You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
135 lines
5.9 KiB
135 lines
5.9 KiB
#MIT License
|
|
#
|
|
#Copyright (c) 2017 Rui Lopes
|
|
#
|
|
#Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
#of this software and associated documentation files (the "Software"), to deal
|
|
#in the Software without restriction, including without limitation the rights
|
|
#to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
#copies of the Software, and to permit persons to whom the Software is
|
|
#furnished to do so, subject to the following conditions:
|
|
#
|
|
#The above copyright notice and this permission notice shall be included in all
|
|
#copies or substantial portions of the Software.
|
|
#
|
|
#THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
#IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
#FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
#AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
#LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
#OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
#SOFTWARE.
|
|
|
|
Set-StrictMode -Version Latest
|
|
$ProgressPreference = 'SilentlyContinue'
|
|
$ErrorActionPreference = 'Stop'
|
|
trap {
|
|
#Write-Host
|
|
#Write-Host 'whoami from autounattend:'
|
|
#Get-Content C:\whoami-autounattend.txt | ForEach-Object { Write-Host "whoami from autounattend: $_" }
|
|
#Write-Host 'whoami from current WinRM session:'
|
|
#whoami /all >C:\whoami-winrm.txt
|
|
#Get-Content C:\whoami-winrm.txt | ForEach-Object { Write-Host "whoami from winrm: $_" }
|
|
Write-Host
|
|
Write-Host "ERROR: $_"
|
|
($_.ScriptStackTrace -split '\r?\n') -replace '^(.*)$','ERROR: $1' | Write-Host
|
|
($_.Exception.ToString() -split '\r?\n') -replace '^(.*)$','ERROR EXCEPTION: $1' | Write-Host
|
|
Write-Host
|
|
Write-Host 'Sleeping for 60m to give you time to look around the virtual machine before self-destruction...'
|
|
Start-Sleep -Seconds (60*60)
|
|
Exit 1
|
|
}
|
|
|
|
# enable TLS 1.2.
|
|
[Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol `
|
|
-bor [Net.SecurityProtocolType]::Tls12
|
|
|
|
if (![Environment]::Is64BitProcess) {
|
|
throw 'this must run in a 64-bit PowerShell session'
|
|
}
|
|
|
|
if (!(New-Object System.Security.Principal.WindowsPrincipal(
|
|
[Security.Principal.WindowsIdentity]::GetCurrent())).IsInRole(
|
|
[Security.Principal.WindowsBuiltInRole]::Administrator)) {
|
|
throw 'this must run with Administrator privileges (e.g. in a elevated shell session)'
|
|
}
|
|
|
|
Add-Type -A System.IO.Compression.FileSystem
|
|
|
|
# install Guest Additions.
|
|
$systemVendor = (Get-CimInstance -ClassName Win32_ComputerSystemProduct -Property Vendor).Vendor
|
|
if ($systemVendor -eq 'QEMU') {
|
|
$guestToolsPath = "e:\drivers\virtio-win-guest-tools.exe"
|
|
$guestTools = "$env:TEMP\$(Split-Path -Leaf $guestToolsPath)"
|
|
$guestToolsLog = "$guestTools.log"
|
|
Write-Host 'Installing the guest tools...'
|
|
&$guestTools /install /norestart /quiet /log $guestToolsLog | Out-String -Stream
|
|
if ($LASTEXITCODE) {
|
|
throw "failed to install guest tools with exit code $LASTEXITCODE"
|
|
}
|
|
Write-Host "Done installing the guest tools."
|
|
} elseif ($systemVendor -eq 'innotek GmbH') {
|
|
Write-Host 'Importing the Oracle (for VirtualBox) certificate as a Trusted Publisher...'
|
|
E:\cert\VBoxCertUtil.exe add-trusted-publisher E:\cert\vbox-sha1.cer
|
|
if ($LASTEXITCODE) {
|
|
throw "failed to import certificate with exit code $LASTEXITCODE"
|
|
}
|
|
|
|
Write-Host 'Installing the VirtualBox Guest Additions...'
|
|
E:\VBoxWindowsAdditions-amd64.exe /S | Out-String -Stream
|
|
if ($LASTEXITCODE) {
|
|
throw "failed to install with exit code $LASTEXITCODE. Check the logs at C:\Program Files\Oracle\VirtualBox Guest Additions\install.log."
|
|
}
|
|
} elseif ($systemVendor -eq 'Microsoft Corporation') {
|
|
# do nothing. Hyper-V enlightments are already bundled with Windows.
|
|
} elseif ($systemVendor -eq 'VMware, Inc.') {
|
|
Write-Output 'Installing VMware Tools...'
|
|
# silent install without rebooting.
|
|
E:\setup64.exe /s /v '/qn reboot=r'| Out-String -Stream
|
|
} elseif ($systemVendor -eq 'Parallels Software International Inc.') {
|
|
Write-Host 'Installing the Parallels Tools for Guest VM...'
|
|
E:\PTAgent.exe /install_silent | Out-String -Stream
|
|
if ($LASTEXITCODE) {
|
|
throw "failed to install with exit code $LASTEXITCODE. Check the logs at C:\Program Files\Oracle\VirtualBox Guest Additions\install.log."
|
|
}
|
|
} else {
|
|
Write-Host "Cannot install Guest Additions: Unsupported system ($systemVendor)."
|
|
}
|
|
|
|
Write-Host 'Setting the vagrant account properties...'
|
|
# see the ADS_USER_FLAG_ENUM enumeration at https://msdn.microsoft.com/en-us/library/aa772300(v=vs.85).aspx
|
|
$AdsScript = 0x00001
|
|
$AdsAccountDisable = 0x00002
|
|
$AdsNormalAccount = 0x00200
|
|
$AdsDontExpirePassword = 0x10000
|
|
$account = [ADSI]'WinNT://./vagrant'
|
|
$account.Userflags = $AdsNormalAccount -bor $AdsDontExpirePassword
|
|
$account.SetInfo()
|
|
|
|
Write-Host 'Setting the Administrator account properties...'
|
|
$account = [ADSI]'WinNT://./Administrator'
|
|
$account.Userflags = $AdsNormalAccount -bor $AdsDontExpirePassword -bor $AdsAccountDisable
|
|
$account.SetInfo()
|
|
|
|
Write-Host 'Disabling Automatic Private IP Addressing (APIPA)...'
|
|
Set-ItemProperty `
|
|
-Path 'HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters' `
|
|
-Name IPAutoconfigurationEnabled `
|
|
-Value 0
|
|
|
|
Write-Host 'Disabling IPv6...'
|
|
Set-ItemProperty `
|
|
-Path 'HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters' `
|
|
-Name DisabledComponents `
|
|
-Value 0xff
|
|
|
|
Write-Host 'Disabling hibernation...'
|
|
powercfg /hibernate off
|
|
|
|
Write-Host 'Setting the power plan to high performance...'
|
|
powercfg /setactive 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c
|
|
|
|
Write-Host 'Disabling the Windows Boot Manager menu...'
|
|
# NB to have the menu show with a lower timeout, run this instead: bcdedit /timeout 2
|
|
# NB with a timeout of 2 you can still press F8 to show the boot manager menu.
|
|
bcdedit /set '{bootmgr}' displaybootmenu no
|
|
|