diff --git a/tsa/howto/puppet.mdwn b/tsa/howto/puppet.mdwn
index b83176008831ae0e7ea087f1f72d3fe5ffc56301..82cad43f15457f362825ac76043bba6fac513261 100644
--- a/tsa/howto/puppet.mdwn
+++ b/tsa/howto/puppet.mdwn
@@ -1,6 +1,10 @@
 Listing all hosts under puppet
 ==============================
 
+This will list all active hosts known to the Puppet master:
+
+    ssh -t pauli.torproject.org 'sudo -u postgres psql puppetdb -P pager=off -A -t -c "SELECT c.certname FROM certnames c WHERE c.deactivated IS NULL"'
+
 The following will list all hosts under Puppet and their `virtual`
 value: