Skip to content

Use Microsoft's OpenSSH#92

Draft
aramprice wants to merge 3 commits intowindows-2019from
use-ms-open-ssh
Draft

Use Microsoft's OpenSSH#92
aramprice wants to merge 3 commits intowindows-2019from
use-ms-open-ssh

Conversation

@aramprice
Copy link
Member

@aramprice aramprice commented Aug 14, 2025

This PR should be rebased after #94 has been merged

@aramprice aramprice marked this pull request as draft August 14, 2025 18:49
@aramprice aramprice force-pushed the use-ms-open-ssh branch 5 times, most recently from a575dcf to 5261d4e Compare August 15, 2025 00:27
@aramprice aramprice force-pushed the use-ms-open-ssh branch 5 times, most recently from 1fc8ddc to a5a48b2 Compare August 21, 2025 22:10
@aramprice aramprice force-pushed the use-ms-open-ssh branch 2 times, most recently from e61fd2a to bffb049 Compare November 19, 2025 01:29
@aramprice aramprice force-pushed the use-ms-open-ssh branch 2 times, most recently from ed8e29e to c756999 Compare January 21, 2026 01:38
For the packer-built stemcells install OpenSSH as part of VM setup, not
WinRM because executing `Add-WindowsCapability` via WinRM does not
appear to be allowed. So instead move the installation of OpenSSH.Server
to the various IaaS pre-boot scrips which are not executed via WinRM.

The installations of OpenSSSH.Server happens as follows:
- Azure: add a `custom_script` parameter to packer config
- AWS: added to `setup_winrm.txt`
- GCP: add to `setup-winrm.ps1` and use `sysprep-specialize-script-ps1`
- vSphere: TODO

[1] https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_install_firstuse
For the stembuild-built stemcells install OpenSSH as part of VM setup,
not WinRM because executing `Add-WindowsCapability` via WinRM does not
appear to be allowed. So instead installation of OpenSSH.Server happens
via `govc guest.run` to the various IaaS pre-boot scrips which are not
executed via WinRM.

[1] https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_install_firstuse
In order to validate installation of Microsoft's OpenSSH specs need to
check for a differently named firewall rule. This commit adds parameters
to Concourse tasks to specifiy the firewal rule name.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Development

Successfully merging this pull request may close these issues.

1 participant

Comments