mirror of
https://github.com/actions/runner-images.git
synced 2025-12-15 22:26:56 +00:00
5ed2615017
* Use Resolve-GithubReleaseAssetUrl more widely * Add the Get-ChecksumFromUrl function * Sort exported functions and add docs * Remove alias and fix typo * Fix kind checksum url and syntax * Fix checksums url for gh cli and msys2 * [Windows] Cleanup various scripts * Add spaces after type specifications * Rename the Take-Part function
39 lines
1.9 KiB
PowerShell
39 lines
1.9 KiB
PowerShell
################################################################################
|
|
## File: Install-WindowsUpdates.ps1
|
|
## Desc: Install Windows Updates.
|
|
## Should be run at end, just before SoftwareReport and Finalize-VM.ps1.
|
|
################################################################################
|
|
|
|
function Install-WindowsUpdates {
|
|
Write-Host "Starting wuauserv"
|
|
Start-Service -Name wuauserv -PassThru | Out-Host
|
|
|
|
# Temporarily exclude Windows update KB5001148 since it throws an error.
|
|
# The KB5001148 itself is quite old and looks like not needed (https://support.microsoft.com/en-us/topic/kb5001148-visual-studio-client-detector-utility-for-administrator-updates-ad593454-547c-43c3-b5a3-6f201ae63f03)
|
|
Write-Host "Getting list of available windows updates"
|
|
Get-WindowsUpdate -MicrosoftUpdate -NotKBArticleID "KB5001148" -OutVariable updates | Out-Host
|
|
|
|
if ( -not $updates ) {
|
|
Write-Host "There are no windows updates to install"
|
|
return
|
|
}
|
|
|
|
Write-Host "Installing windows updates"
|
|
Get-WindowsUpdate -MicrosoftUpdate -NotKBArticleID "KB5001148" -AcceptAll -Install -IgnoreUserInput -IgnoreReboot | Out-Host
|
|
|
|
Write-Host "Validating windows updates installation"
|
|
# Get-WUHistory doesn't support Windows Server 2022
|
|
$notFailedUpdateNames = Get-WindowsUpdateStates | Where-Object { $_.State -in ("Installed", "Running") } | Select-Object -ExpandProperty Title
|
|
# We ignore Microsoft Defender Antivirus updates; Azure service updates AV automatically
|
|
$failedUpdates = $updates[0] | Where-Object Title -notmatch "Microsoft Defender Antivirus" | Where-Object { -not ($notFailedUpdateNames -match $_.KB) }
|
|
|
|
if ( $failedUpdates ) {
|
|
throw "Windows updates failed to install: $($failedUpdates.KB)"
|
|
}
|
|
}
|
|
|
|
Install-WindowsUpdates
|
|
|
|
# Create complete windows update file
|
|
New-Item -Path $env:windir -Name WindowsUpdateDone.txt -ItemType File | Out-Null
|