(C) Ondrej Sevecek, 2019 - www.sevecek.com, ondrej@sevecek.com
#=====================
# PKGMGR and other late things
DBG ("Build step: {0}" -f $MyInvocation.MyCommand.Definition)
DBG "Feature installations (using PKGMGR) and other late things..."
DBG ("Machine config: {0}, {1}" -f $vmName, $vmConfig.hostName)
#===============
[string] $pkgmgrFeatures = $vmConfig.pkgmgr.features
DBG ("Package Manager (pkgmgr) feature installation: {0} | {1} | {2}" -f (Is-ValidString $pkgmgrFeatures), (Count-MultiValue $pkgmgrFeatures), $pkgmgrFeatures)
$pkgmgrAppFeatures = $vmConfig.SelectNodes('.//features[@pkgmgr]')
DBG ('Applications requiring some pkgmgr features: {0}' -f (Get-CountSafe $pkgmgrAppFeatures))
if ((Get-CountSafe $pkgmgrAppFeatures) -ge 1) {
foreach ($onePkgmgrAppFeatures in $pkgmgrAppFeatures) {
DBG ('Adding one application pkgmgr installation into the list: {0}' -f $onePkgmgrAppFeatures.pkgmgr)
$pkgmgrFeatures = Add-MultiValue $pkgmgrFeatures (Split-MultiValue $onePkgmgrAppFeatures.pkgmgr) -unique $true
}
}
DBG ("Package Manager (pkgmgr) feature installation final list: {0} | {1} | {2}" -f (Is-ValidString $pkgmgrFeatures), (Count-MultiValue $pkgmgrFeatures), $pkgmgrFeatures)
if (Is-ValidString $pkgmgrFeatures) {
[string[]] $features = (Split-MultiValue $pkgmgrFeatures) | ? { $_ -notlike '*-SevecekInstallOnly' }
DBG ("Features to be installed: #{0} = {1} (original: {2})" -f (Get-CountSafe $features), ($features -join ','), $pkgmgrFeatures)
if (($thisOSVersionNumber -ge 6.2) -and ((Contains-Safe $features 'NetFx3') -or (Contains-Safe $features 'NetFx3ServerFeatures'))) {
DBG ("Doing 6.2+ NetFx3 installation.")
DBG ('Install NetFx3 from source media separately')
$netFx3Source = Get-WindowsSXSOfflineMedia $global:installMediaVolume $global:installISOVolume
if ($thisOSRole -notlike '*workstation*') {
Run-Process 'DISM' ('/online /enable-feature /featurename:NetFx3ServerFeatures /source:"{0}"' -f $netFx3Source)
}
Run-Process 'DISM' ('/online /enable-feature /featurename:NetFx3 /source:"{0}"' -f $netFx3Source)
}
if ($thisOSVersionNumber -ge 6.2) {
DBG ('Verify the feature list first')
DBGSTART
[string[]] $availablePkgmgrFeatures = dism /online /get-features | % { [regex]::Match($_, '\AFeature Name \: ([a-zA-Z0-9\-]+)\Z').Groups[1].Value } | ? { Is-ValidString $_ }
DBGER $MyInvocation.MyCommand.Name $error
DBGEND
DBG ('The number of features available: #{0}' -f (Get-CountSafe $availablePkgmgrFeatures))
DBGIF $MyInvocation.MyCommand.Name { (Get-CountSafe $availablePkgmgrFeatures) -lt 10 }
if ((Get-CountSafe $availablePkgmgrFeatures) -ge 10) {
foreach ($onePkgmgrFeatureToEnable in $features) {
DBGIF ('The requested PKGMGR feature is not available: {0}' -f $onePkgmgrFeatureToEnable) { -not (Contains-Safe $availablePkgmgrFeatures $onePkgmgrFeatureToEnable) }
}
}
}
$featureList = $features -join ';'
$logFile = Get-DataFileApp "pkgmgr" $null '.log'
DBG ("Doing PKGMGR installation. Log: {0}" -f $logFile)
Run-Process "pkgmgr" "/norestart /quiet /l:`"$logFile`" /iu:$featureList"
##
ReDisable-SystemRestore
ReDisable-Updates
}
#===============
$pkgmgrRemove = $vmConfig.pkgmgr.remove
DBG ("Package Manager feature removal: {0}" -f (Is-ValidString($pkgmgrRemove)))
if (Is-ValidString($pkgmgrRemove)) {
$features = Split-MultiValue($pkgmgrRemove)
DBG ("Features to be removed: #{0} = {1}" -f $features.Count, $pkgmgrRemove)
$featureList = $features -join ';'
$logFile = Get-DataFileApp 'pkgmgrRemove' $null '.log'
DBG ('Doing PKGMGR removal. Log: {0}' -f $logFile)
Run-Process "pkgmgr" "/norestart /quiet /l:`"$logFile`" /uu:$featureList"
##
ReDisable-SystemRestore
ReDisable-Updates
}
#=====================
DBG ('Install newest possible Windows Management Framework: {0}' -f (Parse-BoolSafe $vmConfig.install.latestWmf))
if (Parse-BoolSafe $vmConfig.install.latestWmf) {
$wmfBasePath = Join-Path $global:installMediaVolume 'WindowsMamagementFramework'
DBGIF ('Invalid WMF base install path: {0}' -f $wmfBasePath) { -not (Test-Path $wmfBasePath) }
$wmfBasePath = Join-Path $wmfBasePath ('win-{0}-{1}' -f $thisOSVersionnumber.ToString('N1', ([System.Globalization.CultureInfo]::InvariantCulture)), $global:thisOSArchitecture)
DBG ('Do we have a newer installation WMF sources for this OS: {0} | {1}' -f $wmfBasePath, (Test-Path $wmfBasePath))
DBGIF ('Cannot install newer WMF version when installation package does not exist: {0}' -f $wmfBasePath) { -not (Test-Path $wmfBasePath) }
if (Test-Path $wmfBasePath) {
$wmfMSU = $null
$wmfMSU = Get-ChildItem $wmfBasePath -Force | ? { $_.FullName -like '*.msu' } | sort LastWriteTime | select -Expand FullName | select -Last 1
DBG ('Found latest WMF installation package: {0}' -f $wmfMSU)
DBGIF $MyInvocation.MyCommand.Name { Is-EmptyString $wmfMSU }
if (Is-ValidString $wmfMSU) {
$wusaRes = Run-Process 'WUSA' ('"{0}" /quiet /norestart' -f $wmfMSU) -returnExitCode $true
Repair-PsReadLineMissing
# Note: 0x00240006 = already installed
if (($wusaRes -eq 0x00240005) -or ($wusaRes -eq $global:win32_ERROR_SUCCESS_REBOOT_REQUIRED)) {
DBG ('Windows update installation asks for a restart, so do it and rerun after reboot.')
$global:restartCurrentPhase = $true
exit
}
DBGIF ('WUSA installation of WMF returned unexpected error: {0}' -f $wusaRes) { $wusaRes -ne 0x00240006 }
}
}
##
ReDisable-SystemRestore
ReDisable-Updates
}
#======================
DBG ("Local NTFS folders and shares.")
$localFSs = $vmConfig.SelectNodes('./*/fs[@instance="local"]')
DBG ("Found {0} local NTFS folders" -f $localFSs.Count)
foreach ($oneFldr in $localFSs) {
$oneFldrPath = Resolve-VolumePath $oneFldr.dir
Create-NTFSFolderAndShare $oneFldrPath $oneFldr.share $oneFldr.dacl $oneFldr.quota -exists (Parse-BoolSafe $oneFldr.exists) -adminFullEveryoneChange (Parse-BoolSafe $oneFldr.everyoneChangeOnly)
# Note: mind we are doing the same code once again for remote instances later
DBG ('Should publish in IIS: {0} | {1} | {2}' -f (Is-ValidString $oneFldr.iis), $oneFldr.iis, $oneFldr.dns)
if (Is-ValidString $oneFldr.iis) {
$dnsAlias = Strip-ValueFlags $oneFldr.dns
$iisVD = Strip-ValueFlags $oneFldr.iis
DBG ('Flags: dnsAlias = {0} | iisVD = {1} | iis = {2}' -f $dnsAlias, $iisVD, $oneFldr.iis)
DBG ('Additional IIS params: upload = {0} | maxAge = {1} | highBit = {2} | doubleEsc = {3}' -f $oneFldr.iisUploadSize, $oneFldr.iisMaxAge, $oneFldr.iisHighBit, $oneFldr.iisDoubleEsc)
###############################################
###############################################
## SEE BELOW, THERE IS THIS BLOCK ONCE AGAIN ##
###############################################
###############################################
if (Has-ValueFlags $oneFldr.iis S) {
DBG ('Publish into a separate web site')
Publish-FSinIIS $oneFldrPath $iisVD $dnsAlias (Join-Path $env:SystemDrive\inetpub $dnsAlias.Replace('.', '-')) $oneFldr.iisExt (Parse-BoolSafe $oneFldr.iisDoubleEsc) (Parse-BoolSafe $oneFldr.iisHighBit) $oneFldr.iisUploadSize $oneFldr.iisMaxAge
} else {
DBG ('Publish into the Default Web Site')
Publish-FSinIIS $oneFldrPath $iisVD $dnsAlias $null $oneFldr.iisExt (Parse-BoolSafe $oneFldr.iisDoubleEsc) (Parse-BoolSafe $oneFldr.iisHighBit) $oneFldr.iisUploadSize $oneFldr.iisMaxAge
}
}
DBG ('Should define NTLM alias: {0} | {1}' -f (Is-ValidString $oneFldr.dns), $oneFldr.dns)
if (Is-ValidString $oneFldr.dns) {
Add-BackConnectionHostName (Strip-ValueFlags $oneFldr.dns)
}
if (Parse-BoolSafe $oneFldr.copySample) {
$sampleSourcePath = Join-Path $global:rootDir 'IIS\sampleSMB'
DBG ('Will copy sample files: {0} | {1}' -f $sampleSourcePath, $oneFldrPath)
DBGSTART
Copy-Item -Path $sampleSourcePath -Destination $oneFldrPath -Recurse -Force
DBGER $MyInvocation.MyCommand.Name $error
DBGEND
}
}
#======================
DBG ("File Server: {0}" -f $vmConfig.fs.instance)
if (Is-ValidString $vmConfig.fs.instance) {
$fsRoot = Resolve-VolumePath $vmConfig.fs.root
[string] $fsAdminsAce = [string]::Empty
if (Is-ValidString $vmConfig.fs.app.aGroup) {
$fsAdminsAce = 'F${0}@{1}' -f $vmConfig.fs.app.aGroup, $vmConfig.fs.app.iDomain
DBG ('We have some FS admins group ACE to define: {0}' -f $fsAdminsAce)
}
Create-NTFSFolderAndShare $fsRoot $null $fsAdminsAce $null
DBG ('Searching for shares requested in this instance: {0}' -f $vmConfig.fs.instance)
$fsShares = $xmlConfig.SelectNodes('./VMs/MACHINE[vm/@do="true"]/*/fs[translate(@instance,"ABCDEFGHIJKLMNOPQRSTUVWXYZ","abcdefghijklmnopqrstuvwxyz")="{0}"]' -f $vmConfig.fs.instance.ToLower())
DBG ('Found shares: {0}' -f (Get-CountSafe $fsShares))
foreach ($oneFldr in $fsShares) {
$oneFldrPath = Join-Path $fsRoot $oneFldr.dir
Create-NTFSFolderAndShare $oneFldrPath $oneFldr.share ('{0}|{1}' -f $fsAdminsAce, $oneFldr.dacl) $oneFldr.quota -adminFullEveryoneChange (Parse-BoolSafe $oneFldr.everyoneChangeOnly)
# Note: really, just a plain copy/paste from above
DBG ('Should publish in IIS: {0} | {1} | {2}' -f (Is-ValidString $oneFldr.iis), $oneFldr.iis, $oneFldr.dns)
if (Is-ValidString $oneFldr.iis) {
$dnsAlias = Strip-ValueFlags $oneFldr.dns
$iisVD = Strip-ValueFlags $oneFldr.iis
DBG ('Flags: dnsAlias = {0} | iisVD = {1} | iis = {2}' -f $dnsAlias, $iisVD, $oneFldr.iis)
DBG ('Additional IIS params: upload = {0} | maxAge = {1} | highBit = {2} | doubleEsc = {3}' -f $oneFldr.iisUploadSize, $oneFldr.iisMaxAge, $oneFldr.iisHighBit, $oneFldr.iisDoubleEsc)
###############################################
###############################################
## SEE ABOVE, THERE IS THIS BLOCK ONCE AGAIN ##
###############################################
###############################################
if (Has-ValueFlags $oneFldr.iis S) {
DBG ('Publish into a separate web site')
Publish-FSinIIS $oneFldrPath $iisVD $dnsAlias (Join-Path $env:SystemDrive\inetpub $dnsAlias.Replace('.', '-')) $oneFldr.iisExt (Parse-BoolSafe $oneFldr.iisDoubleEsc) (Parse-BoolSafe $oneFldr.iisHighBit) $oneFldr.iisUploadSize $oneFldr.iisMaxAge
} else {
DBG ('Publish into the Default Web Site')
Publish-FSinIIS $oneFldrPath $iisVD $dnsAlias $null $oneFldr.iisExt (Parse-BoolSafe $oneFldr.iisDoubleEsc) (Parse-BoolSafe $oneFldr.iisHighBit) $oneFldr.iisUploadSize $oneFldr.iisMaxAge
}
}
<#
DBG ('Should publish in IIS: {0} | {1} | {2}' -f (Is-ValidString $oneFldr.iis), $oneFldr.iis, $oneFldr.dns)
if (Is-ValidString $oneFldr.iis) {
Publish-FSinIIS $oneFldrPath $oneFldr.iis (Strip-ValueFlags $oneFldr.dns)
}
#>
DBG ('Should define NTLM alias: {0} | {1}' -f (Is-ValidString $oneFldr.dns), $oneFldr.dns)
if (Is-ValidString $oneFldr.dns) {
Add-BackConnectionHostName (Strip-ValueFlags $oneFldr.dns)
}
if (Parse-BoolSafe $oneFldr.copySample) {
$sampleSourcePath = Join-Path $global:rootDir 'IIS\sampleSMB'
DBG ('Will copy sample files: {0} | {1}' -f $sampleSourcePath, $oneFldrPath)
DBGSTART
Get-ChildItem $sampleSourcePath | Copy-Item -Destination $oneFldrPath -Recurse -Force
DBGER $MyInvocation.MyCommand.Name $error
DBGEND
}
}
}
#=========================
DBG ('Install NLB: {0}' -f (Is-ValidString $vmConfig.nlb.instance))
if (Is-ValidString $vmConfig.nlb.instance) {
DBG ('Will install NLB on the following IP: {0} | {1}' -f $vmConfig.nlb.instance, $vmConfig.nlb.ip)
}
#=========================
DBG ("DNS Server configuration: {0}" -f (Is-ValidString $vmConfig.dns.name))
if (Is-ValidString $vmConfig.dns.name) {
#=========================
DBG ("Setting DNS forwarders: {0}" -f (Is-ValidString $vmConfig.dns.forwarders))
if (Is-ValidString($vmConfig.dns.forwarders)) {
if ($vmConfig.dns.forwarders -eq $emptyValueMarker) {
DBG ("Resetting forwarders to NONE.")
Run-Process 'DNSCMD' '/ResetForwarders'
}
else {
$dnsForwarders = Split-MultiValue $vmConfig.dns.forwarders
DBG ("Resetting forwarders to: {0}x = {1}" -f $dnsForwarders.Count, $vmConfig.dns.forwarders)
Run-Process 'DNSCMD' ('/ResetForwarders {0}' -f ($dnsForwarders -join ' '))
}
}
#=========================
DBG ('Conditional forwarders: #{0}' -f (Get-CountSafe $vmConfig.dns.fwd))
if ((Get-CountSafe $vmConfig.dns.fwd) -gt 0) {
$vmConfig.dns.fwd | % {
$oneFwd = $_
$cmdSwitches = ''
$fwdIPs = (Split-MultiValue $oneFwd.ip) -join ' '
if ($oneFwd.type -eq 'F') { $cmdSwitches = '/ZoneAdd {0} /DsForwarder {1} /DP /Forest' -f $oneFwd.zone, $fwdIPs }
if ($oneFwd.type -eq 'O') { $cmdSwitches = '/ZoneAdd {0} /DsForwarder {1} /DP /Domain' -f $oneFwd.zone, $fwdIPs }
if ($oneFwd.type -eq 'L') { $cmdSwitches = '/ZoneAdd {0} /Forwarder {1}' -f $oneFwd.zone, $fwdIPs }
Run-Process 'DNSCMD' ('localhost {0}' -f $cmdSwitches)
}
}
#=========================
DBG ("Additional DNS zones: {0}" -f (Is-ValidString $vmConfig.dns.zones))
if (Is-ValidString $vmConfig.dns.zones) {
$dnsZones = Split-MultiValue $vmConfig.dns.zones
DBG ("DNS Zones to be created: {0}x | {1}" -f $dnsZones.Count, (($dnsZones -join ', ') | Out-String))
$dnsZones | % {
$oneZone = $_
DBG ('One DNS zone for processing: {0}' -f $oneZone)
Create-DNSZone $oneZone
}
}
#======================
$dnsRecords = $vmConfig.dns.SelectNodes('./rr')
DBG ('Manual DNS records: {0}' -f (Get-CountSafe $dnsRecords))
$dnsRecords | % {
Add-DNSRecord $_.type $_.name $_.zone $_.value
}
#======================
# Note: sphere - if there is a split-dns, then it does not ever have more than two spheres
# an internal sphere which is inside to the intranet and a public DNS server
# If we run more intranets, there never be the same zone in more intranets and/or public DNS servers
[string] $dnsSphere = $vmConfig.dns.sphere
# Note: we cannot call .ToLower() on possibly $null object so we wait until it is cast to [string]
$dnsSphere = $dnsSphere.ToLower()
[bool] $areWeRODC = Is-LocalComputerDomainController -rodcOnly $true
DBG ('Current DNS sphere determined: {0} | rodc = {1}' -f $dnsSphere, $areWeRODC)
#======================
# Note: this is the old simple method to create @dns="" record
# which has been obsoleted by the new