vagrant-windows-sysprep 0.0.4 → 0.0.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c54e69feb971b2d5962fa047273c8e9f2e14c6046127f785cd76459d8436126c
-  data.tar.gz: d04250e3e6792d9966469a8ec911ab70825b234ad83fbcc7b9511838b398dc07
+  metadata.gz: 5073b3be5e3d52840ea1fde18a2cd0ad05c7a4d1f4324fa732a0688654a3130f
+  data.tar.gz: 553d29dc27c82d72502cb870fcb6bf9326e9981297cc23b98e28be91517e2f94
 SHA512:
-  metadata.gz: 668461a1986b312481767ec3dd107fc13e94ad8fb4c03a98d7a1ce8bae0ae5c806a984eec9165df6d407aa8c02eb82f8efec58c0192144c828516972a1600652
-  data.tar.gz: '08d1f86777cd13c21133ec41b8d3497dc40c2dee54ef08e33c68f5de158a1fd895f4785434b3bf8fd1692b00af805d297047945c851d7f7f7bd595f854b398ef'
+  metadata.gz: 30a83102bdd16b9389ed4c198d8f25de01f2fcb1f76604c8c9dad13cf6c7d41958c381f437f224c7c2c6df507f5e1e7de049365abd5daa5cc5c8ac4f0f3a146a
+  data.tar.gz: b0bdf379b3c121a31737a176f412bff34ab6f13a186412f5e2137e92e5b2af3251d672bb9aea5eab6588b44dc07a9e86f75a2042b288df75c746f6ba7b51bc8d

data/lib/vagrant-windows-sysprep.rb

@@ -53,7 +53,7 @@ module VagrantPlugins
             @machine.communicate.upload(
               File.join(File.dirname(__FILE__), "vagrant-windows-sysprep", "sysprep.ps1"),
               sysprep_remote_path)
-            sysprep_command = "#{ps} -File #{sysprep_remote_path}"
+            sysprep_command = "#{ps} -File #{sysprep_remote_path} -Username \"#{@machine.config.winrm.username}\" -Password \"#{@machine.config.winrm.password}\""
             begin
               @machine.communicate.sudo(sysprep_command, {elevated: true, interactive: false}) do |type, data|
                 handle_comm(type, data)
@@ -65,7 +65,8 @@ module VagrantPlugins
             # wait for the machine to be shutdown.
             # NB :poweroff is used by the VirtualBox provider.
             # NB :shutoff  is used by the libvirt provider.
-            until [:poweroff, :shutoff].include? @machine.state.id
+            # NB :off      is used by the Hyper-V provider.
+            until [:poweroff, :shutoff, :off].include? @machine.state.id
               sleep 10
             end
 

data/lib/vagrant-windows-sysprep/sysprep.ps1

@@ -1,5 +1,7 @@
 param(
-    [string]$ComputerName = $null
+    [string]$ComputerName = $null,
+    [string]$Username = 'vagrant',
+    [string]$Password = 'vagrant'
 )
 
 Set-StrictMode -Version Latest
@@ -17,19 +19,115 @@ if (!$ComputerName) {
 }
 
 $unattendPath = "$PSScriptRoot\vagrant-windows-sysprep-unattend.xml"
+$unattendPs1Path = "$PSScriptRoot\vagrant-windows-sysprep-unattend.ps1"
 
+# sysprep renames the user that has the well-known Administrator SID
+# to the Administrator name, when $Username has that SID, we must
+# rename Administrator back to the $Username name.
+# NB this SID always has the format S-1-5-21-<domain>-500.
+# see https://support.microsoft.com/en-us/help/243330/well-known-security-identifiers-in-windows-operating-systems
+$administratorLocalUser = Get-LocalUser | Where-Object {$_.SID.Value -match '^S-1-5-21-.+-500$'}
+$enableAdministrator = $administratorLocalUser.Enabled
+$renameAdministratorToUsername = $administratorLocalUser.Name -eq $Username
+
+# NB doing an auto-logon after a sysprep has two effects:
+#    1. make Windows 10 1809 not ask for an account creation (regardless of the
+#       value of SkipUserOOBE/SkipMachineOOBE).
+#       NB even when you disable the local accounts security questions with:
+#               # Windows 10 1803 started to require local account security questions but provided
+#               # no way to configure or skip those on sysprep, so we have to manually disable
+#               # that feature.
+#               # NB even with this windows stills asks for a Password Hint.
+#               # see https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/customize-oobe
+#               Write-Host 'Disabling the use of Security Questions for Local Accounts...'
+#               Set-ItemProperty `
+#                   -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\System `
+#                   -Name NoLocalPasswordResetQuestions `
+#                   -Value 1
+#          Windows will still ask for a password hint...
+#    2. make vagrant be able to go through the stage (on Windows 10 1809):
+#           ==> default: Mounting SMB shared folders...
+#               default: /home/rgl/Projects/windows-2016-vagrant/example => /vagrant
 # NB there's a bug somewhere in windows sysprep machinery that prevents it from setting the
 #    ComputerName when the name doesn't really change (like when you use config.vm.hostname),
 #    it will instead set the ComputerName to something like WIN-0F47SUATAF5.
 #    so this configuration will not really work... but its here to see when they fix this problem.
-Write-Host "Configuring sysprep to set ComputerName to $ComputerName..."
+Write-Host 'Configuring sysprep...'
 Set-Content `
     -Encoding UTF8 `
     -Path $unattendPath `
     -Value (
         (Get-Content -Raw $unattendPath) `
-            -replace '@@COMPUTERNAME@@',$ComputerName
+            -replace '@@COMPUTERNAME@@',$ComputerName `
+            -replace '@@USERNAME@@',$Username `
+            -replace '@@PASSWORD@@',$Password `
+            -replace '@@UNATTENDPS1PATH@@',$unattendPs1Path
     )
+$unattendPs1 = @'
+Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
+$ProgressPreference = 'SilentlyContinue'
+trap {
+    Write-Host "ERROR: $_"
+    Write-Host (($_.ScriptStackTrace -split '\r?\n') -replace '^(.*)$','ERROR: $1')
+    Write-Host (($_.Exception.ToString() -split '\r?\n') -replace '^(.*)$','ERROR EXCEPTION: $1')
+    Write-Host
+    Write-Host 'Sleeping during 60 minutes to give you time to see this error message...'
+    Start-Sleep -Seconds (60*60)
+    Exit 1
+}
+
+Write-Host @"
+WARNING WARNING WARNING WARNING WARNING WARNING
+
+  this is being run by vagrant-windows-sysprep
+
+            do NOT touch anything
+
+WARNING WARNING WARNING WARNING WARNING WARNING
+
+"@
+
+if ($enableAdministrator) {
+    Get-LocalUser -Name Administrator | Enable-LocalUser
+} else {
+    Get-LocalUser -Name Administrator | Disable-LocalUser
+}
+
+if ($renameAdministratorToUsername) {
+    Get-LocalUser -Name Administrator | Rename-LocalUser -NewName $Username
+}
+
+Write-Host 'Waiting for WinRM to be running...'
+while ((Get-Service WinRM).Status -ne 'Running') {
+    Start-Sleep -Seconds 5
+}
+
+Write-Host 'Disabling auto logon...'
+$autoLogonKeyPath = 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon'
+Set-ItemProperty `
+    -Path $autoLogonKeyPath `
+    -Name AutoAdminLogon `
+    -Value 0
+Remove-ItemProperty `
+    -Path $autoLogonKeyPath `
+    -Name @(
+        'DefaultDomainName',
+        'DefaultUserName',
+        'DefaultPassword'
+    ) `
+    -ErrorAction SilentlyContinue
+
+Write-Host 'Logging off...'
+logoff
+'@ `
+    -replace '\$enableAdministrator',"$(if ($enableAdministrator) {'$true'} else {'$false'})" `
+    -replace '\$renameAdministratorToUsername',"$(if ($renameAdministratorToUsername) {'$true'} else {'$false'})" `
+    -replace '\$Username',"'$Username'"
+Set-Content `
+    -Encoding UTF8 `
+    -Path $unattendPs1Path `
+    -Value $unattendPs1
 
 Write-Host 'Syspreping...'
 C:/Windows/System32/Sysprep/sysprep.exe `

data/lib/vagrant-windows-sysprep/unattend.xml

@@ -35,6 +35,26 @@
                 <NetworkLocation>Home</NetworkLocation>
                 <ProtectYourPC>1</ProtectYourPC>
             </OOBE>
+            <AutoLogon>
+                <Password>
+                    <Value>@@PASSWORD@@</Value>
+                    <PlainText>true</PlainText>
+                </Password>
+                <Enabled>true</Enabled>
+                <Username>Administrator</Username>
+            </AutoLogon>
+            <UserAccounts>
+                <AdministratorPassword>
+                    <Value>@@PASSWORD@@</Value>
+                    <PlainText>true</PlainText>
+                </AdministratorPassword>
+            </UserAccounts>
+            <FirstLogonCommands>
+                <SynchronousCommand wcm:action="add">
+                    <Order>1</Order>
+                    <CommandLine>PowerShell -File @@UNATTENDPS1PATH@@</CommandLine>
+                </SynchronousCommand>
+            </FirstLogonCommands>
         </component>
     </settings>
 </unattend>

data/lib/vagrant-windows-sysprep/version.rb

@@ -1,5 +1,5 @@
 module VagrantPlugins
   module WindowsSysprep
-    VERSION = "0.0.4"
+    VERSION = "0.0.9"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: vagrant-windows-sysprep
 version: !ruby/object:Gem::Version
-  version: 0.0.4
+  version: 0.0.9
 platform: ruby
 authors:
 - Rui Lopes
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-04-15 00:00:00.000000000 Z
+date: 2021-02-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -54,8 +54,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.6
+rubygems_version: 3.1.2
 signing_key: 
 specification_version: 4
 summary: Vagrant plugin for running Windows sysprep.