mirror of
https://github.com/actions/runner-images.git
synced 2025-12-20 06:35:47 +00:00
9b2f575307
The error happens because we try to stop the Explorer process which may not running, so let's check first if the process is running.
154 lines
5.0 KiB
PowerShell
154 lines
5.0 KiB
PowerShell
################################################################################
|
|
## File: Initialize-VM.ps1
|
|
## Desc: VM initialization script, machine level configuration
|
|
################################################################################
|
|
|
|
function Disable-InternetExplorerESC {
|
|
$AdminKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}"
|
|
$UserKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}"
|
|
Set-ItemProperty -Path $AdminKey -Name "IsInstalled" -Value 0 -Force
|
|
Set-ItemProperty -Path $UserKey -Name "IsInstalled" -Value 0 -Force
|
|
|
|
$ieProcess = Get-Process -Name Explorer -ErrorAction SilentlyContinue
|
|
|
|
if ($ieProcess){
|
|
Stop-Process -Name Explorer -Force -ErrorAction Continue
|
|
}
|
|
|
|
Write-Host "IE Enhanced Security Configuration (ESC) has been disabled."
|
|
}
|
|
|
|
function Disable-InternetExplorerWelcomeScreen {
|
|
$AdminKey = "HKLM:\Software\Policies\Microsoft\Internet Explorer\Main"
|
|
New-Item -Path $AdminKey -Value 1 -Force
|
|
Set-ItemProperty -Path $AdminKey -Name "DisableFirstRunCustomize" -Value 1 -Force
|
|
Write-Host "Disabled IE Welcome screen"
|
|
}
|
|
|
|
function Disable-UserAccessControl {
|
|
Set-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" -Name "ConsentPromptBehaviorAdmin" -Value 00000000 -Force
|
|
Write-Host "User Access Control (UAC) has been disabled."
|
|
}
|
|
|
|
Import-Module -Name ImageHelpers -Force
|
|
|
|
Write-Host "Setup PowerShellGet"
|
|
# Set-PSRepository -InstallationPolicy Trusted -Name PSGallery
|
|
Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force
|
|
Install-Module -Name PowerShellGet -Force
|
|
Set-PSRepository -InstallationPolicy Trusted -Name PSGallery
|
|
|
|
|
|
Write-Host "Disable Antivirus"
|
|
Set-MpPreference -DisableRealtimeMonitoring $true
|
|
|
|
# Disable Windows Update
|
|
$AutoUpdatePath = "HKLM:SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU"
|
|
If (Test-Path -Path $AutoUpdatePath) {
|
|
Set-ItemProperty -Path $AutoUpdatePath -Name NoAutoUpdate -Value 1
|
|
Write-Host "Disabled Windows Update"
|
|
}
|
|
else {
|
|
Write-Host "Windows Update key does not exist"
|
|
}
|
|
|
|
# Install Windows .NET Features
|
|
Install-WindowsFeature -Name NET-Framework-Features -IncludeAllSubFeature
|
|
Install-WindowsFeature -Name NET-Framework-45-Features -IncludeAllSubFeature
|
|
Install-WindowsFeature -Name BITS -IncludeAllSubFeature
|
|
Install-WindowsFeature -Name DSC-Service
|
|
|
|
Write-Host "Disable UAC"
|
|
Disable-UserAccessControl
|
|
|
|
Write-Host "Disable IE Welcome Screen"
|
|
Disable-InternetExplorerWelcomeScreen
|
|
|
|
Write-Host "Disable IE ESC"
|
|
Disable-InternetExplorerESC
|
|
|
|
Write-Host "Setting local execution policy"
|
|
Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope MachinePolicy -ErrorAction Continue | Out-Null
|
|
Get-ExecutionPolicy -List
|
|
|
|
Write-Host "Enable long path behavior"
|
|
# See https://docs.microsoft.com/en-us/windows/desktop/fileio/naming-a-file#maximum-path-length-limitation
|
|
Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\FileSystem' -Name 'LongPathsEnabled' -Value 1
|
|
|
|
Write-Host "Install chocolatey"
|
|
$chocoExePath = 'C:\ProgramData\Chocolatey\bin'
|
|
|
|
if ($($env:Path).ToLower().Contains($($chocoExePath).ToLower())) {
|
|
Write-Host "Chocolatey found in PATH, skipping install..."
|
|
Exit
|
|
}
|
|
|
|
# Add to system PATH
|
|
$systemPath = [Environment]::GetEnvironmentVariable('Path', [System.EnvironmentVariableTarget]::Machine)
|
|
$systemPath += ';' + $chocoExePath
|
|
[Environment]::SetEnvironmentVariable("PATH", $systemPath, [System.EnvironmentVariableTarget]::Machine)
|
|
|
|
# Update local process' path
|
|
$userPath = [Environment]::GetEnvironmentVariable('Path', [System.EnvironmentVariableTarget]::User)
|
|
if ($userPath) {
|
|
$env:Path = $systemPath + ";" + $userPath
|
|
}
|
|
else {
|
|
$env:Path = $systemPath
|
|
}
|
|
|
|
# Run the installer
|
|
[Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor "Tls12"
|
|
Invoke-Expression ((new-object net.webclient).DownloadString('https://chocolatey.org/install.ps1'))
|
|
|
|
# Turn off confirmation
|
|
choco feature enable -n allowGlobalConfirmation
|
|
|
|
# Install webpi
|
|
choco install webpicmd -y
|
|
|
|
|
|
# Expand disk size of OS drive
|
|
|
|
New-Item -Path d:\ -Name cmds.txt -ItemType File -Force
|
|
|
|
Add-Content -Path d:\cmds.txt "SELECT VOLUME=C`r`nEXTEND"
|
|
|
|
$expandResult = (diskpart /s 'd:\cmds.txt')
|
|
|
|
Write-Host $expandResult
|
|
|
|
Write-Host "Disk sizes after expansion"
|
|
|
|
wmic logicaldisk get size,freespace,caption
|
|
|
|
|
|
# Adding description of the software to Markdown
|
|
|
|
$Content = @"
|
|
# Windows Server 2016
|
|
|
|
The following software is installed on machines with the $env:ImageVersion update.
|
|
|
|
Components marked with **\*** have been upgraded since the previous version of the image.
|
|
|
|
"@
|
|
|
|
Add-ContentToMarkdown -Content $Content
|
|
|
|
|
|
$SoftwareName = "Chocolatey"
|
|
|
|
if( $( $(choco version) | Out-String) -match 'Chocolatey v(?<version>.*).*' )
|
|
{
|
|
$chocoVersion = $Matches.version.Trim()
|
|
}
|
|
|
|
$Description = @"
|
|
_Version:_ $chocoVersion<br/>
|
|
_Environment:_
|
|
* PATH: contains location for choco.exe
|
|
"@
|
|
|
|
Add-SoftwareDetailsToMarkdown -SoftwareName $SoftwareName -DescriptionMarkdown $Description
|