conf                       # :rest_authconfig
            autosign.conf                   # :autosign
            binder_config.yaml              # :binder_config
            csr_attributes.yaml             # :csr_attributes
            custom_trusted_oid_mapping.yaml # :trusted_oid_mapping_file
            device.conf                     # :deviceconfig
            fileserver.conf                 # :fileserverconfig
            hiera.yaml *                    # :hiera_config
            puppet.conf *                   # :config
            routes.yaml                     # :route_file
            devices                         # :deviceconfdir
            ssl *                           # :ssldir
        var *
            log *                           # :logdir
                puppet.log                  # not enabled by default
            run *                           # :rundir
                agent.pid                   # :pidfile
    pxp-agent *
        etc *
            modules *
        var *
            log *
                pxp-agent.log               # enabled by default
                pcp-access.log              # not enabled by default
            spool *                         # directory containing results of pxp-agent modules
            run *


C:\Program Files\Puppet Labs\Puppet\
    VERSION *                               # puppet-agent package version file
    bin *
        environment.bat *
        facter.bat *
        facter_interactive.bat *
        hiera.bat *
        puppet.bat *
        puppet_interactive.bat *
        puppet_shell.bat *
        run_facter_interactive.bat *
        run_puppet_interactive.bat *
    misc *
        LICENSE.rtf *
        puppet.ico *
        versions.txt *
    puppet *
        VERSION *
        bin *
            elevate.exe *                   # Used to elevate interactive commands
            environment.bat *               # setup LOAD_PATH
            facter.bat *                    # bat file wrappers
            hiera.bat *
            puppet.bat *
            puppet_shell.bat *              # targets for shortcuts
            run_facter_interactive.bat *
            run_puppet_interactive.bat *
            puppetres.dll *                 # event log message resource dll (in Puppet\misc for releases before puppet-agent 1.6.0)

            ruby.exe *                      # ruby executable

            facter *                        # ruby component bin wrappers
            hiera *
            puppet *

            facter.exe *                    # component executables
            pxp-agent.exe *

            facter.bat *                    # bat file wrappers
            hiera.bat *
            puppet.bat *

            *.dll *                         # supporting library dlls
        include *                           # library headers for bundled curl, openssl, ruby
        lib *
            *.dll *                         # supporting library dlls
            ruby *
                gems *                          # bundled third party gems
                vendor_gems *                   # bundled third party gems shared between puppet-agent and puppetserver
                vendor_ruby *                   # puppet ruby source
                    facter.rb *                 # facter ruby bindings
                    hiera.rb *
                    puppet.rb *
        modules *
        share *
            doc *
            locale *
            man *
            vim *
        ssl *
        vendor_modules *                    # vendored core modules distributed with puppet
    pxp-agent *
        modules *
            pxp-module-puppet *
            pxp-module-puppet.bat *
        spool *
        tasks-cache *
    service *
        daemon.rb *

puppet-agent 4, 5 (*nix)

The package will create the following services puppet, mcollective, and pxp-agent, all running as root by default. It will not create a puppet user or group. The files annotated by an '*' indicate that they are created by package installation. The 3.x column shows the difference of the specification vs the 3.x implementation.

Path                                  Setting                        3.x
------------------------------------------------------------------------
/etc/puppetlabs *                                                    n/a

/etc/puppetlabs/client-tools *        # default client tool settings
    puppet-access.conf *
    puppet-orchestrator.conf *
    puppetdb.conf *

/etc/puppetlabs/code *                # :codedir                     contents moved from :confdir
    environments *                    # :environmentpath
      production *
        hieradata *
        environment.conf *
        manifests *
        modules *
    hiera.yaml *                      # :hiera_config (deprecated location, puppet and hiera look here first)
    modules *                         # user modulepath

/etc/puppetlabs/code-staging          # staging directory            n/a
    environments
      production
        hieradata
        environment.conf
        manifests
        modules
    hiera.yaml                        # only if using deprecated default location
    modules

/etc/puppetlabs/mcollective *
    client.cfg *
    facts.yaml *
    server.cfg *

/etc/puppetlabs/puppet *              # :confdir                     /etc/puppet
    auth.conf *                       # :rest_authconfig
    autosign.conf                     # :autosign
    binder_config.yaml                # :binder_config
    csr_attributes.yaml               # :csr_attributes
    custom_trusted_oid_mapping.yaml   # :trusted_oid_mapping_file
    device.conf                       # :deviceconfig
    fileserver.conf                   # :fileserverconfig
    hiera.yaml *                      # :hiera_config
    puppet.conf *                     # :config
    routes.yaml                       # :route_file
    ssl                               # :ssldir                      /etc/puppet/ssl

/etc/puppetlabs/pxp-agent *
    modules *                         # stores configuration files for pxp-agent modules
        pxp-module-puppet.conf *      # configuration file of the pxp module puppet
    pxp-agent.conf                    # pxp-agent configuration file

/opt/puppetlabs/bin *                 # symlink targets of puppet related binaries
    facter@ *                         -> /opt/puppetlabs/puppet/bin/facter
    hiera@ *                          -> /opt/puppetlabs/puppet/bin/hiera
    mco@ *                            -> /opt/puppetlabs/puppet/bin/mco
    puppet@ *                         -> /opt/puppetlabs/puppet/bin/puppet

/opt/puppetlabs/facter *
    facts.d *                         # external facts directory (not pluginsync'ed)

/opt/puppetlabs/mcollective/
    plugins                           # user installed plugins

/opt/puppetlabs/puppet *              # ruby-puppet root
    bin *
        facter *
        gem *
        hiera *
        mco *
        mcollectived *
        openssl *
        puppet *
        pxp-agent *
        ruby *
        virt-what *
    cache *                           # :vardir                      /var/lib/puppet
        bucket                        # :bucketdir
        client_yaml                   # :clientyamldir
        client_data                   # :client_datadir
        clientbucket                  # :clientbucketdir
        devices                       # :devicedir
        facts.d                       # :pluginfactdest (pluginsync'ed)
        lib                           # :libdir
        facts                         # used to generate :factpath
        puppet-module                 # :module_working_dir
        reports                       # :reportdir
        server_data                   # :server_datadir
        state                         # :statedir
        yaml                          # :yamldir
    include *
        facter *
        openssl *
    lib *
        libaugeas.so *
        libcrypto.so *
        libfacter.so *
        libruby.so *
        libssl.so *
        ruby *
            vendor_ruby *             # ruby code
                facter.rb *
                hiera.rb *
                mcollective.rb *
                puppet.rb *
        virt-what *
            virt-what-cpuid-helper *
    modules *                         # system modulepath            /usr/share/puppet/modules
    share *
        augeas *
        man *
        vim *
        locale *
            config.yaml *             # configuration file used by the gettext-setup gem
            <lang_COUNTRY> *
                LC_MESSAGES *
                    <project>.mo *    # One directory for each supported locale,
                                      # containing the MO files for each project.
                                      # Example for English:
                                      # /opt/puppetlabs/puppet/share/locale/en_US/LC_MESSAGES/puppet.mo
    ssl *
    VERSION                           # puppet-agent package version

/opt/puppetlabs/pxp-agent *
    modules *
        pxp-module-puppet *
    spool *                            # directory containing results of pxp-agent modules
    tasks-cache *                      # directory containing a cache of files for all downloaded tasks

/var/log/puppetlabs *
    mcollective
        mcollective.log
    puppet *                          # :logdir                      /var/lib/puppet/log
        puppet.log                    # not enabled by default
    pxp-agent *
        pxp-agent.log                 # enabled by default
        pcp-access.log                # not enabled by default

/var/run/puppetlabs *                 # :rundir                      /var/lib/puppet/run
    agent.pid                         # :pidfile
    mcollectived.pid
    pxp-agent.pid

puppet-agent 4, 5 (Windows)

On Windows:

  • The installation path defaults to Puppet Labs\Puppet under the Program Files directory. For example, on a default Windows installation, this would be C:\Program Files\Puppet Labs\Puppet
  • The common app data directory defaults to PuppetLabs in the ProgramData directory. On a default Windows installation, this would be C:\ProgramData\PuppetLabs

The package will create the following services:

  • puppet
  • mcollective
  • pxp-agent

These services run as LocalSystem by default, but the PUPPET_AGENT_ACCOUNT_USER MSI property can be used to override this setting (see the Windows installation documentation for deatils).

Installation of puppet-agent will not create a puppet user or group.

The listing below shows the file structure of a default installation of puppet-agent. The files and directories annotated by an * indicate that they are created during installation. The 3.x column shows differences from the 3.x implementation.

This listing assumes default Windows paths; the paths may vary when Windows has been customized.

Path                                      Setting                        3.x
----------------------------------------------------------------------------
C:\ProgramData                                                           n/a

C:\ProgramData\PuppetLabs\client-tools    # default client tool settings
    puppet-access.conf *
    puppet-orchestrator.conf *
    puppetdb.conf *


C:\ProgramData\PuppetLabs\code *          # :codedir                     contents moved from C:\ProgramData\PuppetLabs\puppet\etc (:confdir)
    environments *                        # :environmentpath
      production *
        environment.conf *
        manifests *
        modules *
    hiera.yaml *                          # :hiera_config (deprecated location, puppet and hiera look here first)
    hieradata *                           # n/a
    modules *                             # user modulepath

C:\ProgramData\PuppetLabs\facter *                                       same
    facts.d *                             # external facts directory (not pluginsync'ed)

C:\ProgramData\PuppetLabs\mcollective
    plugins *                             # user installed plugins
    etc *                                                                same
        client.cfg
        facts.yaml
        server.cfg
    var *                                                                same
        log *
            mcollective.log

C:\ProgramData\PuppetLabs\puppet
-------------------------------------------------------------------------------------------------------
    cache                                 # :vardir                      C:\ProgramData\PuppetLabs\puppet\var
        bucket                            # :bucketdir
        client_yaml                       # :clientyamldir
        client_data                       # :client_datadir
        clientbucket                      # :clientbucketdir
        devices                           # :devicedir
        facts.d                           # :pluginfactdest (pluginsync'ed)
        lib                               # :libdir
        facts                             # used to generate :factpath
        reports                           # :reportdir
        server_data                       # :server_datadir
        state                             # :statedir
        yaml                              # :yamldir
-------------------------------------------------------------------------------------------------------
    etc *                                 # :confdir                     same
        auth.conf                         # :rest_authconfig
        autosign.conf                     # :autosign
        binder_config.yaml                # :binder_config
        csr_attributes.yaml               # :csr_attributes
        custom_trusted_oid_mapping.yaml   # :trusted_oid_mapping_file
        device.conf                       # :deviceconfig
        fileserver.conf                   # :fileserverconfig
        hiera.yaml *                      # :hiera_config
        puppet.conf *                     # :config
        routes.yaml                       # :route_file
        ssl                               # :ssldir
-------------------------------------------------------------------------------------------------------
    var *
        log                               # :logdir                      same
            puppet.log                    # not enabled by default
        run                               # :rundir                      same
            agent.pid                     # :pidfile

C:\ProgramData\PuppetLabs\pxp-agent *
    etc *
        pxp-agent.conf                    # pxp-agent configuration file
        modules *                         # stores configuration files for pxp-agent modules
            pxp-module-puppet.conf        # configuration file of the pxp module puppet (optionally, to override puppet.bat location)
    var *
        log *
            pxp-agent.log                 # enabled by default
            pcp-access.log                # not enabled by default
        spool *                           # directory containing results of pxp-agent modules
        run *
    tasks-cache *                         # directory containing a cache of files for all downloaded tasks

C:\Program Files\Puppet Labs\Puppet
    VERSION                               # puppet-agent package version

C:\Program Files\Puppet Labs\Puppet\bin *
    environment.bat *                     # setup LOAD_PATH
    facter.bat *                          # bat file wrappers
    hiera.bat *
    mco.bat *
    puppet.bat *
    puppet_shell.bat *                    # targets for shortcuts
    run_facter_interactive.bat *
    run_puppet_interactive.bat *
    puppetres.dll *                       # event log message resource dll (in Puppet\misc for releases before puppet-agent 1.6.0)

C:\Program Files\Puppet Labs\Puppet\facter *
    bin *                                 # executables and dlls
        facter.exe *
        libfacter.so *
        lib*.dll *                        # gcc, mingw, boost libraries
    inc *                                 # facter headers
        facter *
    lib *
        facter.rb *                       # ruby bindings

C:\Program Files\Puppet Labs\Puppet\hiera *
    bin *
        hiera *                           # ruby bin wrapper
    lib *
        hiera.rb *

C:\Program Files\Puppet Labs\Puppet\mcollective *
    bin *
        mcollectived *                    # ruby bin wrapper
        mco *
    lib *
        mcollective.rb *

C:\Program Files\Puppet Labs\Puppet\misc *
    LICENSE.rtf *                         # license
    puppetlabs.ico *                      # icon for start menu shortcut
    versions.txt *                        # versions of components

C:\Program Files\Puppet Labs\Puppet\puppet *
    bin *
        puppet *                          # ruby bin wrapper
    lib *
        puppet.rb *
    share *
        locale *
            config.yaml *                 # configuration file used by the gettext-setup gem
            <lang_COUNTRY> *
                LC_MESSAGES\<project>.mo *# One directory for each supported locale,
                                          # containing the MO files for each project.
                                          # Example for English:
                                          # C:\Program Files\Puppet Labs\Puppet\puppet\locale\en_US\LC_MESSAGES\puppet.mo

C:\Program Files\Puppet Labs\Puppet\pxp-agent *
    bin *
        pxp-agent.exe *
        lib*.dll *                        # gcc, mingw, boost libraries
                                          # pxp-agent also loads openssl libraries (below)
    modules *
        pxp-module-puppet *
        pxp-module-puppet.bat *

C:\Program Files\Puppet Labs\Puppet\service *
    daemon.rb *                           # windows service daemon
    nssm.exe *                            # NSSM used to run pxp-agent

C:\Program Files\Puppet Labs\Puppet\sys *
    ruby *
        bin *
            ruby.exe *
            ssleay32.dll *                # openssl dll
            libeay32.dll *                # openssl dll
            lib*.dll *                    # yaml, iconv, gdbi & ffi libraries
        include *
        lib *
        share *

    tools *
        bin *
          elevate.exe *                   # Used to elevate interactive commands

(TEMP environment variable)               # :module_working_dir

puppet-agent (non-root)

When running as non-root on *nix and Windows, puppet will use the following top-level paths, where ~ is expanded to the user's home directory. On Windows this is C:\Users\username (or C:\Documents and Settings\username for Windows 2003).

Only the top-level paths are different when running as non-root. Files and directories that descend from the top-level are the same when running as root and non-root, e.g. puppet.conf is always $confdir/puppet.conf. As a result, only the top-level paths are shown.

~/.puppetlabs/client-tools            # user-specific client tool settings
~/.puppetlabs/etc/puppet              # :confdir                    ~/.puppet
~/.puppetlabs/etc/code                # :codedir                    n/a
~/.puppetlabs/opt/puppet/cache        # :vardir                     ~/.puppet/var
~/.puppetlabs/var/run                 # :rundir                     ~/.puppet/var/run
~/.puppetlabs/var/log                 # :logdir                     ~/.puppet/var/log
~/.puppetlabs/opt/facter/facts.d      # n/a                         ~/.facter/facts.d

On Windows, when not running on the SYSTEM account

~/AppData/Local/Temp                  # :module_working_dir

These sections describe other Puppet packages that rely on puppet-agent to create the initial directory layout. It does not attempt to specify the full set of file paths for these packages, just cases where the other package has a dependency on puppet-agent.

pxp-agent also supports running as non-root, and uses the following paths.

~/.puppetlabs/etc/pxp-agent
    modules
    pxp-agent.conf

~/.puppetlabs/opt/pxp-agent
    spool
    tasks-cache

~/.puppetlabs/var/run
    pxp-agent.pid (*nix only)

~/.puppetlabs/var/log
    pxp-agent.log
    pcp-access.log

The installed modules directory is also used for non-root pxp-agents.

puppetdb

/etc/puppetlabs/puppet
    puppetdb.conf

puppetserver

The package will install a service named puppetserver, create a puppet user and group, and run the service as the puppet user.

/etc/puppetlabs/puppetserver
    logback.xml
    conf.d
        puppetserver.conf

/opt/puppetlabs/bin                   # symlinks of puppet server binaries
    puppetserver@                     -> /opt/puppetlabs/server/apps/puppetserver/bin/puppetserver

/opt/puppetlabs/server                # serverside apps live underneath
    apps
        httpd                         # httpd app dir
            bin
                httpd
            lib

        puppetserver                  # puppetserver app dir
            bin
                puppetserver
            lib
    bin                               # symlinks of server binaries
        httpd@                        -> /opt/puppetlabs/server/apps/httpd/bin/httpd
        puppetserver@                 -> /opt/puppetlabs/server/apps/puppetserver/bin/puppetserver

    data
        puppetserver                  # :vardir (and $HOME for services that use it)
            bucket                    # :bucketdir
            filesync                  # file sync service datadir
              client
              storage
            reports                   # :reportdir
            server_data               # :server_datadir
            yaml                      # :yamldir

/var/log/puppetlabs
    puppetserver *                    # writeable by puppetserver
        puppetserver.log

/var/run/puppetlabs                   # :rundir                      /var/lib/puppet/run
    puppetserver                      # writeable by puppetserver
        puppetserver.pid

puppetmaster

This is a compatibility package using passenger to serve a ruby based puppetmaster.

The package will install a service named puppetmaster, create a puppet user and group, and run the service as the puppet user.

/opt/puppetlabs/server *              # serverside apps live underneath
    data *
        puppetmaster *                # :vardir (and $HOME for services that use it)
            bucket                    # :bucketdir
            reports                   # :reportdir
            server_data               # :server_datadir
            yaml                      # :yamldir

/var/log/puppetlabs
    puppetmaster *                    # writeable by puppetmaster
        puppetmaster.log

/var/run/puppetlabs                   # :rundir                      /var/lib/puppet/run
    puppetmaster *                    # writeable by puppetmaster
        puppetmaster.pid

razor-server

The package will install a service named razor-server, create a razor user and group, and run the service as the razor user.

/etc/puppetlabs/razor-server                                         /etc/razor
    config.yaml
    razor-torquebox.sh
    shiro.ini
/opt/puppetlabs/bin
    razor-admin                       -> /opt/puppetlabs/server/apps/razor-server/share/razor-server/bin/razor-binary-wrapper
/opt/puppetlabs/server/bin
    razor-admin                       -> /opt/puppetlabs/server/apps/razor-server/share/razor-server/bin/razor-binary-wrapper
/opt/puppetlabs/server/apps/razor-server
    bin
        jruby                         -> /opt/puppetlabs/server/apps/razor-server/share/torquebox/jruby/bin/jruby
    sbin
        torquebox                     -> /opt/puppetlabs/server/apps/razor-server/share/torquebox/jruby/bin/torquebox
    share
        razor-server                                                 /opt/razor
            bin
                razor-admin
                razor-binary-wrapper
            brokers
            lib
            razor-server.env                                         /usr/share/razor-server/razor-server.env
            shiro.ini
            vendor
        torquebox                                                    /opt/razor-torquebox
            jboss
            jruby
    var/razor                                                        /var/lib/razor
/opt/puppetlabs/server/data/razor-server
    repo                                                             /var/lib/razor/repo-store
/var/log/puppetlabs/razor-server                                     /var/log/razor-server
/var/run/puppetlabs/razor-server                                     /run/razor-server

Notes

ssldir

The current specification calls for the puppet-agent and puppetserver to continue sharing an ssldir. The main reason being the node running the puppetserver needs to use the agent's private key when acting as an SSL client. There are issues with this approach, but it's not something we are trying to solve now.