init

Author: rgl

.gitignore

@@ -0,0 +1,2 @@
+packer-provisioner-windows-update*
+bindata.go

LICENSE.txt

@@ -0,0 +1,19 @@
+build: packer-provisioner-windows-update packer-provisioner-windows-update.exe
+
+packer-provisioner-windows-update: *.go update/* update/bindata.go
+	GOOS=linux GOARCH=amd64 go build -v -o $@
+
+packer-provisioner-windows-update.exe: *.go update/* update/bindata.go
+	GOOS=windows GOARCH=amd64 go build -v -o $@
+
+update/bindata.go: update/*.ps1
+	go-bindata -nocompress -ignore '\.go$$' -o $@ -prefix update -pkg update update
+
+dist: build
+	tar -czf packer-provisioner-windows-update-linux.tgz packer-provisioner-windows-update
+	zip packer-provisioner-windows-update-windows.zip packer-provisioner-windows-update.exe
+
+clean:
+	rm -f packer-provisioner-windows-update* update/bindata.go
+
+.PHONY: build dist clean

Makefile

@@ -0,0 +1,54 @@
+# Packer Windows Update Provisioner
+
+[![Build status](https://ci.appveyor.com/api/projects/status/1bmqt9ywh82vhojt?svg=true)](https://ci.appveyor.com/project/rgl/packer-provisioner-windows-update)
+
+This is a Packer plugin for installing Windows updates (akin to [rgl/vagrant-windows-update](https://github.com/rgl/vagrant-windows-update)).
+
+**NB** This was only tested with Packer 1.0.0 and Windows Server 2016.
+
+# Usage
+
+[Download the binary from the releases page](https://github.com/rgl/packer-provisioner-windows-update/releases)
+and put it in the same directory as your `packer` executable.
+
+Use the provisioner from your packer template file, e.g. like in [rgl/windows-2016-vagrant](https://github.com/rgl/windows-2016-vagrant):
+
+```json
+{
+    "provisioners": [
+        {
+            "type": "windows-update"
+        }
+    ]
+}
+```
+
+# Development
+
+Install the dependencies:
+
+```bash
+go get -u github.com/hashicorp/packer/packer/plugin
+go get -u github.com/masterzen/winrm
+go get -u github.com/jteeuwen/go-bindata/...
+```
+
+Build:
+
+```bash
+make
+```
+
+Configure packer with the path to this provisioner by adding something like the
+following snippet to your `~/.packerconfig` (or `%APPDATA%/packer.config`):
+
+```json
+{
+    "provisioners": {
+        "windows-update": "/home/rgl/Projects/packer-provisioner-windows-update/packer-provisioner-windows-update"
+    }
+}
+```
+
+If you are having problems running `packer` set the `PACKER_LOG=1` environment
+variable to see more information.

README.md

@@ -0,0 +1,16 @@
+package main
+
+import (
+	"github.com/hashicorp/packer/packer/plugin"
+
+	"./update"
+)
+
+func main() {
+	server, err := plugin.Server()
+	if err != nil {
+		panic(err)
+	}
+	server.RegisterProvisioner(new(update.Provisioner))
+	server.Serve()
+}

main.go

@@ -0,0 +1,79 @@
+Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
+$ProgressPreference = 'SilentlyContinue'
+trap {
+    Write-Output "ERROR: $_"
+    Write-Output (($_.ScriptStackTrace -split '\r?\n') -replace '^(.*)$','ERROR: $1')
+    Write-Output (($_.Exception.ToString() -split '\r?\n') -replace '^(.*)$','ERROR EXCEPTION: $1')
+    Exit 1
+}
+$name = "{{.TaskName}}"
+$log = "$env:SystemRoot\Temp\$name.out"
+$s = New-Object -ComObject "Schedule.Service"
+$s.Connect()
+$t = $s.NewTask($null)
+$t.XmlText = @'
+<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
+    <RegistrationInfo>
+        <Description>{{.TaskDescription}}</Description>
+    </RegistrationInfo>
+    <Principals>
+        <Principal id="Author">
+            <UserId>{{.Username}}</UserId>
+            <LogonType>Password</LogonType>
+            <RunLevel>HighestAvailable</RunLevel>
+        </Principal>
+    </Principals>
+    <Settings>
+        <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
+        <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
+        <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
+        <AllowHardTerminate>true</AllowHardTerminate>
+        <StartWhenAvailable>false</StartWhenAvailable>
+        <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
+        <IdleSettings>
+            <StopOnIdleEnd>false</StopOnIdleEnd>
+            <RestartOnIdle>false</RestartOnIdle>
+        </IdleSettings>
+        <AllowStartOnDemand>true</AllowStartOnDemand>
+        <Enabled>true</Enabled>
+        <Hidden>false</Hidden>
+        <RunOnlyIfIdle>false</RunOnlyIfIdle>
+        <WakeToRun>false</WakeToRun>
+        <ExecutionTimeLimit>PT24H</ExecutionTimeLimit>
+        <Priority>4</Priority>
+    </Settings>
+    <Actions Context="Author">
+        <Exec>
+            <Command>cmd</Command>
+            <Arguments>/c {{.Command}} &gt;%SYSTEMROOT%\Temp\{{.TaskName}}.out 2&gt;&amp;1</Arguments>
+        </Exec>
+    </Actions>
+</Task>
+'@
+$f = $s.GetFolder("\")
+$f.RegisterTaskDefinition($name, $t, 6, "{{.Username}}", "{{.Password}}", 1, $null) | Out-Null
+$t = $f.GetTask("\$name")
+$t.Run($null) | Out-Null
+$timeout = 10
+$sec = 0
+while ((!($t.state -eq 4)) -and ($sec -lt $timeout)) {
+    Start-Sleep -s 1
+    $sec++
+}
+$line = 0
+do {
+    Start-Sleep -m 100
+    if (Test-Path $log) {
+        Get-Content $log | select -skip $line | ForEach {
+            ++$line
+            Write-Output $_
+        }
+    }
+} while (!($t.state -eq 3))
+$result = $t.LastTaskResult
+if (Test-Path $log) {
+    Remove-Item $log -Force -ErrorAction SilentlyContinue | Out-Null
+}
+[System.Runtime.Interopservices.Marshal]::ReleaseComObject($s) | Out-Null
+exit $result

update/elevated-template.ps1

@@ -0,0 +1,19 @@
+// NB this code was based on https://github.com/hashicorp/packer/blob/370b67497e90785b71be1b6fcc6430de487d644e/provisioner/powershell/elevated.go
+
+package update
+
+import (
+	"text/template"
+)
+
+type elevatedOptions struct {
+	Username        string
+	Password        string
+	TaskName        string
+	TaskDescription string
+	Command         string
+}
+
+var elevatedTemplate = template.Must(
+	template.New("Elevated").Parse(
+		string(MustAsset("elevated-template.ps1"))))