diff options
Diffstat (limited to 'coin/pre-provisioning')
144 files changed, 4777 insertions, 520 deletions
diff --git a/coin/pre-provisioning/qtci-linux-CentOS-8.3-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-linux-CentOS-8.3-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..4a775302 --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-CentOS-8.3-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,50 @@ +### CENTOS 8.3 ### +Hard Disk: 500G +Network: CI +Video Card: Total Video Memory: 64MB +Boot options/Firmware: BIOS + +Language: English (United States) +Time & Date: Etc/Coordinated Universal Time +Software Selection: Server with GUI +Network & Host..: Connect + +Language: English (US) +Typing:English (US) +Privacy: Location Services: OFF +Connect Your Online Accounts: Skip + + +# Configure Settings + Notifications: + * Notification Popups: OFF + * Lock Screen Notifications: OFF + Privacy: + * Screen Lock: OFF + Power: + * Blank screen: Never + Devices: + * Displays: Resolution 1280 x 800 + Details: + * Time Zone: UTC + * run "sudo timedatectl set-timezone Etc/UTC" + * Users: Automatic login on + +# Add user to sudoers +Add 'qt ALL=NOPASSWD: ALL' to /etc/sudoers.d/qt + +Add 'GRUB_GFXMODE=1280x800' to /etc/default/grub +sudo grub2-mkconfig -o /etc/grub2.cfg +sudo grub2-mkconfig -o /boot/grub2/grub.cfg + +# Add support for virtio driver +su +echo "add_drivers+=\"virtio-blk\"" >> /etc/dracut.conf.d/virtio.conf +dracut -f + +# Fetch and run coin-setup +Download http://coin/coin/binary/linux_amd64/coin-setup +run './coin-setup' + +Reboot + diff --git a/coin/pre-provisioning/qtci-linux-RHEL-8.2-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-linux-RHEL-8.2-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..13345158 --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-RHEL-8.2-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,48 @@ +### RHEL 8.2 ### +Hard Disk: 500G +Network: CI +Video Card: Total Video Memory: 64MB +Boot options/Firmware: BIOS + +Language: English (United States) +Time & Date: Etc/Coordinated Universal Time +Software Selection: Server with GUI +Network & Host..: Connect + +Language: English (US) +Typing:English (US) +Privacy: Location Services: OFF +Connect Your Online Accounts: Skip + +# Configure Settings + Notifications: + * Notification Popups: OFF + * Lock Screen Notifications: OFF + Privacy: + * Screen Lock: OFF + Power: + * Blank screen: Never + Devices: + * Displays: Resolution 1280 x 800 + Details: + * Time Zone: UTC + * run "sudo timedatectl set-timezone Etc/UTC" + * Users: Automatic login on + +# Add user to sudoers +Add 'qt ALL=NOPASSWD: ALL' to /etc/sudoers.d/qt + +Add 'GRUB_GFXMODE=1280x800' to /etc/default/grub +sudo grub2-mkconfig -o /etc/grub2.cfg +sudo grub2-mkconfig -o /boot/grub2/grub.cfg + +# Add support for virtio driver +su +echo "add_drivers+=\"virtio-blk\"" >> /etc/dracut.conf.d/virtio.conf +dracut -f + +# Fetch and run coin-setup +Download http://coin/coin/binary/linux_amd64/coin-setup +run './coin-setup' + +Reboot diff --git a/coin/pre-provisioning/qtci-linux-RHEL-8.4-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-linux-RHEL-8.4-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..9786940d --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-RHEL-8.4-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,62 @@ +### RHEL 8.2 ### +Hard Disk: 500G +Network: CI +Video Card: Total Video Memory: 64MB +Boot options/Firmware: BIOS + +Language: English (United States) +Time & Date: Etc/Coordinated Universal Time +Software Selection: Server with GUI +Installation Destination: Automatic partitioning selected +Root Passowrd: Set +Network & Host..: Connect +Beging Installation + +Reboot + +Licensing: Accept +User Settings: give username & password. Select 'Make this user administrator' +Finish Configuration + +Welcome! +Language: English (US) +Typing:English (US) +Privacy: Location Services: OFF +Connect Your Online Accounts: Skip +Start Using Red Hat Enterprise Linux + +# Configure Settings + Notifications: + * Notification Popups: OFF + * Lock Screen Notifications: OFF + Privacy: + * Screen Lock: OFF + Power: + * Blank screen: Never + Devices: + * Displays: Resolution 1280 x 800 + Details: + * Time & Date: Time Zone: UTC + * run "sudo timedatectl set-timezone Etc/UTC" + * Users: Automatic login on + +# Add user to sudoers +Add 'qt ALL=NOPASSWD: ALL' to /etc/sudoers.d/qt + +Add 'GRUB_GFXMODE=1280x800' to /etc/default/grub +sudo grub2-mkconfig -o /etc/grub2.cfg +sudo grub2-mkconfig -o /boot/grub2/grub.cfg + +# Add support for virtio driver +su +echo "add_drivers+=\"virtio-blk\"" >> /etc/dracut.conf.d/virtio.conf +dracut -f + +# Enable network connection from right upper corner + +# Fetch and run coin-setup +Download http://coin/coin/binary/linux_amd64/coin-setup +# run as qt user +run './coin-setup' + +Reboot diff --git a/coin/pre-provisioning/qtci-linux-RHEL-8.6-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-linux-RHEL-8.6-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..c5cb1e8d --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-RHEL-8.6-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,63 @@ +### RED HAT ENTERPRISE LINUX 8.6 ### + +Language: English (United States) +Time & Date: Etc/Coordinated Universal Time +Software Selection: Server with GUI +Installation Destination: Automatic partitioning selected +Root Passowrd: Set +Network & Host..: Connect +User Creation +Beging Installation + +Reboot + +Licensing: Accept +Finish Configuration + +gnome-initial-setup: +Language: English (US) +Typing:English (US) +Privacy: Location Services: OFF +Connect Your Online Accounts: Skip +Start Using Red Hat Enterprise Linux + +# Add user to sudoers +Add 'qt ALL=NOPASSWD: ALL' to /etc/sudoers.d/qt + +# Configure Settings + Notifications: + * Notification Popups: OFF + * Lock Screen Notifications: OFF + Privacy: + * Screen Lock: OFF + Power: + * Blank screen: Never + Details: + * Time & Date: Time Zone: UTC + * run "sudo timedatectl set-timezone Etc/UTC" + * Users: Automatic login on + +Add 'GRUB_GFXMODE=1280x800' to /etc/default/grub +sudo grub2-mkconfig -o /etc/grub2.cfg +sudo grub2-mkconfig -o /boot/grub2/grub.cfg + +# Add support for virtio driver +su +echo "add_drivers+=\"virtio-blk\"" >> /etc/dracut.conf.d/virtio.conf +dracut -f + +# Do these from Opennebula UI! + +# Enable network connection from right upper corner + + Devices: + * Displays: Resolution 1280 x 800 + +# Fetch and run coin-setup +Download http://coin/coin/binary/linux_amd64/coin-setup +# run as qt user +su +chmod 755 coin-setup +run './coin-setup' + +Reboot diff --git a/coin/pre-provisioning/qtci-linux-RHEL-8.8-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-linux-RHEL-8.8-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..a2ed87e0 --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-RHEL-8.8-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,62 @@ +### RED HAT ENTERPRISE LINUX 8.8 ### + +Language: English (United States) +Time & Date: Etc/Coordinated Universal Time +Software Selection: Server with GUI +Installation Destination: Automatic partitioning selected +Root Passowrd: Set +Network & Host..: Connect +User Creation +Beging Installation + +Reboot + +Licensing: Accept +Finish Configuration + +gnome-initial-setup: +Language: English (US) +Typing:English (US) +Privacy: Location Services: OFF +Connect Your Online Accounts: Skip +Start Using Red Hat Enterprise Linux + +# Add user to sudoers +Add 'qt ALL=NOPASSWD: ALL' to /etc/sudoers.d/qt + +# Configure Settings + Notifications: + * Notification Popups: OFF + * Lock Screen Notifications: OFF + Privacy: + * Screen Lock: OFF + Power: + * Blank screen: Never + Details: + * Time & Date: Time Zone: UTC + * run "sudo timedatectl set-timezone Etc/UTC" + * Users: Automatic login on + +Add 'GRUB_GFXMODE=1280x800' to /etc/default/grub +sudo grub2-mkconfig -o /etc/grub2.cfg +sudo grub2-mkconfig -o /boot/grub2/grub.cfg + +# Add support for virtio driver +su +echo "add_drivers+=\" virtio-blk \"" >> /etc/dracut.conf.d/virtio.conf +dracut -f + +# Do these from Opennebula UI! + +# Enable network connection from right upper corner + + Devices: + * Displays: Resolution 1280 x 800 + +# Fetch and run coin-setup +Download http://coin/coin/binary/linux_amd64/coin-setup +# run as qt user +chmod 755 coin-setup +run './coin-setup' + +Reboot diff --git a/coin/pre-provisioning/qtci-linux-RHEL-9.0-x86_64/01-disable-automounting.sh b/coin/pre-provisioning/qtci-linux-RHEL-9.0-x86_64/01-disable-automounting.sh new file mode 100755 index 00000000..aeac4768 --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-RHEL-9.0-x86_64/01-disable-automounting.sh @@ -0,0 +1,14 @@ +#!/usr/bin/env bash +# Copyright (C) 2021 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +set -ex + +sudo tee -a /etc/dconf/db/local.d/00-media-automount <<"EOF" +[org/gnome/desktop/media-handling] +automount=false +automount-open=false +EOF + +sudo dconf update + diff --git a/coin/pre-provisioning/qtci-linux-RHEL-9.0-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-linux-RHEL-9.0-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..e69c11da --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-RHEL-9.0-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,58 @@ +### RHEL 9.0 ### +Hard Disk: 500G +Network: CI +Video Card: Total Video Memory: 64MB +Boot options/Firmware: BIOS + +Language: English (United States) +Time & Date: Etc/Coordinated Universal Time +Software Selection: Server with GUI +Installation Destination: Automatic partitioning selected +Root Passowrd: Set +Network & Host..: Connect +Beging Installation + +Reboot + +# Configure Settings + Notifications: + * Lock Screen Notifications: OFF + * Applications: Set notificantion off + Applications: + * Disable notifications from all applications + Privacy: + * Blank Screen Delay: Never + * Screen Lock: OFF + Power: + * Blank screen: Never + Displays: + * Resolution: 1280 x 800 + Users: + * Automatic login on + +# Add user to sudoers +Add 'qt ALL=NOPASSWD: ALL' to /etc/sudoers.d/qt + +Add 'GRUB_GFXMODE=1280x800' to /etc/default/grub +sudo grub2-mkconfig -o /etc/grub2.cfg +sudo grub2-mkconfig -o /boot/grub2/grub.cfg + +# Add support for virtio driver +su +echo "add_drivers+=\" virtio-blk \"" >> /etc/dracut.conf.d/virtio.conf +dracut -f + +# Enable network connection from right upper corner + +# Fetch and run coin-setup +Download http://coin/coin/binary/linux_amd64/coin-setup +# run as qt user +run './coin-setup' + +# Switch to use GNOME Classic user interface +# GNOME Classic was selected because there's an issue with Starndard (wayland display server). Autotest start failing because terminal session remains in Activities Overview. +# https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/3854 +First execute script ./01-disable-automounting.sh (dconf update crash in GNOME Classic) +logout -> Select user (without it the drop down menu won't appear) -> switch to 'GNOME Classic' from drop down menu in login screen + +Reboot diff --git a/coin/pre-provisioning/qtci-linux-RHEL-9.2-x86_64/01-disable-automounting.sh b/coin/pre-provisioning/qtci-linux-RHEL-9.2-x86_64/01-disable-automounting.sh new file mode 100644 index 00000000..645f9f42 --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-RHEL-9.2-x86_64/01-disable-automounting.sh @@ -0,0 +1,14 @@ +#!/usr/bin/env bash +# Copyright (C) 2023 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +set -ex + +sudo tee -a /etc/dconf/db/local.d/00-media-automount <<"EOF" +[org/gnome/desktop/media-handling] +automount=false +automount-open=false +EOF + +sudo dconf update + diff --git a/coin/pre-provisioning/qtci-linux-RHEL-9.2-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-linux-RHEL-9.2-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..f12e95f1 --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-RHEL-9.2-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,60 @@ +### RHEL 9.2 ### +Hard Disk: 500G +Network: CI +Video Card: Total Video Memory: 64MB +Boot options/Firmware: BIOS + +Language: English (United States) +Time & Date: Etc/Coordinated Universal Time +Software Selection: Server with GUI +Installation Destination: Automatic partitioning selected +Root Passowrd: Set +Network & Host..: Connect +Beging Installation + +Reboot + +# Configure Settings + Notifications: + * Lock Screen Notifications: OFF + * Applications: Set notification off + Applications: + * Disable notifications from all applications + Privacy: + * Blank Screen Delay: Never + * Screen Lock: OFF + Power: + * Blank screen: Never + Displays: + * Resolution: 1280 x 800 + Users: + * Automatic login on + +# Add user to sudoers +Add 'qt ALL=NOPASSWD: ALL' to /etc/sudoers.d/qt + +Add 'GRUB_GFXMODE=1280x800' to /etc/default/grub +sudo grub2-mkconfig -o /etc/grub2.cfg +sudo grub2-mkconfig -o /boot/grub2/grub.cfg + +# Add support for virtio driver +su +echo "add_drivers+=\" virtio-blk \"" >> /etc/dracut.conf.d/virtio.conf +dracut -f + +# Do these from Opennebula UI! + +# Enable network connection from right upper corner + +# Fetch and run coin-setup +Download http://coin/coin/binary/linux_amd64/coin-setup +# run as qt user +run './coin-setup' + +# Switch to use GNOME Classic user interface +# GNOME Classic was selected because there's an issue with Starndard (wayland display server). Autotest start failing because terminal session remains in Activities Overview. +# https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/3854 +First execute script ./01-disable-automounting.sh (dconf update crash in GNOME Classic) +logout -> Select user (without it the drop down menu won't appear) -> switch to 'GNOME Classic' from drop down menu in login screen + +Reboot diff --git a/coin/pre-provisioning/qtci-linux-SLES-15_SP3-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-linux-SLES-15_SP3-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..6fe4943b --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-SLES-15_SP3-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,56 @@ +### SUSE Linux Enterprise Desktop 15 SP3 ### + +Language: English (US) +Keyboard Layout: English (US) + +Available Extensions and Modules: + Basesystem Module + Desktop Applications Module + Python 2 Module + Server Applications Module + +Gnome Desktop (X11) + +Enable SSH service +Disable Firewall + +Resolution 1280x800 + +# Settings +Notification Popups - disabled +LockScreen Notifications - disabled + +# Privacy +Screen Lock - Off + +# Power +Power Saving - Blank Screen - never + +# Add user to sudoers +Add 'qt ALL=NOPASSWD: ALL' to /etc/sudoers.d/qt + +# Fetch and run coin-setup +Download http://coin/coin/binary/linux_386/coin-setup +sudo ./coin-setup + +# Add support for virtio driver +sudo echo "add_drivers+=\"virtio-blk\"" >> /etc/dracut.conf.d/virtio.conf +sudo dracut -f + +# Add these to '/etc/polkit-default-privs.local' +org.freedesktop.udisks2.filesystem-mount yes +org.freedesktop.udisks2.filesystem-mount-other-seat yes +org.freedesktop.udisks2.filesystem-mount-system yes +org.freedesktop.login1.power-off yes +org.freedesktop.login1.power-off-ignore-inhibit yes +org.freedesktop.login1.power-off-multiple-sessions yes + +sudo /sbin/set_polkit_default_privs + +# Set how DHClient creates CID for compatibility with older DHCP servers +sudo sed -i 's/DHCLIENT_CREATE_CID=""/DHCLIENT_CREATE_CID="rfc2132"/' /etc/sysconfig/network/dhcp + +# Register product +# Add 'Available Extensions and Modules' +* Basesystem Module 15 SP3 x86_64 +* Server Applications Module 15 SP3 x86_64 diff --git a/coin/pre-provisioning/qtci-linux-SLES-15_SP4-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-linux-SLES-15_SP4-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..da785987 --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-SLES-15_SP4-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,64 @@ +### SUSE Linux Enterprise Server 15 SP4 ### + +# Installation # +Language: English (US) +Keyboard Layout: English (US) + +Available Extensions and Modules: + Basesystem Module + Desktop Applications Module + Python 3 Module + Server Applications Module + +SLES with GNOME + +Region: Etc +Time Zone: UTC + +Create user with automatic login + +disable firewall + +Displays: Resolution 1280x800 +Power: Screen Blank: Never +Privacy: Screen lock: Automatic screen lock: disable +Privacy: Screen lock: Show notifications on lock screen: disable + +# Add user to sudoers +Add 'qt ALL=NOPASSWD: ALL' to /etc/sudoers.d/qt + +sudo su - +echo "add_drivers+=\"virtio-blk\"" >/etc/dracut.conf.d/virtio.conf +dracut -f + +# Add these to /etc/polkit-default-privs.local +org.freedesktop.udisks2.filesystem-mount yes +org.freedesktop.udisks2.filesystem-mount-other-seat yes +org.freedesktop.udisks2.filesystem-mount-system yes +org.freedesktop.login1.power-off yes +org.freedesktop.login1.power-off-ignore-inhibit yes +org.freedesktop.login1.power-off-multiple-sessions yes + +# Set how DHClient creates CID for compatibility with older DHCP servers +sudo sed -i 's/DHCLIENT_CREATE_CID=""/DHCLIENT_CREATE_CID="rfc2132"/' /etc/sysconfig/network/dhcp +systemctl restart wicked + +# Create etc/sysconfig/network/ifcfg-eth1 with values: +* BOOTPROTO='dhcp' +* STARTMODE='auto' +sudo ifup eth1 + +# Register product +# Add 'Available Extensions and Modules' +* Basesystem Module 15 SP4 x86_64 +* Server Applications Module 15 SP4 x86_64 + +zypper yum update + +* Download and run coin-setup + +# Fetch and run coin-setup +Download http://coin/coin/binary/linux_386/coin-setup +sudo ./coin-setup + +sudo reboot now diff --git a/coin/pre-provisioning/qtci-linux-SLES-15_SP5-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-linux-SLES-15_SP5-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..3f25ec4a --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-SLES-15_SP5-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,75 @@ +### SUSE Linux Enterprise Server 15 SP5 ### + +# Register product # +Register product at the beginning or later during the +installation process. Full version allows registering later. + +# Installation # +Language: English (US) +Keyboard Layout: English (US) + +Available Extensions and Modules: + Basesystem Module + Desktop Applications Module + Python 3 Module + Server Applications Module + +SLES with GNOME + +Region: Etc +Time Zone: UTC + +Create user with automatic login + +disable firewall + +Displays: Resolution 1280x800 +Power: Screen Blank: Never +Privacy: Screen lock: Automatic screen lock: disable +Privacy: Screen lock: Show notifications on lock screen: disable + +# Add user to sudoers +Add 'qt ALL=NOPASSWD: ALL' to /etc/sudoers.d/qt + +sudo su - +echo 'add_drivers+=" virtio-blk "' >/etc/dracut.conf.d/virtio.conf +dracut -f + +# Add these to /etc/polkit-default-privs.local +org.freedesktop.udisks2.filesystem-mount yes +org.freedesktop.udisks2.filesystem-mount-other-seat yes +org.freedesktop.udisks2.filesystem-mount-system yes +org.freedesktop.login1.power-off yes +org.freedesktop.login1.power-off-ignore-inhibit yes +org.freedesktop.login1.power-off-multiple-sessions yes + +# Run this command for changes to take effect +sudo bash /sbin/set_polkit_default_privs + +# Set how DHClient creates CID for compatibility with older DHCP servers +sudo sed -i 's/DHCLIENT_CREATE_CID=""/DHCLIENT_CREATE_CID="rfc2132"/' /etc/sysconfig/network/dhcp +systemctl restart wicked + +# Create /etc/sysconfig/network/ifcfg-eth1 with values: +* BOOTPROTO='dhcp' +* STARTMODE='auto' +sudo ifup eth1 + +# If not yet registered - Register product +# Add 'Available Extensions and Modules' +* Basesystem Module 15 SP5 x86_64 +* Server Applications Module 15 SP5 x86_64 +* Python 3 Module 15 SP5 x86_64 +* Desktop Applications Module 15 SP5 x86_64 + +zypper update + +* Download and run coin-setup + +# Fetch and run coin-setup +Download http://coin/coin/binary/linux_386/coin-setup +# run as qt user +chmod 755 ./coin-setup +sudo ./coin-setup + +sudo reboot now diff --git a/coin/pre-provisioning/qtci-linux-Ubuntu-20.04-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-linux-Ubuntu-20.04-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..7501b3e3 --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-Ubuntu-20.04-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,59 @@ +### Ubuntu 20.04 ### +Hard Disk: 1TB + +Language: English (United States) +Time & Date: Etc/Coordinated Universal Time +Software Selection: Desktop image, minimal install + +Language: English (US) +Typing: English (US) +Privacy: Location Services: OFF +Connect Your Online Accounts: Skip + + +# Configure Settings + Notifications: + * Notification Popups: OFF + * Lock Screen Notifications: OFF + Privacy: + * Screen Lock: OFF + * File History & Rubbish Bin: + * File History: Off + * Diagnostics: + * Send error reports to Canonical: Never + Power: + * Blank screen: Never + * Automatic suspend: Off + Appearance: + * Auto-hide the dock: Off + Devices: + * Displays: Resolution 1280 x 800 + Details: + * Time Zone: UTC + * run "sudo timedatectl set-timezone UTC" + * Users: Automatic login on + + Software & Updates: + * Updates: + * Subscribed to: Security updates only + * Automatically check for updates: Never + * Notify me of a new Ubuntu version: Never + +# Add user to sudoers +Add 'qt ALL=NOPASSWD: ALL' to /etc/sudoers.d/qt + +Add 'GRUB_GFXMODE=1280x800' to /etc/default/grub +run 'sudo grub2-mkconfig' + +# Install ssh server +run 'sudo apt install openssh-server' + +# Disable firewall +run 'sudo ufw disable' + +# Fetch and run coin-setup (in Opennebula) +Download http://coin/coin/binary/linux_amd64/coin-setup +run './coin-setup' + +Reboot + diff --git a/coin/pre-provisioning/qtci-linux-Ubuntu-24.04-aarch64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-linux-Ubuntu-24.04-aarch64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..4b581d78 --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-Ubuntu-24.04-aarch64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,60 @@ +### Ubuntu 24.04 ### +Hard Disk: 1TB + +Language: English (United States) +Time & Date: Etc/Coordinated Universal Time +Software Selection: Desktop image, minimal install + +Language: English (US) +Typing: English (US) +Privacy: Location Services: OFF +Connect Your Online Accounts: Skip + + +# Configure Settings + Notifications: + * Notification Popups: OFF + * Lock Screen Notifications: OFF + Privacy: + * Screen Lock: OFF + * File History & Rubbish Bin: + * File History: Off + * Diagnostics: + * Send error reports to Canonical: Never + Power: + * Blank screen: Never + * Automatic suspend: Off + Appearance: + * Auto-hide the dock: Off + Devices: + * Displays: Resolution 1280 x 800 (found 1280 x 768) + Details: + * Time Zone: UTC + * run "sudo timedatectl set-timezone UTC" + * Users: Automatic login on + + Software & Updates: + * Updates: + * Subscribed to: Security updates only + * Automatically check for updates: Never + * Notify me of a new Ubuntu version: Never + +# Add user to sudoers +Add 'qt ALL=NOPASSWD: ALL' to /etc/sudoers.d/qt + +Add 'GRUB_GFXMODE=1280x800' to /etc/default/grub (Now it's 1280x768 - is that OK?) +run 'sudo grub-mkconfig' + +# Install ssh server +run 'sudo apt install openssh-server' + +# Disable firewall +run 'sudo ufw disable' + +# Fetch and run coin-setup (in Opennebula) +Download http://coin/coin/binary/linux_arm64/coin-setup +run 'chmod +x ./coin-setup' to make it executable +run './coin-setup' + +Reboot + diff --git a/coin/pre-provisioning/qtci-linux-openSUSE-15.4-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-linux-openSUSE-15.4-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..1f7a3044 --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-openSUSE-15.4-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,42 @@ +### OpenSUSE Leap 15.4 ### +## KDE ## +## In qtci-linux-openSUSE-15.4-x86_64-50 > Graphics Platform: X11 (System default) ## +## In qtci-linux-openSUSE-15.4-x86_64-51 > Graphics Platform: Wayland (Plasma (Wayland))## + +# Installation # +Language: English (US) +Keyboard Layout: English (US) + +Activate online repositories during installation (yes) +Use default selections + +Desktop with KDE Plasma + +Suggested Partitioning - default values + +Time Zone: UTC + +## Configurations ## +Download and run coin-setup binary +YaST - System - Services Manager - Firewalld - Stop +# enable ssh access +sudo rcsshd start +Workspace Behavior - Screen locking - Lock screen automatically - unselect options +Startup and Shutdown - Behavior - Login Screen - Select Automatically log in with session (System default) +Add below to '$HOME/.config/autostart/coin-bootstrap-agent.desktop' + [Desktop Entry] + Type=Application + Exec=/usr/bin/gnome-terminal -e "/home/qt/bootstrap-agent /dev/ttyS0" + Hidden=false + X-GNOME-Autostart-enabled=true + Name=Coin +Notifications + Critical notifications - unselect + Log priority notifications - unselect + Application progress: Show in task manager - unselect + Show in notifications - unselect + Notification badges: Show in task manager - unselect +Display and Monitor - Display Configuration - 1280x800 +Power Management: Screen Energy Saving - unselect + +add 'qt ALL=NOPASSWD: ALL' to /etc/sudoers.d/qt diff --git a/coin/pre-provisioning/qtci-linux-openSUSE-15.5-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-linux-openSUSE-15.5-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..98f6b047 --- /dev/null +++ b/coin/pre-provisioning/qtci-linux-openSUSE-15.5-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,35 @@ +### OpenSUSE Leap 15.5 ### +## KDE ## +## In qtci-linux-openSUSE-15.5-x86_64-52 > Graphics Platform: X11 (System default) ## + +# Installation # +Language: English (US) +Keyboard Layout: English (US) + +Activate online repositories during installation (yes) +Use default selections + +Desktop with KDE Plasma + +Suggested Partitioning - default values + +Time Zone: UTC + +## Configurations ## +Before coin-setup add 'qt ALL=NOPASSWD: ALL' to /etc/sudoers.d/qt +Download and run coin-setup binary - http://10.215.100.35/coin/binary/linux_amd64/coin-setup +- If IP has changed and Coin name not visible to VM, check from Coin logs which IP works for VMs +Workspace Behavior - Screen locking - Lock screen automatically - unselect options +Startup and Shutdown - Behavior - Login Screen - Select Automatically log in with session (System default) +Notifications + Critical notifications - unselect + Low priority notifications - unselect + Application progress: Show in task manager - unselect + Show in notifications - unselect + Notification badges: Show in task manager - unselect +Display and Monitor - Display Configuration - 1280x800 +Power Management: Screen Energy Saving - unselect + Suspend Session - unselect +YaST - Hardware - Sound - Add Dummy soundcard + +Reboot diff --git a/coin/pre-provisioning/qtci-macos-10.15-x86_64/README b/coin/pre-provisioning/qtci-macos-10.15-x86_64/README new file mode 100644 index 00000000..82525162 --- /dev/null +++ b/coin/pre-provisioning/qtci-macos-10.15-x86_64/README @@ -0,0 +1,7 @@ +Add accessibility settings: +/Volumes/Macintosh\ HD/usr/bin/sqlite3 "/Volumes/Macintosh HD/Library/Application Support/com.apple.TCC/TCC.db" <<"EOF" +insert into access (service,client,client_type,allowed,prompt_count,indirect_object_identifier,flags,last_modified) values ("kTCCServiceAccessibility","com.froglogic.squish.ide.product",0,1,1,"UNSEEN",0,1612871478) + +insert into access (service,client,client_type,allowed,prompt_count,indirect_object_identifier,flags,last_modified) values ("kTCCServiceAccessibility","/Users/qt/bootstrap-agent",1,1,1,"UNSEEN",0,1612871478); +EOF + diff --git a/coin/pre-provisioning/qtci-macos-11.0-x86_64/README b/coin/pre-provisioning/qtci-macos-11.0-x86_64/README new file mode 100644 index 00000000..6713914d --- /dev/null +++ b/coin/pre-provisioning/qtci-macos-11.0-x86_64/README @@ -0,0 +1,8 @@ +Add accessibility settings: +/Volumes/Macintosh\ HD/usr/bin/sqlite3 "/Volumes/Macintosh HD/Library/Application Support/com.apple.TCC/TCC.db" <<"EOF"{{insert into access (service,client,client_type,auth_value,auth_reason,auth_version,indirect_object_identifier_type,indirect_object_code_identity,last_modified) values }} +('kTCCServiceAccessibility','com.froglogic.squish.ide.product',0,2,4,1,0,0,1612867994); + +{{insert into access (service,client,client_type,auth_value,auth_reason,auth_version,indirect_object_identifier_type,indirect_object_code_identity,last_modified) values }} +('kTCCServiceAccessibility','/Library/Java/JavaVirtualMachines/jdk1.8.0_102.jdk/Contents/Home/jre/bin/java',1,2,4,1,0,0,1612867994); + +EOF diff --git a/coin/pre-provisioning/qtci-macos-12.0-x86_64/README b/coin/pre-provisioning/qtci-macos-12.0-x86_64/README new file mode 100644 index 00000000..6aee519f --- /dev/null +++ b/coin/pre-provisioning/qtci-macos-12.0-x86_64/README @@ -0,0 +1,38 @@ +# List of manual pre-installation steps for Tier1 image creation + +* Open KVM connection to Intel mac Parallels host + - Open Parallels :: create new VM :: select macOS :: Install + - Check first boot settings from infratools repository mac instructions + - Upgrade OS if needed +* Modify OS settings / check these from infratools again +* Install Parallels tools +* Enable Terminal full access +* Run these two commands in local Terminal: + + sudo /usr/bin/sqlite3 "/Users/qt/Library/Application Support/com.apple.TCC/TCC.db" "insert into access (service,client,client_type,auth_value,auth_reason,auth_version,indirect_object_identifier_type,indirect_object_code_identity,last_modified) values + ('kTCCServiceAccessibility','com.froglogic.squish.ide.product',0,2,4,1,0,0,1612867994);" + + sudo /usr/bin/sqlite3 "/Users/qt/Library/Application Support/com.apple.TCC/TCC.db" "insert into access (service,client,client_type,auth_value,auth_reason,auth_version,indirect_object_identifier_type,indirect_object_code_identity,last_modified) values + ('kTCCServiceAccessibility','/Library/Java/JavaVirtualMachines/jdk1.8.0_102.jdk/Contents/Home/jre/bin/java',1,2,4,1,0,0,1612867994);" + +* Download and run coin setup binaries from http://coin/coin/setup + - Check /Users/qt folder for bootstrap agent +* Create /etc/sudoers.d/qt with a line of qt ALL=(ALL) NOPASSWD: ALL +* Poweroff VM +* Enlarge disk space + - Parallels Control center :: VM settings :: Hardware :: Hard Disk :: 300GB + - Start VM and use Disk Utility to enlarge disk space into use +* Poweroff VM +* Go to /Users/qt/Parallels/<created VM>/harddisk.hdd folder in the Intel mac host + - Copy its content to Tier1 folder +* Copy Tier1 folder to 101 NFS + - Check folder access rights + +# How to upgrade existing Tier1 image + +* Open KVM connection to Intel mac Parallels host + - Open Parallels :: create new VM :: select macOS :: start installation but then stop it when machine boots to recovery mode +* You should now have a virtual machine folder in /Users/qt/Parallels/<VM folder> +* Remove files from <VM folder>/harddisk.hdd/ and copy Tier1 VM files from NFS to <VM folder>/harddisk.hdd/ +* Start the virtual machine and make needed changes +* Copy <VM folder>/harddisk.hdd to NFS with updated number in its name diff --git a/coin/pre-provisioning/qtci-windows-10-x86/06-msvc_2017_build_tools.ps1 b/coin/pre-provisioning/qtci-windows-10-x86/06-msvc_2017_build_tools.ps1 deleted file mode 100644 index 2bb92c22..00000000 --- a/coin/pre-provisioning/qtci-windows-10-x86/06-msvc_2017_build_tools.ps1 +++ /dev/null @@ -1,48 +0,0 @@ -############################################################################ -## -## Copyright (C) 2018 The Qt Company Ltd. -## Contact: http://www.qt.io/licensing/ -## -## This file is part of the provisioning scripts of the Qt Toolkit. -## -## $QT_BEGIN_LICENSE:LGPL21$ -## Commercial License Usage -## Licensees holding valid commercial Qt licenses may use this file in -## accordance with the commercial license agreement provided with the -## Software or, alternatively, in accordance with the terms contained in -## a written agreement between you and The Qt Company. For licensing terms -## and conditions see http://www.qt.io/terms-conditions. For further -## information use the contact form at http://www.qt.io/contact-us. -## -## GNU Lesser General Public License Usage -## Alternatively, this file may be used under the terms of the GNU Lesser -## General Public License version 2.1 or version 3 as published by the Free -## Software Foundation and appearing in the file LICENSE.LGPLv21 and -## LICENSE.LGPLv3 included in the packaging of this file. Please review the -## following information to ensure the GNU Lesser General Public License -## requirements will be met: https://www.gnu.org/licenses/lgpl.html and -## http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html. -## -## As a special exception, The Qt Company gives you certain additional -## rights. These rights are described in The Qt Company LGPL Exception -## version 1.1, included in the file LGPL_EXCEPTION.txt in this package. -## -## $QT_END_LICENSE$ -## -############################################################################# -. "$PSScriptRoot\..\common\helpers.ps1" - -# This script will install Visual Studio 2017 Build Tools -# https://www.visualstudio.com/downloads/#build-tools-for-visual-studio-2017 - -$version = "2017_version_15.0" -$url_cache = "http://ci-files01-hki.intra.qt.io/input/windows/mu_build_tools_for_visual_studio_" + $version + "_x86_x64_10254482.exe" -$sha1 = "a31e099e5114fef80a21654689e6864afc544a16" -$msvcPackage = "C:\Windows\Temp\$version.exe" - -Download $url_cache $url_cache $msvcPackage -Verify-Checksum $msvcPackage $sha1 -cmd /c "$msvcPackage --all --passive --wait" -echo "Cleaning $msvcPackage.." -Remove-Item -Recurse -Force "$msvcPackage" -echo "Visual Studio Build Tools = $version" >> ~\versions.txt diff --git a/coin/pre-provisioning/qtci-windows-10-x86/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-windows-10-x86/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..0099b600 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86/README_MANUAL_INSTALLATIONS @@ -0,0 +1,47 @@ +CPU 4G +Memory: 4G +Hard disk: 250G +Network: CI_NW +Video Card - total memory: 32MB + +VM Options: +Boot options/Firmware: BIOS + +Language: English US +Time and currency format: Finnish (Finland) +Keyboard: Finnish +Windows 10 Enterprise +Region: Finland +Default keyboard layout: English (United States) + +* VMware tools (complete) installed +* Resolution set to 1280x800 +* Coin-setup: + - Installing Boostrap agent + - Disabling fast boot + - Disabling firewall + - Disabling UAC + - Enabling autologin + - Automatic login + - Disabling windows updates +* Enable 'Allow remote connections to this computer' +* Windows Defender Antivirus turned off: Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Windows Defender Antivirus' + - Edit 'Turn off Windows Defender Antivirus' > 'Enabled' > 'Apply' * Background defrag disabled: 'defragment and optimize drives' - 'change settings' - unchecked "run on a schedule" * Background defrag disabled: 'defragment + NOTE! Without this step windows defender can't be disabled! +* Background defrag disabled: 'defragment and optimize drives' - 'change settings' - unchecked "run on a schedule" + - Run in terminal: 'schtasks /Delete /TN "Microsoft\Windows\Defrag\ScheduledDefrag"' +* Time zone: Coordinated Universal Time +* Windows search disabled: 'Control Panel\System and Security\Administrative Tools\Services' - 'Windows search' - stop & disable +* Sysmain disabled: 'Control Panel\System and Security\Administrative Tools\Services' - 'SysMain' - stop & disable +* Power saver disabled: Open 'Power & sleep' and set 'Screen' to 'never' +* Turn windows features on or off -> Check the "SMB 1.0/CIFS File Sharing Support +* Google Chrome installed for RTA +* Turn off Virus & threat protection (all sections) manually. Without this step windows defender can't be disabled! + - Real-tiem protection -> off + - Cloud-delivered protection -> off + - Automatic sample submission -> off + - Tamper protection -> off +* Activate Windows +* Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' +* REBOOT the VM diff --git a/coin/pre-provisioning/qtci-windows-10-x86/disable-defragment.ps1 b/coin/pre-provisioning/qtci-windows-10-x86/disable-defragment.ps1 new file mode 100644 index 00000000..bb449e56 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86/disable-defragment.ps1 @@ -0,0 +1,42 @@ +# Copyright (C) 2019 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# Windows 7 does not have Get-ScheduledTask and Unregister-ScheduledTask +# thus needing its own version. +Write-Host "Disabling defragmentation" +$version = Get-CimInstance Win32_OperatingSystem | Select-Object -ExpandProperty Caption +if ($version -like '*Windows 7*'){ + $pi = New-Object System.Diagnostics.ProcessStartInfo + $pi.FileName = "C:\Windows\System32\schtasks.exe" + $pi.RedirectStandardError = $true + $pi.UseShellExecute = $false + $pi.Arguments = "/Delete /TN `"\Microsoft\Windows\Defrag\ScheduledDefrag`" /F" + $prog = New-Object System.Diagnostics.Process + $prog.StartInfo = $pi + $prog.Start() | Out-Null + $err = $prog.StandardError.ReadToEnd() + $prog.WaitForExit() + if ($prog.ExitCode -eq 0){ + Write-Host "Scheduled defragmentation removed" + } else { + if ($err -like '*cannot find the file*'){ + Write-Host "No scheduled defragmentation task found" + exit 0 + } else { + Write-Host "Error while deleting scheduled defragmentation task: $err" + } + } +} +else { + try { + $state = (Get-ScheduledTask -ErrorAction Stop -TaskName "ScheduledDefrag").State + Write-Host "Scheduled defragmentation task found in state: $state" + } + catch { + Write-Host "No scheduled defragmentation task found" + exit 0 + } + Write-Host "Unregistering scheduled defragmentation task" + Unregister-ScheduledTask -ErrorAction Stop -Confirm:$false -TaskName ScheduledDefrag + Write-Host "Scheduled Defragmentation task was cancelled" +} diff --git a/coin/pre-provisioning/qtci-windows-10-x86/disable-ntp.ps1 b/coin/pre-provisioning/qtci-windows-10-x86/disable-ntp.ps1 new file mode 100644 index 00000000..22651763 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86/disable-ntp.ps1 @@ -0,0 +1,4 @@ +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +# Disable the NTP from syncing +Run-Executable "w32tm.exe" "/config /syncfromflags:NO" diff --git a/coin/pre-provisioning/qtci-windows-10-x86/disable-schedule-tasks.ps1 b/coin/pre-provisioning/qtci-windows-10-x86/disable-schedule-tasks.ps1 new file mode 100644 index 00000000..1febd88c --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86/disable-schedule-tasks.ps1 @@ -0,0 +1,88 @@ +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +# This script will remove unneeded Tasks from Task Scheduler + +# Application Experience 'Microsoft Compatibility Appraiser' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Application Experience\Microsoft Compatibility Appraiser" + +# Application Experience 'ProgramDataUpdater' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program" +DisableSchedulerTask "Application Experience\ProgramDataUpdater" + +# Autochk 'Proxy' - "This task collects and uploads autochk SQM data if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Autochk\Proxy" + +# Chkdsk 'ProactiveScan' - "NTFS Volume Health Scan" +DisableSchedulerTask "Chkdsk\ProactiveScan" + +# Chkdsk 'SyspartRepair' +DeleteSchedulerTask "Chkdsk\SyspartRepair" + +# Customer Experience Improvement Program 'Consolidator' - "If the user has consented to participate in the Windows Customer Experience Improvement Program, this job collects and sends usage data to Microsoft." +DisableSchedulerTask "Customer Experience Improvement Program\Consolidator" + +# Customer Experience Improvement Program 'sbCeip' - "The USB CEIP (Customer Experience Improvement Program) task collects Universal Serial Bus related statistics and information about your machine and sends it to the Windows Device Connectivity engineering group at Microsoft. The information received is used to help improve the reliability, stability, and overall functionality of USB in Windows. If the user has not consented to participate in Windows CEIP, this task does not do anything." +DisableSchedulerTask "Customer Experience Improvement Program\UsbCeip" + +# Device Information 'Device' +DisableSchedulerTask "Device Information\Device" + +# Diagnosis 'Scheduled' - "The Windows Scheduled Maintenance Task performs periodic maintenance of the computer system by fixing problems automatically or reporting them through Security and Maintenance." +DisableSchedulerTask "Diagnosis\Scheduled" + +# DiskDiagnostic 'Microsoft-Windows-DiskDiagnosticDataCollector' - "The Windows Disk Diagnostic reports general disk and system information to Microsoft for users participating in the Customer Experience Program." +DisableSchedulerTask "DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" + +# ExploitGuard 'ExploitGuard MDM policy Refresh' - "Task for applying changes to the machine's Exploit Protection settings." +DisableSchedulerTask "ExploitGuard\ExploitGuard MDM policy Refresh" + +# Feedback/Siuf 'DmClient' +DisableSchedulerTask "Feedback\Siuf\DmClient" + +# Feedback/Siuf 'DmClient'OnScenarioDownload' +DisableSchedulerTask "Feedback\Siuf\DmClientOnScenarioDownload" + +# File Classification Infrastructure 'Property Definition Sync' +DisableSchedulerTask "File Classification Infrastructure\Property Definition Sync" + +# InstallService 'ScanForUpdates' +DisableSchedulerTask "InstallService\ScanForUpdates" + +# InstallService 'ScanForUpdatesAsUser' +DisableSchedulerTask "InstallService\ScanForUpdatesAsUser" + +# LanguageComponentsInstaller 'Installation' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\Installation" + +# LanguageComponentsInstaller 'ReconcileLanguageResources' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\ReconcileLanguageResources" + +# PI 'Secure-Boot-Update' - "This task updates the Secure Boot variables." +DisableSchedulerTask "PI\Secure-Boot-Update" + +# PI 'Sqm-Tasks' - "This task gathers information about the Trusted Platform Module (TPM), Secure Boot, and Measured Boot." +DisableSchedulerTask "PI\Sqm-Tasks" + +# Power Efficiency Diagnotics 'AnalyzeSystem' - "This task analyzes the system looking for conditions that may cause high energy use." +DisableSchedulerTask "PushToInstall\Registration" + +# Servicing 'StartComponentCleanup' +DisableSchedulerTask "Servicing\StartComponentCleanup" + +# SettingSync 'BackgroundUploadTask' +DeleteSchedulerTask "SettingSync\BackgroundUploadTask" + +# SoftwareProtectionPlatform 'SvcRestartTask' - "This task restarts the Software Protection Platform service at the specified time" +DeleteSchedulerTask "SoftwareProtectionPlatform\SvcRestartTask" + +# SoftwareProtectionPlatform 'SvcRestartTaskLogon' - "This task restarts the Software Protection Platform service at the specified time" +DisableSchedulerTask "SoftwareProtectionPlatform\SvcRestartTaskLogon" + +# SoftwareProtectionPlatform 'SvcRestartTaskNetwork' - "This task restarts the Software Protection Platform service when a new network is detected" +DisableSchedulerTask "SoftwareProtectionPlatform\SvcRestartTaskNetwork" + +# UNP 'RunUpdateNotificationMgr' +DeleteSchedulerTask "UNP\RunUpdateNotificationMgr" + + + + diff --git a/coin/pre-provisioning/qtci-windows-10-x86/disable-update-orchestrator.ps1 b/coin/pre-provisioning/qtci-windows-10-x86/disable-update-orchestrator.ps1 new file mode 100644 index 00000000..5ae8fb0d --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86/disable-update-orchestrator.ps1 @@ -0,0 +1,16 @@ +# Disable UpdateOrchestrator + +$name = "UpdateOrchestrator" +$path = "C:\Windows\System32\Tasks\Microsoft\Windows\$name" + +takeown /F $path /A /R +icacls $path /grant Administrators:F /T +SCHTASKS /Change /TN "Microsoft\Windows\$name\Reboot" /DISABLE +del "$path\Schedule Scan" +del "$path\Schedule Scan Static Task" +del "$path\Backup Scan" +del "$path\UpdateModelTask" +del "$path\USO_UxBroker" + +# Disable Update orchestrator service +reg.exe ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsoSvc" /V Start /T REG_dWORD /D 4 /F diff --git a/coin/pre-provisioning/qtci-windows-10-x86/disable-windefender.ps1 b/coin/pre-provisioning/qtci-windows-10-x86/disable-windefender.ps1 new file mode 100644 index 00000000..04130db0 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86/disable-windefender.ps1 @@ -0,0 +1,33 @@ +# Copyright (C) 2019 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# Turning off win defender. +# +# If disabled manually, windows will automatically enable it after +# some period of time. Disabling it speeds up the builds. +# NOTE! Windows Defender Antivirus needs to be turned off! +# Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Windows Defender Antivirus' +# Edit 'Turn off Windows Defender Antivirus' > 'Enabled' > 'Apply' + + +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableAntiSpyware /T REG_dWORD /D 1 /F" + +# 'Windows Defender Cache Maintenance' - "Periodic maintenance task." +DisableSchedulerTask "Windows Defender\Windows Defender Cache Maintenance" + +# 'Windows Defender Cleanup' - "Periodic cleanup task." +DisableSchedulerTask "Windows Defender\Windows Defender Cleanup" + +# 'Windows Defender Scheduled Scan' - "Periodic scan task." +DisableSchedulerTask "Windows Defender\Windows Defender Scheduled Scan" + +# 'Windows Defender Verification' - "Periodic verification task." +DisableSchedulerTask "Windows Defender\Windows Defender Verification" + +# Disable 'QueueReporting' - "Windows Error Reporting task to process queued reports." +DisableSchedulerTask "Windows Error Reporting\QueueReporting" + +# Disable WindowsUpdate from Task Scheduler +DisableSchedulerTask "WindowsUpdate\Scheduled Start" diff --git a/coin/pre-provisioning/qtci-windows-10-x86/disable-windows-file-protector.ps1 b/coin/pre-provisioning/qtci-windows-10-x86/disable-windows-file-protector.ps1 new file mode 100644 index 00000000..f1d09fb5 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86/disable-windows-file-protector.ps1 @@ -0,0 +1,4 @@ +# Disable Windows File Protection +# Windows File Protection feature in Microsoft Windows prevents programs from replacing critical Windows system files. + +reg.exe ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /V SFCDisable /T REG_dWORD /D 0xffffff9d /F diff --git a/coin/pre-provisioning/qtci-windows-10-x86/disable-windows-update-medic.ps1 b/coin/pre-provisioning/qtci-windows-10-x86/disable-windows-update-medic.ps1 new file mode 100644 index 00000000..6accbd3b --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86/disable-windows-update-medic.ps1 @@ -0,0 +1,25 @@ +# Windows Update Medic Service (WaaSMedicSvc)'PerformRemediation' helps recover update-related services to the supported configuration. +# WaasMedicSvc keeps re-starting Windows Update, even if it disabled manually. +# Even Admin user don't have privileged to disable PerformRemediation from Task Scheduler which means that WaaSMedicSvc.dll need's to be removed from the system + +$limit = (Get-Date).AddMinutes(20) +$path = "C:\Windows\System32\WaaSMedicSvc.dll" + +DO { + takeown /F $path + icacls $path /grant Administrators:f + Write-host "Deleting $path" + + Try { + del $path + } + Catch [System.UnauthorizedAccessException] { + Write-host "Access to the path '$path' is denied." + Continue + } + + if ((Get-Date) -gt $limit) { + exit 1 + } + +}while (Test-Path -Path "$path") diff --git a/coin/pre-provisioning/qtci-windows-10-x86/disable-windows-updates.ps1 b/coin/pre-provisioning/qtci-windows-10-x86/disable-windows-updates.ps1 new file mode 100644 index 00000000..62e19814 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86/disable-windows-updates.ps1 @@ -0,0 +1,24 @@ +# Copyright (C) 2017 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# This script disables the automatic Windows updates + +$service = get-service wuauserv +if (-not $service) { + Write-Host "Windows Update service not found." + exit 0 +} + +if ($service.Status -eq "Stopped") { + Write-Host "Windows Update service already stopped." +} else { + Write-Host "Stopping Windows Update service." + Stop-Service -Name "wuauserv" -Force +} + +$startup = Get-WmiObject Win32_Service | Where-Object {$_.Name -eq "wuauserv"} | Select -ExpandProperty "StartMode" +if ($startup -ne "Disabled") { + set-service wuauserv -startup disabled +} else { + Write-Host "Windows Update service startup already disabled." +} diff --git a/coin/pre-provisioning/qtci-windows-10-x86/msvc2015.txt b/coin/pre-provisioning/qtci-windows-10-x86/msvc2015.txt new file mode 100644 index 00000000..41b8858d --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86/msvc2015.txt @@ -0,0 +1,14 @@ +# Install visual studio 2015 + +version = "2015 update 3" +installer = "http://ci-files01-hki.ci.qt.io/input/windows/en_visual_studio_professional_2015_x86_x64_web_installer_6846650.exe" +# Select default values +# Make sure these are selected: + * All values from 'Universal Windows App Development Tools' + * 'Visual C++' + * 'Common Tools for Visual C++ 2015' + * 'Windows XP Support for C++' + * 'Common Tools and Software Development Kits' + * 'Android Native Development Kit (R11C, 32 bits) + * 'Apache Ant (1.9.3) + diff --git a/coin/pre-provisioning/qtci-windows-10-x86/msvc2015_update.ps1 b/coin/pre-provisioning/qtci-windows-10-x86/msvc2015_update.ps1 deleted file mode 100644 index 35f8dc3f..00000000 --- a/coin/pre-provisioning/qtci-windows-10-x86/msvc2015_update.ps1 +++ /dev/null @@ -1,58 +0,0 @@ -############################################################################# -## -## Copyright (C) 2018 The Qt Company Ltd. -## Contact: http://www.qt.io/licensing/ -## -## This file is part of the provisioning scripts of the Qt Toolkit. -## -## $QT_BEGIN_LICENSE:LGPL21$ -## Commercial License Usage -## Licensees holding valid commercial Qt licenses may use this file in -## accordance with the commercial license agreement provided with the -## Software or, alternatively, in accordance with the terms contained in -## a written agreement between you and The Qt Company. For licensing terms -## and conditions see http://www.qt.io/terms-conditions. For further -## information use the contact form at http://www.qt.io/contact-us. -## -## GNU Lesser General Public License Usage -## Alternatively, this file may be used under the terms of the GNU Lesser -## General Public License version 2.1 or version 3 as published by the Free -## Software Foundation and appearing in the file LICENSE.LGPLv21 and -## LICENSE.LGPLv3 included in the packaging of this file. Please review the -## following information to ensure the GNU Lesser General Public License -## requirements will be met: https://www.gnu.org/licenses/lgpl.html and -## http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html. -## -## As a special exception, The Qt Company gives you certain additional -## rights. These rights are described in The Qt Company LGPL Exception -## version 1.1, included in the file LGPL_EXCEPTION.txt in this package. -## -## $QT_END_LICENSE$ -## -############################################################################# -. "$PSScriptRoot\..\..\provisioning\common\helpers.ps1" - -# Install Visual Studio $version with $update_version -# Original download page: https://www.visualstudio.com/en-us/news/releasenotes/vs2015-update3-vs -$version = "2015" -$update_version = "3" - -# Only way to install specific Visual studio release is to use feed.xml. -# Visual Studio $version setup will use the feed.xml that was available when $update_version released -> 'https://msdn.microsoft.com/en-us/library/mt653628.aspx' -# These parameters will install Visual Studio Enterprise Update $update_version (the original Update $update_version without any further Update $update_version-era updates) -$parameters = "/OverrideFeedURI http://download.microsoft.com/download/6/B/B/6BBD3561-D764-4F39-AB8E-05356A122545/20160628.2/enu/feed.xml" - -$msvc_web_installer = "vs" + $version + "_" + $update_version -$package = "C:\Windows\temp\$msvc_web_installer.exe" -$url_cache = "http://ci-files01-hki.intra.qt.io/input/windows/$msvc_web_installer.exe" -$url_official = "https://go.microsoft.com/fwlink/?LinkId=691129" -$sha1 = "68abf90424aff604a04d6c61fb52adcd2cab2266" - -echo "Fetching Visual Studio $version update $update_version..." -Download $url_official $url_cache $package -Verify-Checksum $package $sha1 -echo "Installing Visual studio $version update $update_version..." -cmd /c "$package $parameters /norestart /Quiet" -remove-item $package - -echo "Visual Studio = $version update $update_version" >> ~\versions.txt diff --git a/coin/pre-provisioning/qtci-windows-10-x86/msvc2017.ps1 b/coin/pre-provisioning/qtci-windows-10-x86/msvc2017.ps1 deleted file mode 100644 index 052ec9c6..00000000 --- a/coin/pre-provisioning/qtci-windows-10-x86/msvc2017.ps1 +++ /dev/null @@ -1,49 +0,0 @@ -############################################################################ -## -## Copyright (C) 2018 The Qt Company Ltd. -## Contact: http://www.qt.io/licensing/ -## -## This file is part of the provisioning scripts of the Qt Toolkit. -## -## $QT_BEGIN_LICENSE:LGPL21$ -## Commercial License Usage -## Licensees holding valid commercial Qt licenses may use this file in -## accordance with the commercial license agreement provided with the -## Software or, alternatively, in accordance with the terms contained in -## a written agreement between you and The Qt Company. For licensing terms -## and conditions see http://www.qt.io/terms-conditions. For further -## information use the contact form at http://www.qt.io/contact-us. -## -## GNU Lesser General Public License Usage -## Alternatively, this file may be used under the terms of the GNU Lesser -## General Public License version 2.1 or version 3 as published by the Free -## Software Foundation and appearing in the file LICENSE.LGPLv21 and -## LICENSE.LGPLv3 included in the packaging of this file. Please review the -## following information to ensure the GNU Lesser General Public License -## requirements will be met: https://www.gnu.org/licenses/lgpl.html and -## http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html. -## -## As a special exception, The Qt Company gives you certain additional -## rights. These rights are described in The Qt Company LGPL Exception -## version 1.1, included in the file LGPL_EXCEPTION.txt in this package. -## -## $QT_END_LICENSE$ -## -############################################################################# - -. "$PSScriptRoot\..\common\helpers.ps1" - -# This script will install Visual Studio 2017 - -$version = "2017" -$url_cache = "http://ci-files01-hki.intra.qt.io/input/windows/mu_visual_studio_professional_" + $version + "_x86_x64_10049787.exe" -$sha1 = "8d678d27735018a99dc22ddb5412e4e6868991ae" -$msvcPackage = "C:\Windows\Temp\$version.exe" - - -Download $url_cache $url_cache $msvcPackage -Verify-Checksum $msvcPackage $sha1 -cmd /c "$msvcPackage --all --norestart --quiet --wait --add Microsoft.VisualStudio.Component.VC.Tools.ARM" -echo "Cleaning $msvcPackage.." -Remove-Item -Recurse -Force "$msvcPackage" -echo "Visual Studio = $version" >> ~\versions.txt diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/msvc2017.ps1 b/coin/pre-provisioning/qtci-windows-10-x86/msvc2017.txt index e4cf9bf3..12b4df21 100644 --- a/coin/pre-provisioning/qtci-windows-10-x86_64/msvc2017.ps1 +++ b/coin/pre-provisioning/qtci-windows-10-x86/msvc2017.txt @@ -1,42 +1,12 @@ -############################################################################ -## -## Copyright (C) 2018 The Qt Company Ltd. -## Contact: http://www.qt.io/licensing/ -## -## This file is part of the provisioning scripts of the Qt Toolkit. -## -## $QT_BEGIN_LICENSE:LGPL21$ -## Commercial License Usage -## Licensees holding valid commercial Qt licenses may use this file in -## accordance with the commercial license agreement provided with the -## Software or, alternatively, in accordance with the terms contained in -## a written agreement between you and The Qt Company. For licensing terms -## and conditions see http://www.qt.io/terms-conditions. For further -## information use the contact form at http://www.qt.io/contact-us. -## -## GNU Lesser General Public License Usage -## Alternatively, this file may be used under the terms of the GNU Lesser -## General Public License version 2.1 or version 3 as published by the Free -## Software Foundation and appearing in the file LICENSE.LGPLv21 and -## LICENSE.LGPLv3 included in the packaging of this file. Please review the -## following information to ensure the GNU Lesser General Public License -## requirements will be met: https://www.gnu.org/licenses/lgpl.html and -## http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html. -## -## As a special exception, The Qt Company gives you certain additional -## rights. These rights are described in The Qt Company LGPL Exception -## version 1.1, included in the file LGPL_EXCEPTION.txt in this package. -## -## $QT_END_LICENSE$ -## -############################################################################# +# Copyright (C) 2020 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only # Visual Studio $version version $version_number was installed manually using $installer. $version = "2017" # Current version was manually upgraded from the installer -$version_number = "15.9.16" -$installer = "http://ci-files01-hki.ci.local/input/windows/vs_professional__1312218103.1526017942.exe" +$version_number = "15.9.21" +$installer = "http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__1312218103.1526017942.exe" # Following components were selected from installer: # Microsoft.Net.Component.4.5.TargetingPack (.NET Framework 4.5 targeting pack) @@ -52,7 +22,7 @@ $installer = "http://ci-files01-hki.ci.local/input/windows/vs_professional__1312 # Microsoft.VisualStudio.Component.TextTemplating (Text Template Transformation) # Microsoft.VisualStudio.Component.Roslyn.Compiler (C# and Visual Basic Roslyn compilers) # Microsoft.Component.MSBuild (MSBuild) -# Microsoft.VisualStudio.Component.VC.Tools.x86.x64 (VC++ 2017 version 15.8 v14.15 latest v141 tools) +# Microsoft.VisualStudio.Component.VC.Tools.x86.x64 (VC++ 2017 version 15.9 v14.16 latest v141 tools) # Microsoft.VisualStudio.Component.VC.Redist.14.Latest (Visual C++ 2017 Redistributable Update) # Microsoft.VisualStudio.Component.VC.Tools.ARM (Visual C++ compilers and libraries for ARM) # Microsoft.VisualStudio.Component.VC.Tools.ARM64 (Visual C++ compilers and libraries for ARM64) @@ -71,6 +41,7 @@ $installer = "http://ci-files01-hki.ci.local/input/windows/vs_professional__1312 # Microsoft.VisualStudio.Component.Graphics.Win81 (Graphics Tools Windows 8.1 SDK) # Microsoft.VisualStudio.Component.TypeScript.2.3 (TypeScript 2.3 SDK) # Microsoft.VisualStudio.Component.TypeScript.3.0 (TypeScript 3.0 SDK) +# Microsoft.VisualStudio.Component.TypeScript.3.0 (TypeScript 3.1 SDK) # Microsoft.VisualStudio.Component.VC.ATL (Visual C++ ATL for x86 and x64) # Microsoft.VisualStudio.Component.Windows10SDK.10240 (Windows 10 SDK (10.0.10240.0)) # Microsoft.VisualStudio.Component.Windows10SDK.10586 (Windows 10 SDK (10.0.10586.0)) @@ -85,4 +56,6 @@ $installer = "http://ci-files01-hki.ci.local/input/windows/vs_professional__1312 # Microsoft.VisualStudio.Component.Windows10SDK.17134 (Windows 10 SDK (10.0.17134.0)) # Microsoft.VisualStudio.Component.Windows10SDK.17763 (Windows 10 SDK (10.0.17763.0)) +# NOTE! Work loads were added during installation! + echo "Visual Studio = $version version version_number" >> ~\versions.txt diff --git a/coin/pre-provisioning/qtci-windows-10-x86/msvc2017_build_tools.txt b/coin/pre-provisioning/qtci-windows-10-x86/msvc2017_build_tools.txt new file mode 100644 index 00000000..a7907f59 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86/msvc2017_build_tools.txt @@ -0,0 +1,10 @@ +# Copyright (C) 2020 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only +. "$PSScriptRoot\..\common\helpers.ps1" + +# Install Visual Studio 2017 Build Tools +# Install both build tools: Visual C++ and Web development +# https://www.visualstudio.com/downloads/#build-tools-for-visual-studio-2017 + +$url_internal = https://www.visualstudio.com/downloads/#build-tools-for-visual-studio-2017 +$url_cache = "http://ci-files01-hki.ci.qt.io/input/windows/mu_build_tools_for_visual_studio_2017_version_15.0_x86_x64_10254482.exe" diff --git a/coin/pre-provisioning/qtci-windows-10-x86/msvc2019.txt b/coin/pre-provisioning/qtci-windows-10-x86/msvc2019.txt new file mode 100644 index 00000000..9d612c9a --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86/msvc2019.txt @@ -0,0 +1,69 @@ +# Visual Studio $version version $version_number was installed manually using $installer. + +$version = "2019" +# Current version was manually upgraded from the installer +$version_number = "16.4.6" +$installer = "http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__505064367.1547034421.exe" + +MSVC 2019 build tools (default installation, no additional selections). + * Install after MSVC2019 is installed! + * Installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_buildtools__251503345.1575372514.exe" + * Version: 16.4.6 + +Installed MSVC-2019 Components: + +.NET Framework 4.5 targeting pack +.NET Framework 4.5.1 targeting pack +.NET Framework 4.5.2 targeting pack +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.7.2 SDK +.NET Framework 4.7.2 targeting pack +.NET Framework 4.8 SDK +.NET Framework 4.8 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data typer for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL ADAL runtime +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2016 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2019 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v142 build tools /14.24) +MSBuild +MSVC v142 - VS 2019 C++ ARM build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM build tools (v14.24) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.24) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.20) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.24) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v142 build tools (x86 & x64) +TypeScript 3.7 SDK +Windows 10 SDK (10.0.16299.0) +Windows 10 SDK (10.0.17134.0) +Windows 10 SDK (10.0.17763.0) +Windows 10 SDK (10.0.18362.0) + +# NOTE! Work loads were added during installation! + diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-windows-10-x86_64/README_MANUAL_INSTALLATIONS index 2d85d8f8..0b0c89fd 100644 --- a/coin/pre-provisioning/qtci-windows-10-x86_64/README_MANUAL_INSTALLATIONS +++ b/coin/pre-provisioning/qtci-windows-10-x86_64/README_MANUAL_INSTALLATIONS @@ -1,11 +1,52 @@ # List about manual pre-installations to Tier1 image: -Vmware tools: installed -Resolution: 1280 X 800 -Coin setup (installed boostrap agent, disabled fast boot, disabled firewall (both public and private), disabled UAC, enabled autologin) -Remote Desktop Connection: enabled -Timezone: set to UTC -Administrator tools - services - Windows search: stop & disable -Power settings screen & slee: never -Turn windows features on or off -> Check the "SMB 1.0/CIFS File Sharing Support" +VM Options: +Boot options/Firmware: BIOS +Language to install: English UK +Time and currency format: English UK +Keyboard or input method: United Kingdom +location: finnish +Windows 10 Enterprise +Region: Finland +Keyboard layout: United Kingdom + +* Don't use online speech recognition +* Let Microsoft and apps use your location: no +* Find my devicer: no +* Send diagnostic data to Microsoft: Send required diagnostic data +* Imporve inking & typing: no +* Get tailored expreriences with diagnostic data: no +* Let apps use advertising ID: no + +* VMware tools (complete) installed +* Resolution set to 1280x800 +* Coin-setup: + - Installing Boostrap agent + - Disabling fast boot + - Disabling firewall + - Disabling UAC + - Enabling autologin + - Automatic login + - Disabling windows updates +* Microsoft Defender Antivirus turned off: Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Microsoft Defender Antivirus' + - Edit 'Turn off Microsoft Defender Antivirus' > 'Enabled' > 'Apply' + - NOTE! Without this step windows defender can't be disabled! +* Remote connections allowed: + - Enable Remote Desktop +* Background defrag disabled: 'Defragment And Optimize Drives' - 'change settings' - unchecked "run on a schedule" + - Run in terminal: 'schtasks /Delete /TN "Microsoft\Windows\Defrag\ScheduledDefrag"' +* Time zone: 'Co-ordinated Universal Time' +* Windows search disabled: 'Control Panel\System and Security\Administrative Tools\Services' - 'Windows search' - stop & disable +* Sysmain disabled: 'Control Panel\System and Security\Administrative Tools\Services' - 'SysMain' - stop & disable +* Power saver disabled: Open 'Power & sleep settings' + - set 'Screen' to 'never' + - set 'Sleep' to 'never' +* Turn windows features on or off -> Check the "SMB 1.0/CIFS File Sharing Support +* (Restart Windows) +* Google Chrome installed for RTA +* Virus & threat protection settings: + * Check that there's no active antivirus providers +* From 'Region Settings' + * Set Regional format: English (United States) +* Activate Windows diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/disable-clean-manager.ps1 b/coin/pre-provisioning/qtci-windows-10-x86_64/disable-clean-manager.ps1 new file mode 100644 index 00000000..45ce141f --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86_64/disable-clean-manager.ps1 @@ -0,0 +1,8 @@ +# This script will disable automatic disk cleanup + +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy`" /V 04 /T REG_dWORD /D 0 /F" + +# Maintenance task used by the system to launch a silent auto disk cleanup when running low on free disk space. +DisableSchedulerTask "DiskCleanup\SilentCleanup" diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/disable-defragment.ps1 b/coin/pre-provisioning/qtci-windows-10-x86_64/disable-defragment.ps1 index e76f0649..bb449e56 100644 --- a/coin/pre-provisioning/qtci-windows-10-x86_64/disable-defragment.ps1 +++ b/coin/pre-provisioning/qtci-windows-10-x86_64/disable-defragment.ps1 @@ -1,35 +1,5 @@ -############################################################################# -## -## Copyright (C) 2019 The Qt Company Ltd. -## Contact: http://www.qt.io/licensing/ -## -## This file is part of the provisioning scripts of the Qt Toolkit. -## -## $QT_BEGIN_LICENSE:LGPL21$ -## Commercial License Usage -## Licensees holding valid commercial Qt licenses may use this file in -## accordance with the commercial license agreement provided with the -## Software or, alternatively, in accordance with the terms contained in -## a written agreement between you and The Qt Company. For licensing terms -## and conditions see http://www.qt.io/terms-conditions. For further -## information use the contact form at http://www.qt.io/contact-us. -## -## GNU Lesser General Public License Usage -## Alternatively, this file may be used under the terms of the GNU Lesser -## General Public License version 2.1 or version 3 as published by the Free -## Software Foundation and appearing in the file LICENSE.LGPLv21 and -## LICENSE.LGPLv3 included in the packaging of this file. Please review the -## following information to ensure the GNU Lesser General Public License -## requirements will be met: https://www.gnu.org/licenses/lgpl.html and -## http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html. -## -## As a special exception, The Qt Company gives you certain additional -## rights. These rights are described in The Qt Company LGPL Exception -## version 1.1, included in the file LGPL_EXCEPTION.txt in this package. -## -## $QT_END_LICENSE$ -## -############################################################################# +# Copyright (C) 2019 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only # Windows 7 does not have Get-ScheduledTask and Unregister-ScheduledTask # thus needing its own version. diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/disable-ntp.ps1 b/coin/pre-provisioning/qtci-windows-10-x86_64/disable-ntp.ps1 index 757f0d18..22651763 100644 --- a/coin/pre-provisioning/qtci-windows-10-x86_64/disable-ntp.ps1 +++ b/coin/pre-provisioning/qtci-windows-10-x86_64/disable-ntp.ps1 @@ -1,4 +1,4 @@ -. "$PSScriptRoot\helpers.ps1" +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" # Disable the NTP from syncing Run-Executable "w32tm.exe" "/config /syncfromflags:NO" diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/disable-schedule-tasks.ps1 b/coin/pre-provisioning/qtci-windows-10-x86_64/disable-schedule-tasks.ps1 index 351f10c6..1febd88c 100644 --- a/coin/pre-provisioning/qtci-windows-10-x86_64/disable-schedule-tasks.ps1 +++ b/coin/pre-provisioning/qtci-windows-10-x86_64/disable-schedule-tasks.ps1 @@ -1,4 +1,4 @@ -. "$PSScriptRoot\helpers.ps1" +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" # This script will remove unneeded Tasks from Task Scheduler diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/disable-update-orchestrator.ps1 b/coin/pre-provisioning/qtci-windows-10-x86_64/disable-update-orchestrator.ps1 index 5ae8fb0d..1022c798 100644 --- a/coin/pre-provisioning/qtci-windows-10-x86_64/disable-update-orchestrator.ps1 +++ b/coin/pre-provisioning/qtci-windows-10-x86_64/disable-update-orchestrator.ps1 @@ -5,10 +5,8 @@ $path = "C:\Windows\System32\Tasks\Microsoft\Windows\$name" takeown /F $path /A /R icacls $path /grant Administrators:F /T -SCHTASKS /Change /TN "Microsoft\Windows\$name\Reboot" /DISABLE del "$path\Schedule Scan" del "$path\Schedule Scan Static Task" -del "$path\Backup Scan" del "$path\UpdateModelTask" del "$path\USO_UxBroker" diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/disable-windefender.ps1 b/coin/pre-provisioning/qtci-windows-10-x86_64/disable-windefender.ps1 index 02ed54da..17b30db0 100644 --- a/coin/pre-provisioning/qtci-windows-10-x86_64/disable-windefender.ps1 +++ b/coin/pre-provisioning/qtci-windows-10-x86_64/disable-windefender.ps1 @@ -1,56 +1,18 @@ -########################################################################### -## -## Copyright (C) 2019 The Qt Company Ltd. -## Contact: http://www.qt.io/licensing/ -## -## This file is part of the provisioning scripts of the Qt Toolkit. -## -## $QT_BEGIN_LICENSE:LGPL21$ -## Commercial License Usage -## Licensees holding valid commercial Qt licenses may use this file in -## accordance with the commercial license agreement provided with the -## Software or, alternatively, in accordance with the terms contained in -## a written agreement between you and The Qt Company. For licensing terms -## and conditions see http://www.qt.io/terms-conditions. For further -## information use the contact form at http://www.qt.io/contact-us. -## -## GNU Lesser General Public License Usage -## Alternatively, this file may be used under the terms of the GNU Lesser -## General Public License version 2.1 or version 3 as published by the Free -## Software Foundation and appearing in the file LICENSE.LGPLv21 and -## LICENSE.LGPLv3 included in the packaging of this file. Please review the -## following information to ensure the GNU Lesser General Public License -## requirements will be met: https://www.gnu.org/licenses/lgpl.html and -## http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html. -## -## As a special exception, The Qt Company gives you certain additional -## rights. These rights are described in The Qt Company LGPL Exception -## version 1.1, included in the file LGPL_EXCEPTION.txt in this package. -## -## $QT_END_LICENSE$ -## -############################################################################# +# Copyright (C) 2020 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only # Turning off win defender. # # If disabled manually, windows will automatically enable it after # some period of time. Disabling it speeds up the builds. +# NOTE! Windows Defender Antivirus needs to be turned off! +# Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Windows Defender Antivirus' +# Edit 'Turn off Windows Defender Antivirus' > 'Enabled' > 'Apply' -. "$PSScriptRoot\helpers.ps1" +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableAntiSpyware /T REG_dWORD /D 1 /F" - -# 'Windows Defender Cache Maintenance' - "Periodic maintenance task." -DisableSchedulerTask "Windows Defender\Windows Defender Cache Maintenance" - -# 'Windows Defender Cleanup' - "Periodic cleanup task." -DisableSchedulerTask "Windows Defender\Windows Defender Cleanup" - -# 'Windows Defender Scheduled Scan' - "Periodic scan task." -DisableSchedulerTask "Windows Defender\Windows Defender Scheduled Scan" - -# 'Windows Defender Verification' - "Periodic verification task." -DisableSchedulerTask "Windows Defender\Windows Defender Verification" +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableRoutinelyTakingAction /T REG_dWORD /D 1 /F" # Disable 'QueueReporting' - "Windows Error Reporting task to process queued reports." DisableSchedulerTask "Windows Error Reporting\QueueReporting" diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/disable-windows-updates.ps1 b/coin/pre-provisioning/qtci-windows-10-x86_64/disable-windows-updates.ps1 index 87414f03..62e19814 100644 --- a/coin/pre-provisioning/qtci-windows-10-x86_64/disable-windows-updates.ps1 +++ b/coin/pre-provisioning/qtci-windows-10-x86_64/disable-windows-updates.ps1 @@ -1,35 +1,5 @@ -############################################################################ -## -## Copyright (C) 2017 The Qt Company Ltd. -## Contact: http://www.qt.io/licensing/ -## -## This file is part of the provisioning scripts of the Qt Toolkit. -## -## $QT_BEGIN_LICENSE:LGPL21$ -## Commercial License Usage -## Licensees holding valid commercial Qt licenses may use this file in -## accordance with the commercial license agreement provided with the -## Software or, alternatively, in accordance with the terms contained in -## a written agreement between you and The Qt Company. For licensing terms -## and conditions see http://www.qt.io/terms-conditions. For further -## information use the contact form at http://www.qt.io/contact-us. -## -## GNU Lesser General Public License Usage -## Alternatively, this file may be used under the terms of the GNU Lesser -## General Public License version 2.1 or version 3 as published by the Free -## Software Foundation and appearing in the file LICENSE.LGPLv21 and -## LICENSE.LGPLv3 included in the packaging of this file. Please review the -## following information to ensure the GNU Lesser General Public License -## requirements will be met: https://www.gnu.org/licenses/lgpl.html and -## http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html. -## -## As a special exception, The Qt Company gives you certain additional -## rights. These rights are described in The Qt Company LGPL Exception -## version 1.1, included in the file LGPL_EXCEPTION.txt in this package. -## -## $QT_END_LICENSE$ -## -############################################################################# +# Copyright (C) 2017 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only # This script disables the automatic Windows updates diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/msvc2015_update.ps1 b/coin/pre-provisioning/qtci-windows-10-x86_64/msvc2015_update.ps1 deleted file mode 100644 index 00f8af72..00000000 --- a/coin/pre-provisioning/qtci-windows-10-x86_64/msvc2015_update.ps1 +++ /dev/null @@ -1,51 +0,0 @@ -############################################################################# -## -## Copyright (C) 2018 The Qt Company Ltd. -## Contact: http://www.qt.io/licensing/ -## -## This file is part of the provisioning scripts of the Qt Toolkit. -## -## $QT_BEGIN_LICENSE:LGPL21$ -## Commercial License Usage -## Licensees holding valid commercial Qt licenses may use this file in -## accordance with the commercial license agreement provided with the -## Software or, alternatively, in accordance with the terms contained in -## a written agreement between you and The Qt Company. For licensing terms -## and conditions see http://www.qt.io/terms-conditions. For further -## information use the contact form at http://www.qt.io/contact-us. -## -## GNU Lesser General Public License Usage -## Alternatively, this file may be used under the terms of the GNU Lesser -## General Public License version 2.1 or version 3 as published by the Free -## Software Foundation and appearing in the file LICENSE.LGPLv21 and -## LICENSE.LGPLv3 included in the packaging of this file. Please review the -## following information to ensure the GNU Lesser General Public License -## requirements will be met: https://www.gnu.org/licenses/lgpl.html and -## http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html. -## -## As a special exception, The Qt Company gives you certain additional -## rights. These rights are described in The Qt Company LGPL Exception -## version 1.1, included in the file LGPL_EXCEPTION.txt in this package. -## -## $QT_END_LICENSE$ -## -############################################################################# - -# Visual Studio $version was installed manually using $installer. -$version = "2015 update 3" -$version_number ="14.0.25431.01" -$installer = "http://ci-files01-hki.intra.qt.io/input/windows/en_visual_studio_professional_2015_with_update_3_x86_x64_web_installer_8922978" - -# default plus following components were selected: -# * Visual C++ -# * Universal Windows App Development Tools -# - Tools (1.4.1) and Windows SDK (10.0.14393) -# - Windows 10 SDK (10.0.10586) -# - Windows 10 SDK (10.0.10240) -# * Common Tools -# -Visual Studio Extensibility Tools Update 3 - -# NOTE! Windows SDK 10.0.14393 installation failed through visual studio installer so it was installed using $sdk_installer -$sdk_installer = "http://ci-files01-hki.intra.qt.io/input/windows/sdksetup.exe" - -echo "Visual Studio = $version version $version_number" >> ~\versions.txt diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/msvc2015_update.txt b/coin/pre-provisioning/qtci-windows-10-x86_64/msvc2015_update.txt new file mode 100644 index 00000000..8ee31abf --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86_64/msvc2015_update.txt @@ -0,0 +1,18 @@ +# Visual Studio $version was installed manually using $installer. +$version = "2015 update 3" +$version_number ="14.0.25420.1" +$installer = "en_visual_studio_professional_2015_with_update_3_x86_x64_web_installer_8922978.exe" + +# default plus following components were selected: +# * Programming Languages +# * Visual C++ +# - Common Tools for Visual C++ 2015 +# * Universal Windows App Development Tools +# - Tools (1.4.1) and Windows SDK (10.0.14393) +# - Windows 10 SDK (10.0.10586) +# - Windows 10 SDK (10.0.10240) +# * Common Tools +# -Visual Studio Extensibility Tools Update 3 + +# NOTE! Windows SDK 10.0.14393 installation failed through visual studio installer so it was installed using $sdk_installer +$sdk_installer = "http://ci-files01-hki.ci.qt.io/input/windows/sdksetup.exe" diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/msvc2019.ps1 b/coin/pre-provisioning/qtci-windows-10-x86_64/msvc2019.ps1 deleted file mode 100644 index 77242a21..00000000 --- a/coin/pre-provisioning/qtci-windows-10-x86_64/msvc2019.ps1 +++ /dev/null @@ -1,91 +0,0 @@ -############################################################################ -## -## Copyright (C) 2019 The Qt Company Ltd. -## Contact: http://www.qt.io/licensing/ -## -## This file is part of the provisioning scripts of the Qt Toolkit. -## -## $QT_BEGIN_LICENSE:LGPL21$ -## Commercial License Usage -## Licensees holding valid commercial Qt licenses may use this file in -## accordance with the commercial license agreement provided with the -## Software or, alternatively, in accordance with the terms contained in -## a written agreement between you and The Qt Company. For licensing terms -## and conditions see http://www.qt.io/terms-conditions. For further -## information use the contact form at http://www.qt.io/contact-us. -## -## GNU Lesser General Public License Usage -## Alternatively, this file may be used under the terms of the GNU Lesser -## General Public License version 2.1 or version 3 as published by the Free -## Software Foundation and appearing in the file LICENSE.LGPLv21 and -## LICENSE.LGPLv3 included in the packaging of this file. Please review the -## following information to ensure the GNU Lesser General Public License -## requirements will be met: https://www.gnu.org/licenses/lgpl.html and -## http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html. -## -## As a special exception, The Qt Company gives you certain additional -## rights. These rights are described in The Qt Company LGPL Exception -## version 1.1, included in the file LGPL_EXCEPTION.txt in this package. -## -## $QT_END_LICENSE$ -## -############################################################################# - -# Visual Studio $version version $version_number was installed manually using $installer. - -$version = "2019" -# Current version was manually upgraded from the installer -$version_number = "16.3.2" -$installer = "http://ci-files01-hki.ci.local/input/windows/vs_professional__505064367.1547034421.exe" - -.NET Framework 4.5 targeting pack -.NET Framework 4.5.1 targeting pack -.NET Framework 4.5.2 targeting pack -.NET Framework 4.6.1 SDK -.NET Framework 4.6.1 targeting pack -.NET Framework 4.6.2 SDK -.NET Framework 4.6.2 targeting pack -.NET Framework 4.7.2 SDK -.NET Framework 4.7.2 targeting pack -.NET Native -.NET Portable Library targeting pack -CLR data typer for SQL Sever -Connectivity and publishing tools -Data sources for SQL Server support -SQL ADAL runtime -SQL Server Command Linne Utilities -SQL Server Data Tools -SQL Server Express 2016 LocalDB -SQL Server ODBC Driver -ClickOnce Publishing -Developer Analytics tools -NuGet package manager -Text Template Transformation -C# and Visual Basic Roslyn compilers -C++ 2019 Redistributable Update -C++ Cmake tools for Windows -C++/CLI support for v142 build tools -MSBuild -MSVC v142 - VS 2019 C++ ARM build tools (v14.20) -MSVC v142 - VS 2019 C++ ARM64 build tools (v14.20) -MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.20) -.NET profiling tools -C++ profiling tools -JavaScript diagnostics -Just-In-Time debugger -C# and Visual Basic -C++ core features -JavaSript and TypeScript language support -Razor Language Services -Graphics debugger and GPU profiler for DirectX -Image and 3D model editors -C++ ATL for v142 build tools (x86 & x64) -TypeScript 3.3 SDK -Windows 10 SDK (10.0.16299.0) -Windows 10 SDK (10.0.17134.0) -Windows 10 SDK (10.0.17763.0) -Windows 10 SDK (10.0.18362.0) - -# NOTE! Work loads were added during installation! - -echo "Visual Studio = $version version version_number" >> ~\versions.txt diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/msvc2019.txt b/coin/pre-provisioning/qtci-windows-10-x86_64/msvc2019.txt new file mode 100644 index 00000000..b9713a49 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86_64/msvc2019.txt @@ -0,0 +1,70 @@ +# Visual Studio $version version $version_number was installed manually using $installer. + +$version = "2019" +# Current version was manually upgraded from the installer +$version_number = "16.8.1" +$installer = "http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__505064367.1547034421.exe" + +MSVC 2019 build tools (default installation, no additional selections). + * Install after MSVC2019 is installed! + * Installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_buildtools__251503345.1575372514.exe" + * Version: 16.8.1 + +Installed MSVC-2019 Components: + +.NET Framework 4.5 targeting pack +.NET Framework 4.5.1 targeting pack +.NET Framework 4.5.2 targeting pack +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.7.2 SDK +.NET Framework 4.7.2 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data typer for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL ADAL runtime +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2016 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2019 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v142 build tools /14.28) +MSBuild +MSVC v142 - VS 2019 C++ ARM build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM build tools (v14.28) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.26) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.20) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.26) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v142 build tools (x86 & x64) +TypeScript 4.0 SDK +Windows 10 SDK (10.0.16299.0) +Windows 10 SDK (10.0.17134.0) +Windows 10 SDK (10.0.17763.0) +Windows 10 SDK (10.0.18362.0) +Windows 10 SDK (10.0.19041.0) + +# NOTE! Work loads were added during installation! + +* Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/msvc_2015_update3_patch.ps1 b/coin/pre-provisioning/qtci-windows-10-x86_64/msvc_2015_update3_patch.ps1 deleted file mode 100644 index bfbb397a..00000000 --- a/coin/pre-provisioning/qtci-windows-10-x86_64/msvc_2015_update3_patch.ps1 +++ /dev/null @@ -1,67 +0,0 @@ -############################################################################# -## -## Copyright (C) 2017 The Qt Company Ltd. -## Contact: http://www.qt.io/licensing/ -## -## This file is part of the provisioning scripts of the Qt Toolkit. -## -## $QT_BEGIN_LICENSE:LGPL21$ -## Commercial License Usage -## Licensees holding valid commercial Qt licenses may use this file in -## accordance with the commercial license agreement provided with the -## Software or, alternatively, in accordance with the terms contained in -## a written agreement between you and The Qt Company. For licensing terms -## and conditions see http://www.qt.io/terms-conditions. For further -## information use the contact form at http://www.qt.io/contact-us. -## -## GNU Lesser General Public License Usage -## Alternatively, this file may be used under the terms of the GNU Lesser -## General Public License version 2.1 or version 3 as published by the Free -## Software Foundation and appearing in the file LICENSE.LGPLv21 and -## LICENSE.LGPLv3 included in the packaging of this file. Please review the -## following information to ensure the GNU Lesser General Public License -## requirements will be met: https://www.gnu.org/licenses/lgpl.html and -## http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html. -## -## As a special exception, The Qt Company gives you certain additional -## rights. These rights are described in The Qt Company LGPL Exception -## version 1.1, included in the file LGPL_EXCEPTION.txt in this package. -## -## $QT_END_LICENSE$ -## -############################################################################# -. "$PSScriptRoot\helpers.ps1" - -# Install Cumulative Servicing Release Visual Studio 2015 update 3 -# Original download page: https://msdn.microsoft.com/en-us/library/mt752379.aspx - -$version = "2015 update3 (KB3165756)" -$packagePath = "C:\Windows\Temp" -$package = $packagePath + "\vs14-kb3165756.exe" -$url_cache = "http://ci-files01-hki.intra.qt.io/input/windows/vs14-kb3165756.exe" -$url_official = "http://go.microsoft.com/fwlink/?LinkID=816878" -$sha1 = "6a21d9b291ca75d44baad95e278fdc0d05d84c02" -$preparedPackage = "\\ci-files01-hki.intra.qt.io\provisioning\windows\vs14-kb3165756-update" - -if (Test-Path $preparedPackage) { - # The prepared package contains updated packages so that not everything has to be downloaded - Write-Host "Using prepared package" - Copy-Item -Recurse $preparedPackage $packagePath - # Remove the whole downloaded folder - $toRemove = $packagePath + "\vs14-kb3165756-update" - $executable = "$toRemove\vs14-kb3165756.exe" -} else { - Write-Host "Fetching patch for Visual Studio $version..." - Download $url_official $url_cache $package - $executable = $package - # Remove the downloaded executable - $toRemove = $executable -} - -Verify-Checksum $executable $sha1 -Write-Host "Installing patch for Visual Studio $version..." -Run-Executable $executable "/norestart /passive" - -Remove-Item -Force -Recurse -Path $toRemove - -Write-Output "Visual Studio = $version" >> ~\versions.txt diff --git a/coin/pre-provisioning/qtci-windows-10-x86_64/virtio.txt b/coin/pre-provisioning/qtci-windows-10-x86_64/virtio.txt new file mode 100644 index 00000000..e6ec797d --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10-x86_64/virtio.txt @@ -0,0 +1,31 @@ +Install virtio + +Our vanilla images are pre-installed in VMware where we have networking available. In KVM we can +use the VMware installed vmxnet3 NIC to fetch VirtIO drivers, install them, and only then switch +to using the VirtIO NIC in KVM. + +NOTE! Install these Virtio drivers in Opennebula when using Windows 10 20H2 +* Download https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/archive-virtio/virtio-win-0.1.185-2/virtio-win-0.1.185.iso + cache: http://ci-files01-hki.ci.qt.io/input/windows/virtio/virtio-win-0.1.185.iso +* Mount virtio-win-0.1.185.iso by double clicking it. +* Right click 'E:\NetKVM\w10\amd64\netkvm.inf' and select Install +* Right click 'E:\Balloon\w10\amd64\balloon.inf' and select Install +* Right click 'E:\vioscsi\w10\amd64\vioscsi.inf' and select Install +* Right click 'E:\vioserial\w10\amd64\vioser.inf' and select Install +* Navigate to E:\guest-agent directory and double click qemu-ga-x86_64 + +Because vioscsi does not install the entries in windows registry before we actually +have a VirtIO device installed, and we can't boot with a VirtIO device before +the driver is installed, we have to blindly install the registry entries: + +* Download https://bugreports.qt.io/secure/attachment/95685/95685_vioscsi.reg + cache: http://ci-files01-hki.ci.qt.io/input/windows/virtio/vioscsi.reg + +However, we've seen that the Owner in the registry can be wrong. This entry +sets it to oem11.inf, but we've seen it be oem10.inf in one case and it has +to be corrected so that it will boot from the VirtIO driver. This was found out +by having 2 devices installed simultaneously and having the drivers install +properly into the registry. + +* Eject the mounting +* Remove downloaded virtio-win-0.1.171.iso diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/01-enable-dotnet-framework.ps1 b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/01-enable-dotnet-framework.ps1 new file mode 100644 index 00000000..e7f4c248 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/01-enable-dotnet-framework.ps1 @@ -0,0 +1,22 @@ +# The DirectX SDK installer requires .Net framework 3.5 which isn't installed +# by default + +$netFeature = "NetFx3" +try { + $netFeatureState = (Get-WindowsOptionalFeature -Online -FeatureName "$netFeature").State + if ($netFeatureState -eq "Enabled") { + Write-Host ".Net Framework is already installed" + exit 0 + } +} catch { + Write-Host "Could not find .Net Framework Windows feature." + exit 1 +} + +Write-Host "Installing .Net Framework client" +try { + Enable-WindowsOptionalFeature -Online -FeatureName "$netFeature" -All -NoRestart +} catch { + Write-Host "Could not install .Net framework" + exit 1 +} diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..4251072d --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,53 @@ +# List about manual pre-installations to Tier1 image: + +VM Options: +Boot options/Firmware: BIOS + +Language to install: English UK +Time and currency format: English UK +Keyboard or input method: United Kingdom +location: finnish +Windows 10 Enterprise +Region: Finland +Keyboard layout: United Kingdom + +* Let Microsoft and apps use your location: no +* Find my devicer: no +* Send diagnostic data to Microsoft: Send required diagnostic data +* Imporve inking & typing: no +* Get tailored expreriences with diagnostic data: no +* Let apps use advertising ID: no + +* VMware tools (complete) installed +* Resolution set to 1280x800 +* Coin-setup: + - Installing Boostrap agent + - Disabling fast boot + - Disabling firewall + - Disabling UAC + - Enabling autologin + - Automatic login + - Disabling windows updates +* Microsoft Defender Antivirus turned off: Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Microsoft Defender Antivirus' + - Edit 'Turn off Microsoft Defender Antivirus' > 'Enabled' > 'Apply' + - NOTE! Without this step windows defender can't be disabled! +* Remote connections allowed: + - Enable Remote Desktop +* Background defrag disabled: 'Defragment And Optimize Drives' - 'change settings' - unchecked "run on a schedule" + - Run in terminal: 'schtasks /Delete /TN "Microsoft\Windows\Defrag\ScheduledDefrag"' +* Time zone: 'Co-ordinated Universal Time' +* Windows search disabled: 'Control Panel\System and Security\Administrative Tools\Services' - 'Windows search' - stop & disable +* Sysmain disabled: 'Control Panel\System and Security\Administrative Tools\Services' - 'SysMain' - stop & disable +* Power saver disabled: Open 'Power & sleep settings' + - set 'Screen' to 'never' + - set 'Sleep' to 'never' +* Turn windows features on or off -> Check the "SMB 1.0/CIFS File Sharing Support +* (Restart Windows) +* Google Chrome installed for RTA +* Virus & threat protection settings: + * Check that there's no active antivirus providers +* From 'Region Settings' + * Set Regional format: English (United States) +* Defragment and Optimize Drives + * Change settings - Uncheck "Run on schedule" +* Activate Windows diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-clean-manager.ps1 b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-clean-manager.ps1 new file mode 100644 index 00000000..45ce141f --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-clean-manager.ps1 @@ -0,0 +1,8 @@ +# This script will disable automatic disk cleanup + +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy`" /V 04 /T REG_dWORD /D 0 /F" + +# Maintenance task used by the system to launch a silent auto disk cleanup when running low on free disk space. +DisableSchedulerTask "DiskCleanup\SilentCleanup" diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-defragment.ps1 b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-defragment.ps1 new file mode 100644 index 00000000..bb449e56 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-defragment.ps1 @@ -0,0 +1,42 @@ +# Copyright (C) 2019 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# Windows 7 does not have Get-ScheduledTask and Unregister-ScheduledTask +# thus needing its own version. +Write-Host "Disabling defragmentation" +$version = Get-CimInstance Win32_OperatingSystem | Select-Object -ExpandProperty Caption +if ($version -like '*Windows 7*'){ + $pi = New-Object System.Diagnostics.ProcessStartInfo + $pi.FileName = "C:\Windows\System32\schtasks.exe" + $pi.RedirectStandardError = $true + $pi.UseShellExecute = $false + $pi.Arguments = "/Delete /TN `"\Microsoft\Windows\Defrag\ScheduledDefrag`" /F" + $prog = New-Object System.Diagnostics.Process + $prog.StartInfo = $pi + $prog.Start() | Out-Null + $err = $prog.StandardError.ReadToEnd() + $prog.WaitForExit() + if ($prog.ExitCode -eq 0){ + Write-Host "Scheduled defragmentation removed" + } else { + if ($err -like '*cannot find the file*'){ + Write-Host "No scheduled defragmentation task found" + exit 0 + } else { + Write-Host "Error while deleting scheduled defragmentation task: $err" + } + } +} +else { + try { + $state = (Get-ScheduledTask -ErrorAction Stop -TaskName "ScheduledDefrag").State + Write-Host "Scheduled defragmentation task found in state: $state" + } + catch { + Write-Host "No scheduled defragmentation task found" + exit 0 + } + Write-Host "Unregistering scheduled defragmentation task" + Unregister-ScheduledTask -ErrorAction Stop -Confirm:$false -TaskName ScheduledDefrag + Write-Host "Scheduled Defragmentation task was cancelled" +} diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-ntp.ps1 b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-ntp.ps1 new file mode 100644 index 00000000..22651763 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-ntp.ps1 @@ -0,0 +1,4 @@ +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +# Disable the NTP from syncing +Run-Executable "w32tm.exe" "/config /syncfromflags:NO" diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-schedule-tasks.ps1 b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-schedule-tasks.ps1 new file mode 100644 index 00000000..666ec81e --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-schedule-tasks.ps1 @@ -0,0 +1,86 @@ +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +# This script will remove unneeded Tasks from Task Scheduler + +# Application Experience 'Microsoft Compatibility Appraiser' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Application Experience\Microsoft Compatibility Appraiser" + +# Application Experience 'ProgramDataUpdater' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program" +DisableSchedulerTask "Application Experience\ProgramDataUpdater" + +# Autochk 'Proxy' - "This task collects and uploads autochk SQM data if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Autochk\Proxy" + +# Chkdsk 'ProactiveScan' - "NTFS Volume Health Scan" +DisableSchedulerTask "Chkdsk\ProactiveScan" + +# Chkdsk 'SyspartRepair' +DeleteSchedulerTask "Chkdsk\SyspartRepair" + +# Customer Experience Improvement Program 'Consolidator' - "If the user has consented to participate in the Windows Customer Experience Improvement Program, this job collects and sends usage data to Microsoft." +DisableSchedulerTask "Customer Experience Improvement Program\Consolidator" + +# Customer Experience Improvement Program 'sbCeip' - "The USB CEIP (Customer Experience Improvement Program) task collects Universal Serial Bus related statistics and information about your machine and sends it to the Windows Device Connectivity engineering group at Microsoft. The information received is used to help improve the reliability, stability, and overall functionality of USB in Windows. If the user has not consented to participate in Windows CEIP, this task does not do anything." +DisableSchedulerTask "Customer Experience Improvement Program\UsbCeip" + +# Device Information 'Device' +DisableSchedulerTask "Device Information\Device" + +# Diagnosis 'Scheduled' - "The Windows Scheduled Maintenance Task performs periodic maintenance of the computer system by fixing problems automatically or reporting them through Security and Maintenance." +DisableSchedulerTask "Diagnosis\Scheduled" + +# DiskDiagnostic 'Microsoft-Windows-DiskDiagnosticDataCollector' - "The Windows Disk Diagnostic reports general disk and system information to Microsoft for users participating in the Customer Experience Program." +DisableSchedulerTask "DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" + +# ExploitGuard 'ExploitGuard MDM policy Refresh' - "Task for applying changes to the machine's Exploit Protection settings." +DisableSchedulerTask "ExploitGuard\ExploitGuard MDM policy Refresh" + +# Feedback/Siuf 'DmClient' +DisableSchedulerTask "Feedback\Siuf\DmClient" + +# Feedback/Siuf 'DmClient'OnScenarioDownload' +DisableSchedulerTask "Feedback\Siuf\DmClientOnScenarioDownload" + +# File Classification Infrastructure 'Property Definition Sync' +DisableSchedulerTask "File Classification Infrastructure\Property Definition Sync" + +# InstallService 'ScanForUpdates' +DisableSchedulerTask "InstallService\ScanForUpdates" + +# InstallService 'ScanForUpdatesAsUser' +DisableSchedulerTask "InstallService\ScanForUpdatesAsUser" + +# LanguageComponentsInstaller 'Installation' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\Installation" + +# LanguageComponentsInstaller 'ReconcileLanguageResources' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\ReconcileLanguageResources" + +# PI 'Secure-Boot-Update' - "This task updates the Secure Boot variables." +DisableSchedulerTask "PI\Secure-Boot-Update" + +# PI 'Sqm-Tasks' - "This task gathers information about the Trusted Platform Module (TPM), Secure Boot, and Measured Boot." +DisableSchedulerTask "PI\Sqm-Tasks" + +# Power Efficiency Diagnotics 'AnalyzeSystem' - "This task analyzes the system looking for conditions that may cause high energy use." +DisableSchedulerTask "PushToInstall\Registration" + +# Servicing 'StartComponentCleanup' +DisableSchedulerTask "Servicing\StartComponentCleanup" + +# SoftwareProtectionPlatform 'SvcRestartTaskNetwork' - "This task restarts the Software Protection Platform service when a new network is detected" +DisableSchedulerTask "SoftwareProtectionPlatform\SvcRestartTaskNetwork" + +# Ones below can't be found from Windows 10 21H1 + +# SettingSync 'BackgroundUploadTask' +# DeleteSchedulerTask "SettingSync\BackgroundUploadTask" + +# SoftwareProtectionPlatform 'SvcRestartTask' - "This task restarts the Software Protection Platform service at the specified time" +# DeleteSchedulerTask "SoftwareProtectionPlatform\SvcRestartTask" + +# SoftwareProtectionPlatform 'SvcRestartTaskLogon' - "This task restarts the Software Protection Platform service at the specified time" +# DisableSchedulerTask "SoftwareProtectionPlatform\SvcRestartTaskLogon" + +# UNP 'RunUpdateNotificationMgr' +# DeleteSchedulerTask "UNP\RunUpdateNotificationMgr" diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-update-orchestrator.ps1 b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-update-orchestrator.ps1 new file mode 100644 index 00000000..1022c798 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-update-orchestrator.ps1 @@ -0,0 +1,14 @@ +# Disable UpdateOrchestrator + +$name = "UpdateOrchestrator" +$path = "C:\Windows\System32\Tasks\Microsoft\Windows\$name" + +takeown /F $path /A /R +icacls $path /grant Administrators:F /T +del "$path\Schedule Scan" +del "$path\Schedule Scan Static Task" +del "$path\UpdateModelTask" +del "$path\USO_UxBroker" + +# Disable Update orchestrator service +reg.exe ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsoSvc" /V Start /T REG_dWORD /D 4 /F diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-windefender.ps1 b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-windefender.ps1 new file mode 100644 index 00000000..17b30db0 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-windefender.ps1 @@ -0,0 +1,21 @@ +# Copyright (C) 2020 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# Turning off win defender. +# +# If disabled manually, windows will automatically enable it after +# some period of time. Disabling it speeds up the builds. +# NOTE! Windows Defender Antivirus needs to be turned off! +# Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Windows Defender Antivirus' +# Edit 'Turn off Windows Defender Antivirus' > 'Enabled' > 'Apply' + +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableAntiSpyware /T REG_dWORD /D 1 /F" +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableRoutinelyTakingAction /T REG_dWORD /D 1 /F" + +# Disable 'QueueReporting' - "Windows Error Reporting task to process queued reports." +DisableSchedulerTask "Windows Error Reporting\QueueReporting" + +# Disable WindowsUpdate from Task Scheduler +DisableSchedulerTask "WindowsUpdate\Scheduled Start" diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-windows-file-protector.ps1 b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-windows-file-protector.ps1 new file mode 100644 index 00000000..f1d09fb5 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-windows-file-protector.ps1 @@ -0,0 +1,4 @@ +# Disable Windows File Protection +# Windows File Protection feature in Microsoft Windows prevents programs from replacing critical Windows system files. + +reg.exe ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /V SFCDisable /T REG_dWORD /D 0xffffff9d /F diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-windows-update-medic.ps1 b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-windows-update-medic.ps1 new file mode 100644 index 00000000..e8210ea3 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-windows-update-medic.ps1 @@ -0,0 +1,25 @@ +# Windows Update Medic Service (WaaSMedicSvc)'PerformRemediation' helps recover update-related services to the supported configuration. +# WaasMedicSvc keeps re-starting Windows Update, even if it disabled manually. +# Even Admin user don't have privileged to disable PerformRemediation from Task Scheduler which means that WaaSMedicSvc.dll need's to be removed from the system + +$limit = (Get-Date).AddMinutes(20) +$path = "C:\Windows\System32\WaaSMedicAgent.exe" + +DO { + takeown /F $path + icacls $path /grant Administrators:f + Write-host "Deleting $path" + + Try { + del $path + } + Catch [System.UnauthorizedAccessException] { + Write-host "Access to the path '$path' is denied." + Continue + } + + if ((Get-Date) -gt $limit) { + exit 1 + } + +}while (Test-Path -Path "$path") diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-windows-updates.ps1 b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-windows-updates.ps1 new file mode 100644 index 00000000..62e19814 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/disable-windows-updates.ps1 @@ -0,0 +1,24 @@ +# Copyright (C) 2017 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# This script disables the automatic Windows updates + +$service = get-service wuauserv +if (-not $service) { + Write-Host "Windows Update service not found." + exit 0 +} + +if ($service.Status -eq "Stopped") { + Write-Host "Windows Update service already stopped." +} else { + Write-Host "Stopping Windows Update service." + Stop-Service -Name "wuauserv" -Force +} + +$startup = Get-WmiObject Win32_Service | Where-Object {$_.Name -eq "wuauserv"} | Select -ExpandProperty "StartMode" +if ($startup -ne "Disabled") { + set-service wuauserv -startup disabled +} else { + Write-Host "Windows Update service startup already disabled." +} diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/msvc2015_update.txt b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/msvc2015_update.txt new file mode 100644 index 00000000..5a730029 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/msvc2015_update.txt @@ -0,0 +1,15 @@ +### Visual Studio 2015 ### +Visual Studio 2015 version 14.0.25420.1 Update 3 was installed manually using ISO-image: http://ci-files01-hki.ci.qt.io/input/windows/en_visual_studio_professional_2015_with_update_3_x86_x64_dvd_8923272.iso +(Mount the ISO-image by double clicking it and run 'vs_professional.exe') + +default plus following components were selected: +* Programming Languages + * Visual C++ + - Common Tools for Visual C++ 2015 +* Universal Windows App Development Tools + - Tools (1.4.1) and Windows SDK (10.0.14393) + - Windows 10 SDK (10.0.10586) + - Windows 10 SDK (10.0.10240) +* Common Tools + -Visual Studio Extensibility Tools Update 3 + diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/msvc2019.txt b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/msvc2019.txt new file mode 100644 index 00000000..107620c4 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/msvc2019.txt @@ -0,0 +1,76 @@ +### Visual Studio 2019 ### +Visual Studio 2019 version 16.11.2 was installed manually using installer: http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__505064367.1547034421.exe + +Installed MSVC-2019 Components: + +.NET Framework 4.5 targeting pack +.NET Framework 4.5.1 targeting pack +.NET Framework 4.5.2 targeting pack +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.8 SDK +.NET Framework 4.8 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data typer for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL ADAL runtime +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2016 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2019 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v142 build tools (14.29-16.10) +MSBuild +MSVC v142 - VS 2019 C++ ARM build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ ARM64 build tools (Latest) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.20) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ x64/x86 build tools (Latest) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v142 build tools (ARM) +C++ ATL for latest v142 build tools (ARM64) +C++ ATL for latest v142 build tools (x86 & x64) +TypeScript 4.3 SDK +Windows 10 SDK (10.0.16299.0) +Windows 10 SDK (10.0.17134.0) +Windows 10 SDK (10.0.17763.0) +Windows 10 SDK (10.0.18362.0) +Windows 10 SDK (10.0.19041.0) +Windows 10 SDK (10.0.20348.0) + +# NOTE! Work loads were added during installation! + +############################################################ +### Visual Studio 2019 build tools ### + +Visual studio 2019 build tools version 16.11.2 was installed manually using installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_buildtools__251503345.1575372514.exe" + * Only default installation, no additional selections + +############################################################ +### Debugging tools ### + +* Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' +############################################################ diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/msvc2020_preview.txt b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/msvc2020_preview.txt new file mode 100644 index 00000000..18570631 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/msvc2020_preview.txt @@ -0,0 +1,70 @@ +### Visual Studio 2022 Preview ### +Visual Studio 2022 version 17.0.0 preview 3.1 was installed manually using installer: http://ci-files01-hki.ci.qt.io/input/windows/vs_professional_2022_preview.exe + +Installed MSVC-2022 Components: + +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.8 SDK +.NET Framework 4.8 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data typer for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2017 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2022 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v143 build tools (14.30-17.0) +C++/CLI support for v143 build tools (Latest) +MSBuild +MSVC v143 - VS 2022 C++ ARM build tools (Latest) +MSVC v143 - VS 2022 C++ ARM build tools (v14.30-17.0) +MSVC v143 - VS 2022 C++ ARM64 build tools (Latest) +MSVC v143 - VS 2022 C++ ARM64 build tools (v14.30-17.0) +MSVC v143 - VS 2022 C++ x64/x86 build tools (Latest) +MSVC v143 - VS 2022 C++ x64/x86 build tools (v14.30-17.0) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v143 build tools (ARM) +C++ ATL for latest v143 build tools (ARM64) +C++ ATL for latest v143 build tools (x86 & x64) +TypeScript Server +Windows 10 SDK (10.0.18362.0) +Windows 10 SDK (10.0.19041.0) +Windows 10 SDK (10.0.20348.0) +Windows Universal C Runtime + +# NOTE! Work loads were added during installation! + +############################################################ +### Visual Studio 2022 build tools ### + +Visual studio 2022 build tools version 17.0.0 preview 3.1 was installed manually using installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_buildtools__msvc2022_preview.exe" + * Only default installation, no additional selections + +############################################################ +### Debugging tools ### + +* Check that debugging tools are installed + * Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' +############################################################ diff --git a/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/virtio.txt b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/virtio.txt new file mode 100644 index 00000000..e6ec797d --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H1-x86_64/virtio.txt @@ -0,0 +1,31 @@ +Install virtio + +Our vanilla images are pre-installed in VMware where we have networking available. In KVM we can +use the VMware installed vmxnet3 NIC to fetch VirtIO drivers, install them, and only then switch +to using the VirtIO NIC in KVM. + +NOTE! Install these Virtio drivers in Opennebula when using Windows 10 20H2 +* Download https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/archive-virtio/virtio-win-0.1.185-2/virtio-win-0.1.185.iso + cache: http://ci-files01-hki.ci.qt.io/input/windows/virtio/virtio-win-0.1.185.iso +* Mount virtio-win-0.1.185.iso by double clicking it. +* Right click 'E:\NetKVM\w10\amd64\netkvm.inf' and select Install +* Right click 'E:\Balloon\w10\amd64\balloon.inf' and select Install +* Right click 'E:\vioscsi\w10\amd64\vioscsi.inf' and select Install +* Right click 'E:\vioserial\w10\amd64\vioser.inf' and select Install +* Navigate to E:\guest-agent directory and double click qemu-ga-x86_64 + +Because vioscsi does not install the entries in windows registry before we actually +have a VirtIO device installed, and we can't boot with a VirtIO device before +the driver is installed, we have to blindly install the registry entries: + +* Download https://bugreports.qt.io/secure/attachment/95685/95685_vioscsi.reg + cache: http://ci-files01-hki.ci.qt.io/input/windows/virtio/vioscsi.reg + +However, we've seen that the Owner in the registry can be wrong. This entry +sets it to oem11.inf, but we've seen it be oem10.inf in one case and it has +to be corrected so that it will boot from the VirtIO driver. This was found out +by having 2 devices installed simultaneously and having the drivers install +properly into the registry. + +* Eject the mounting +* Remove downloaded virtio-win-0.1.171.iso diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/01-enable-dotnet-framework.ps1 b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/01-enable-dotnet-framework.ps1 new file mode 100644 index 00000000..e7f4c248 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/01-enable-dotnet-framework.ps1 @@ -0,0 +1,22 @@ +# The DirectX SDK installer requires .Net framework 3.5 which isn't installed +# by default + +$netFeature = "NetFx3" +try { + $netFeatureState = (Get-WindowsOptionalFeature -Online -FeatureName "$netFeature").State + if ($netFeatureState -eq "Enabled") { + Write-Host ".Net Framework is already installed" + exit 0 + } +} catch { + Write-Host "Could not find .Net Framework Windows feature." + exit 1 +} + +Write-Host "Installing .Net Framework client" +try { + Enable-WindowsOptionalFeature -Online -FeatureName "$netFeature" -All -NoRestart +} catch { + Write-Host "Could not install .Net framework" + exit 1 +} diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..6867aa76 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,51 @@ +# List about manual pre-installations to Tier1 image: + +VM Options: +Boot options/Firmware: BIOS + +Language to install: English UK +Time and currency format: English UK +Keyboard or input method: United Kingdom +location: finnish +Windows 10 Enterprise +Region: Finland +Keyboard layout: United Kingdom + +* Let Microsoft and apps use your location: no +* Find my devicer: no +* Send diagnostic data to Microsoft: Send required diagnostic data +* Imporve inking & typing: no +* Get tailored expreriences with diagnostic data: no +* Let apps use advertising ID: no + +* Resolution set to 1280x800 +* Coin-setup: + - Installing Boostrap agent + - Disabling fast boot + - Disabling firewall + - Disabling UAC + - Enabling autologin + - Automatic login + - Disabling windows updates +* Microsoft Defender Antivirus turned off: Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Microsoft Defender Antivirus' + - Edit 'Turn off Microsoft Defender Antivirus' > 'Enabled' > 'Apply' + - NOTE! Without this step windows defender can't be disabled! +* Remote connections allowed: + - Enable Remote Desktop +* Background defrag disabled: 'Defragment And Optimize Drives' - 'change settings' - unchecked "run on a schedule" + - Run in terminal: 'schtasks /Delete /TN "Microsoft\Windows\Defrag\ScheduledDefrag"' +* Time zone: 'Co-ordinated Universal Time' +* Windows search disabled: 'Control Panel\System and Security\Administrative Tools\Services' - 'Windows search' - stop & disable +* Sysmain disabled: 'Control Panel\System and Security\Administrative Tools\Services' - 'SysMain' - stop & disable +* Power saver disabled: Open 'Power & sleep settings' + - Power & sleep - Never +* Turn windows features on or off -> Check the "SMB 1.0/CIFS File Sharing Support +* (Restart Windows) +* Google Chrome installed for RTA +* Virus & threat protection settings: + * Check that there's no active antivirus providers +* From 'Region Settings' + * Set Regional format: English (United States) +* Defragment and Optimize Drives + * Change settings - Uncheck "Run on schedule" +* Activate Windows diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-clean-manager.ps1 b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-clean-manager.ps1 new file mode 100644 index 00000000..45ce141f --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-clean-manager.ps1 @@ -0,0 +1,8 @@ +# This script will disable automatic disk cleanup + +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy`" /V 04 /T REG_dWORD /D 0 /F" + +# Maintenance task used by the system to launch a silent auto disk cleanup when running low on free disk space. +DisableSchedulerTask "DiskCleanup\SilentCleanup" diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-defragment.ps1 b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-defragment.ps1 new file mode 100644 index 00000000..bb449e56 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-defragment.ps1 @@ -0,0 +1,42 @@ +# Copyright (C) 2019 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# Windows 7 does not have Get-ScheduledTask and Unregister-ScheduledTask +# thus needing its own version. +Write-Host "Disabling defragmentation" +$version = Get-CimInstance Win32_OperatingSystem | Select-Object -ExpandProperty Caption +if ($version -like '*Windows 7*'){ + $pi = New-Object System.Diagnostics.ProcessStartInfo + $pi.FileName = "C:\Windows\System32\schtasks.exe" + $pi.RedirectStandardError = $true + $pi.UseShellExecute = $false + $pi.Arguments = "/Delete /TN `"\Microsoft\Windows\Defrag\ScheduledDefrag`" /F" + $prog = New-Object System.Diagnostics.Process + $prog.StartInfo = $pi + $prog.Start() | Out-Null + $err = $prog.StandardError.ReadToEnd() + $prog.WaitForExit() + if ($prog.ExitCode -eq 0){ + Write-Host "Scheduled defragmentation removed" + } else { + if ($err -like '*cannot find the file*'){ + Write-Host "No scheduled defragmentation task found" + exit 0 + } else { + Write-Host "Error while deleting scheduled defragmentation task: $err" + } + } +} +else { + try { + $state = (Get-ScheduledTask -ErrorAction Stop -TaskName "ScheduledDefrag").State + Write-Host "Scheduled defragmentation task found in state: $state" + } + catch { + Write-Host "No scheduled defragmentation task found" + exit 0 + } + Write-Host "Unregistering scheduled defragmentation task" + Unregister-ScheduledTask -ErrorAction Stop -Confirm:$false -TaskName ScheduledDefrag + Write-Host "Scheduled Defragmentation task was cancelled" +} diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-ntp.ps1 b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-ntp.ps1 new file mode 100644 index 00000000..22651763 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-ntp.ps1 @@ -0,0 +1,4 @@ +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +# Disable the NTP from syncing +Run-Executable "w32tm.exe" "/config /syncfromflags:NO" diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-schedule-tasks.ps1 b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-schedule-tasks.ps1 new file mode 100644 index 00000000..666ec81e --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-schedule-tasks.ps1 @@ -0,0 +1,86 @@ +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +# This script will remove unneeded Tasks from Task Scheduler + +# Application Experience 'Microsoft Compatibility Appraiser' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Application Experience\Microsoft Compatibility Appraiser" + +# Application Experience 'ProgramDataUpdater' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program" +DisableSchedulerTask "Application Experience\ProgramDataUpdater" + +# Autochk 'Proxy' - "This task collects and uploads autochk SQM data if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Autochk\Proxy" + +# Chkdsk 'ProactiveScan' - "NTFS Volume Health Scan" +DisableSchedulerTask "Chkdsk\ProactiveScan" + +# Chkdsk 'SyspartRepair' +DeleteSchedulerTask "Chkdsk\SyspartRepair" + +# Customer Experience Improvement Program 'Consolidator' - "If the user has consented to participate in the Windows Customer Experience Improvement Program, this job collects and sends usage data to Microsoft." +DisableSchedulerTask "Customer Experience Improvement Program\Consolidator" + +# Customer Experience Improvement Program 'sbCeip' - "The USB CEIP (Customer Experience Improvement Program) task collects Universal Serial Bus related statistics and information about your machine and sends it to the Windows Device Connectivity engineering group at Microsoft. The information received is used to help improve the reliability, stability, and overall functionality of USB in Windows. If the user has not consented to participate in Windows CEIP, this task does not do anything." +DisableSchedulerTask "Customer Experience Improvement Program\UsbCeip" + +# Device Information 'Device' +DisableSchedulerTask "Device Information\Device" + +# Diagnosis 'Scheduled' - "The Windows Scheduled Maintenance Task performs periodic maintenance of the computer system by fixing problems automatically or reporting them through Security and Maintenance." +DisableSchedulerTask "Diagnosis\Scheduled" + +# DiskDiagnostic 'Microsoft-Windows-DiskDiagnosticDataCollector' - "The Windows Disk Diagnostic reports general disk and system information to Microsoft for users participating in the Customer Experience Program." +DisableSchedulerTask "DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" + +# ExploitGuard 'ExploitGuard MDM policy Refresh' - "Task for applying changes to the machine's Exploit Protection settings." +DisableSchedulerTask "ExploitGuard\ExploitGuard MDM policy Refresh" + +# Feedback/Siuf 'DmClient' +DisableSchedulerTask "Feedback\Siuf\DmClient" + +# Feedback/Siuf 'DmClient'OnScenarioDownload' +DisableSchedulerTask "Feedback\Siuf\DmClientOnScenarioDownload" + +# File Classification Infrastructure 'Property Definition Sync' +DisableSchedulerTask "File Classification Infrastructure\Property Definition Sync" + +# InstallService 'ScanForUpdates' +DisableSchedulerTask "InstallService\ScanForUpdates" + +# InstallService 'ScanForUpdatesAsUser' +DisableSchedulerTask "InstallService\ScanForUpdatesAsUser" + +# LanguageComponentsInstaller 'Installation' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\Installation" + +# LanguageComponentsInstaller 'ReconcileLanguageResources' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\ReconcileLanguageResources" + +# PI 'Secure-Boot-Update' - "This task updates the Secure Boot variables." +DisableSchedulerTask "PI\Secure-Boot-Update" + +# PI 'Sqm-Tasks' - "This task gathers information about the Trusted Platform Module (TPM), Secure Boot, and Measured Boot." +DisableSchedulerTask "PI\Sqm-Tasks" + +# Power Efficiency Diagnotics 'AnalyzeSystem' - "This task analyzes the system looking for conditions that may cause high energy use." +DisableSchedulerTask "PushToInstall\Registration" + +# Servicing 'StartComponentCleanup' +DisableSchedulerTask "Servicing\StartComponentCleanup" + +# SoftwareProtectionPlatform 'SvcRestartTaskNetwork' - "This task restarts the Software Protection Platform service when a new network is detected" +DisableSchedulerTask "SoftwareProtectionPlatform\SvcRestartTaskNetwork" + +# Ones below can't be found from Windows 10 21H1 + +# SettingSync 'BackgroundUploadTask' +# DeleteSchedulerTask "SettingSync\BackgroundUploadTask" + +# SoftwareProtectionPlatform 'SvcRestartTask' - "This task restarts the Software Protection Platform service at the specified time" +# DeleteSchedulerTask "SoftwareProtectionPlatform\SvcRestartTask" + +# SoftwareProtectionPlatform 'SvcRestartTaskLogon' - "This task restarts the Software Protection Platform service at the specified time" +# DisableSchedulerTask "SoftwareProtectionPlatform\SvcRestartTaskLogon" + +# UNP 'RunUpdateNotificationMgr' +# DeleteSchedulerTask "UNP\RunUpdateNotificationMgr" diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-update-orchestrator.ps1 b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-update-orchestrator.ps1 new file mode 100644 index 00000000..1022c798 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-update-orchestrator.ps1 @@ -0,0 +1,14 @@ +# Disable UpdateOrchestrator + +$name = "UpdateOrchestrator" +$path = "C:\Windows\System32\Tasks\Microsoft\Windows\$name" + +takeown /F $path /A /R +icacls $path /grant Administrators:F /T +del "$path\Schedule Scan" +del "$path\Schedule Scan Static Task" +del "$path\UpdateModelTask" +del "$path\USO_UxBroker" + +# Disable Update orchestrator service +reg.exe ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsoSvc" /V Start /T REG_dWORD /D 4 /F diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-windefender.ps1 b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-windefender.ps1 new file mode 100644 index 00000000..17b30db0 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-windefender.ps1 @@ -0,0 +1,21 @@ +# Copyright (C) 2020 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# Turning off win defender. +# +# If disabled manually, windows will automatically enable it after +# some period of time. Disabling it speeds up the builds. +# NOTE! Windows Defender Antivirus needs to be turned off! +# Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Windows Defender Antivirus' +# Edit 'Turn off Windows Defender Antivirus' > 'Enabled' > 'Apply' + +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableAntiSpyware /T REG_dWORD /D 1 /F" +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableRoutinelyTakingAction /T REG_dWORD /D 1 /F" + +# Disable 'QueueReporting' - "Windows Error Reporting task to process queued reports." +DisableSchedulerTask "Windows Error Reporting\QueueReporting" + +# Disable WindowsUpdate from Task Scheduler +DisableSchedulerTask "WindowsUpdate\Scheduled Start" diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-windows-file-protector.ps1 b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-windows-file-protector.ps1 new file mode 100644 index 00000000..f1d09fb5 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-windows-file-protector.ps1 @@ -0,0 +1,4 @@ +# Disable Windows File Protection +# Windows File Protection feature in Microsoft Windows prevents programs from replacing critical Windows system files. + +reg.exe ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /V SFCDisable /T REG_dWORD /D 0xffffff9d /F diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-windows-update-medic.ps1 b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-windows-update-medic.ps1 new file mode 100644 index 00000000..e8210ea3 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-windows-update-medic.ps1 @@ -0,0 +1,25 @@ +# Windows Update Medic Service (WaaSMedicSvc)'PerformRemediation' helps recover update-related services to the supported configuration. +# WaasMedicSvc keeps re-starting Windows Update, even if it disabled manually. +# Even Admin user don't have privileged to disable PerformRemediation from Task Scheduler which means that WaaSMedicSvc.dll need's to be removed from the system + +$limit = (Get-Date).AddMinutes(20) +$path = "C:\Windows\System32\WaaSMedicAgent.exe" + +DO { + takeown /F $path + icacls $path /grant Administrators:f + Write-host "Deleting $path" + + Try { + del $path + } + Catch [System.UnauthorizedAccessException] { + Write-host "Access to the path '$path' is denied." + Continue + } + + if ((Get-Date) -gt $limit) { + exit 1 + } + +}while (Test-Path -Path "$path") diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-windows-updates.ps1 b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-windows-updates.ps1 new file mode 100644 index 00000000..62e19814 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/disable-windows-updates.ps1 @@ -0,0 +1,24 @@ +# Copyright (C) 2017 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# This script disables the automatic Windows updates + +$service = get-service wuauserv +if (-not $service) { + Write-Host "Windows Update service not found." + exit 0 +} + +if ($service.Status -eq "Stopped") { + Write-Host "Windows Update service already stopped." +} else { + Write-Host "Stopping Windows Update service." + Stop-Service -Name "wuauserv" -Force +} + +$startup = Get-WmiObject Win32_Service | Where-Object {$_.Name -eq "wuauserv"} | Select -ExpandProperty "StartMode" +if ($startup -ne "Disabled") { + set-service wuauserv -startup disabled +} else { + Write-Host "Windows Update service startup already disabled." +} diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/msvc2015_update.txt b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/msvc2015_update.txt new file mode 100644 index 00000000..5a730029 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/msvc2015_update.txt @@ -0,0 +1,15 @@ +### Visual Studio 2015 ### +Visual Studio 2015 version 14.0.25420.1 Update 3 was installed manually using ISO-image: http://ci-files01-hki.ci.qt.io/input/windows/en_visual_studio_professional_2015_with_update_3_x86_x64_dvd_8923272.iso +(Mount the ISO-image by double clicking it and run 'vs_professional.exe') + +default plus following components were selected: +* Programming Languages + * Visual C++ + - Common Tools for Visual C++ 2015 +* Universal Windows App Development Tools + - Tools (1.4.1) and Windows SDK (10.0.14393) + - Windows 10 SDK (10.0.10586) + - Windows 10 SDK (10.0.10240) +* Common Tools + -Visual Studio Extensibility Tools Update 3 + diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/msvc2019.txt b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/msvc2019.txt new file mode 100644 index 00000000..b3854a52 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/msvc2019.txt @@ -0,0 +1,77 @@ +### Visual Studio 2019 ### +Visual Studio 2019 version 16.11.7 was installed manually using installer: http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__505064367.1547034421.exe + +Installed MSVC-2019 Components: + +.NET Framework 4.5 targeting pack +.NET Framework 4.5.1 targeting pack +.NET Framework 4.5.2 targeting pack +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.8 SDK +.NET Framework 4.8 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data types for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL ADAL runtime +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2016 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2019 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v142 build tools (14.29-16.10) +MSBuild +MSVC v142 - VS 2019 C++ ARM build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ ARM64 build tools (Latest) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.20) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ x64/x86 build tools (Latest) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v142 build tools (ARM) +C++ ATL for latest v142 build tools (ARM64) +C++ ATL for latest v142 build tools (x86 & x64) +TypeScript 4.3 SDK +Windows 10 SDK (10.0.16299.0) +Windows 10 SDK (10.0.17134.0) +Windows 10 SDK (10.0.17763.0) +Windows 10 SDK (10.0.18362.0) +Windows 10 SDK (10.0.19041.0) +Windows 10 SDK (10.0.20348.0) +Windows 10 SDK (10.0.22000.0) + +# NOTE! Work loads were added during installation! + +############################################################ +### Visual Studio 2019 build tools ### + +Visual studio 2019 build tools version 16.11.7 was installed manually using installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_buildtools__251503345.1575372514.exe" + * Only default installation, no additional selections + +############################################################ +### Debugging tools ### + +* Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' +############################################################ diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/msvc2022.txt b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/msvc2022.txt new file mode 100644 index 00000000..05695256 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/msvc2022.txt @@ -0,0 +1,72 @@ +### Visual Studio 2022 Official release ### +Visual Studio 2022 version 17.0.1 was installed manually using installer: http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__msvc2022_1339502178.1525841376.exe + +Installed MSVC-2022 Components: + +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.8 SDK +.NET Framework 4.8 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data types for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2019 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2022 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v143 build tools (14.30-17.0) +C++/CLI support for v143 build tools (Latest) +MSBuild +MSVC v143 - VS 2022 C++ ARM build tools (Latest) +MSVC v143 - VS 2022 C++ ARM build tools (v14.30-17.0) +MSVC v143 - VS 2022 C++ ARM64 build tools (Latest) +MSVC v143 - VS 2022 C++ ARM64 build tools (v14.30-17.0) +MSVC v143 - VS 2022 C++ x64/x86 build tools (Latest) +MSVC v143 - VS 2022 C++ x64/x86 build tools (v14.30-17.0) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v143 build tools (ARM) +C++ ATL for latest v143 build tools (ARM64) +C++ ATL for latest v143 build tools (x86 & x64) +TypeScript 4.4 SDK +TypeScript Server +Windows 10 SDK (10.0.18362.0) +Windows 10 SDK (10.0.19041.0) +Windows 10 SDK (10.0.20348.0) +Windows 10 SDK (10.0.22000.0) +Windows Universal C Runtime + +# NOTE! Work loads were added during installation! + +############################################################ +### Visual Studio 2022 build tools ### + + Visual studio 2022 build tools version 17.0.1 was installed manually using installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_BuildTools_msvc2022.exe" + * Only default installation, no additional selections + +############################################################ +### Debugging tools ### + +* Check that debugging tools are installed + * Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' +############################################################ diff --git a/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/virtio.txt b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/virtio.txt new file mode 100644 index 00000000..9f6ef81f --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_21H2-x86_64/virtio.txt @@ -0,0 +1,31 @@ +Install virtio + +Our vanilla images are pre-installed in VMware where we have networking available. In KVM we can +use the VMware installed vmxnet3 NIC to fetch VirtIO drivers, install them, and only then switch +to using the VirtIO NIC in KVM. + +NOTE! Install these Virtio drivers in Opennebula when using Windows 10 20H2 +* Download https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/archive-virtio/virtio-win-0.1.204-1/virtio-win-0.1.204.iso + cache: http://ci-files01-hki.ci.qt.io/input/windows/virtio/virtio-win-0.1.204.iso +* Mount virtio-win-0.1.185.iso by double clicking it. +* Right click 'E:\NetKVM\w10\amd64\netkvm.inf' and select Install +* Right click 'E:\Balloon\w10\amd64\balloon.inf' and select Install +* Right click 'E:\vioscsi\w10\amd64\vioscsi.inf' and select Install +* Right click 'E:\vioserial\w10\amd64\vioser.inf' and select Install +* Navigate to E:\guest-agent directory and double click qemu-ga-x86_64 + +Because vioscsi does not install the entries in windows registry before we actually +have a VirtIO device installed, and we can't boot with a VirtIO device before +the driver is installed, we have to blindly install the registry entries: + +* Download https://bugreports.qt.io/secure/attachment/95685/95685_vioscsi.reg + cache: http://ci-files01-hki.ci.qt.io/input/windows/virtio/vioscsi.reg + +However, we've seen that the Owner in the registry can be wrong. This entry +sets it to oem11.inf, but we've seen it be oem10.inf in one case and it has +to be corrected so that it will boot from the VirtIO driver. This was found out +by having 2 devices installed simultaneously and having the drivers install +properly into the registry. + +* Eject the mounting +* Remove downloaded virtio-win-0.1.171.iso diff --git a/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/01-enable-dotnet-framework.ps1 b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/01-enable-dotnet-framework.ps1 new file mode 100644 index 00000000..effb4974 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/01-enable-dotnet-framework.ps1 @@ -0,0 +1,23 @@ +# The DirectX SDK installer requires .Net framework 3.5 which isn't installed by default + +# NOTE! Windows Update service need to be enabled when running this script! + +$netFeature = "NetFx3" +try { + $netFeatureState = (Get-WindowsOptionalFeature -Online -FeatureName "$netFeature").State + if ($netFeatureState -eq "Enabled") { + Write-Host ".Net Framework is already installed" + exit 0 + } +} catch { + Write-Host "Could not find .Net Framework Windows feature." + exit 1 +} + +Write-Host "Installing .Net Framework client" +try { + Enable-WindowsOptionalFeature -Online -FeatureName "$netFeature" -All -NoRestart +} catch { + Write-Host "Could not install .Net framework" + exit 1 +} diff --git a/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..65241c24 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,86 @@ +# Installation is done using Host from OpenNebula + +# List about manual pre-installations to Tier1 image: +Language to install: English UK +Time and currency format: English UK +Keyboard or input method: United Kingdom +Windows 10 Enterprise +Custom: Install Windows only (advanced) + +# NOTE! virtio-win-0.1.204 need to be attached with virt-install +Load driver - browse - virtio-win-0.1.204 - amd64 - w10 - Select Red Hat VirtIO SCSI controller - next - next + +Region: Finland +Keyboard layout: United Kingdom +Keyboard layout: English (United States) (US) + + +* Sign-in options - Domain join instead + - Add user & pw +* Location - no +* Find my device - no +* Diagnostic data - Required only +* Inking and typing - no +* Tailored expreriences - no +* Advertising ID - no + +virtio-win-0.1.204.iso and run virtio-win-qt-x64 +Reboot + +* Enable Remote Desktop: + - Settings - System - Remote Desktop - On +* Resolution set to 1280x800 +* Coin-setup: + - Installing Boostrap agent + - Disabling fast boot + - Disabling firewall + - Disabling UAC + - Enabling autologin + - Automatic login + - Disabling windows updates +* Turn off Windows defender: + - Microsoft Defender Antivirus turned off: Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Microsoft Defender Antivirus' + - Edit 'Turn off Microsoft Defender Antivirus' > 'Enabled' > 'Apply' + - Reboot on Safe mode: + - Open msconfig - Boot tab - enable “Safe boot“ - apply - restart + - In Safe mode: + - Take Ownership of Defender: + - Open properties - Right click "C:\Program Files\Windows Defender\Platform" and select 'Properties' + - Open Security tab - Advanced - Owner: Change - Advanced - Find now - Select Administrators - Ok - Ok + - Remove all Permissions: Permissions tab - Select 'Disable inheritance' - Remove all entries -Select 'Replace all child object permi…' - Apply + - Disable Windows defender also from RegEdit: + - Open regedit - Navigate to 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Service' + - Change the following folders the key Start to 4 + - Sense (Windows defender advanced threat protection) + - WdBoot (Windows defender boot) + - WdFilter (Microsoft antimalware file system filter driver) + - WdNisDrv (Windows Defender Network Inspection Driver) + - WdNisSvc (Windows Defender Network Inspection Service) + - WinDefend (Windows Defender Antivirus Service) + - mpssvc (Windows Defender Firewall) + - NOTE! Without these step windows defender can't be disabled! + - Reboot back to normal mode +* Background defrag disabled: 'Defragment And Optimize Drives' - 'change settings' - unchecked "run on a schedule" + - Run in terminal: 'schtasks /Delete /TN "Microsoft\Windows\Defrag\ScheduledDefrag"' +* Time: + - Settings - System - Date & time - Time zone: 'Co-ordinated Universal Time' + - Settings - System - Date & time - "Set the time automatically: Off" +* Regional format: + - Settings - Time & language - Language and region - regional format - English (United States) +* Power saver: + - Settings - System - Power - Screen and sleep: set 'When plugged in, turn off my screen after' to 'never' +* Windows search disabled: + - 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Services' - 'Windows search' - stop & disable +* Sysmain disabled: + - 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Services' - 'SysMain' - stop & disable +# Don't disable Windows Update before running '01-enable-dotnet-framework.ps1'. Script requires Windows update to be enabled! +* Windows update: + - Settings - Windows Update - run available updates (Windows update2022-09 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5017321)) + - After reboot disable windows updates: + - 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Services' - 'Windows updates' - stop & disable +* Turn windows features on or off -> Check the "SMB 1.0/CIFS File Sharing Support" +* (Restart Windows) +* Google Chrome installed for RTA +* Virus & threat protection settings: + * Check that there's no active antivirus providers +* Activate Windows diff --git a/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-clean-manager.ps1 b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-clean-manager.ps1 new file mode 100644 index 00000000..45ce141f --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-clean-manager.ps1 @@ -0,0 +1,8 @@ +# This script will disable automatic disk cleanup + +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy`" /V 04 /T REG_dWORD /D 0 /F" + +# Maintenance task used by the system to launch a silent auto disk cleanup when running low on free disk space. +DisableSchedulerTask "DiskCleanup\SilentCleanup" diff --git a/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-ntp.ps1 b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-ntp.ps1 new file mode 100644 index 00000000..22651763 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-ntp.ps1 @@ -0,0 +1,4 @@ +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +# Disable the NTP from syncing +Run-Executable "w32tm.exe" "/config /syncfromflags:NO" diff --git a/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-schedule-tasks.ps1 b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-schedule-tasks.ps1 new file mode 100644 index 00000000..88b83879 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-schedule-tasks.ps1 @@ -0,0 +1,72 @@ +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +# This script will remove unneeded Tasks from Task Scheduler + +# Application Experience 'Microsoft Compatibility Appraiser' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Application Experience\Microsoft Compatibility Appraiser" + +# Application Experience 'ProgramDataUpdater' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program" +DisableSchedulerTask "Application Experience\ProgramDataUpdater" + +# Autochk 'Proxy' - "This task collects and uploads autochk SQM data if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Autochk\Proxy" + +# Chkdsk 'ProactiveScan' - "NTFS Volume Health Scan" +DisableSchedulerTask "Chkdsk\ProactiveScan" + +# Chkdsk 'SyspartRepair' +DeleteSchedulerTask "Chkdsk\SyspartRepair" + +# Customer Experience Improvement Program 'Consolidator' - "If the user has consented to participate in the Windows Customer Experience Improvement Program, this job collects and sends usage data to Microsoft." +DisableSchedulerTask "Customer Experience Improvement Program\Consolidator" + +# Customer Experience Improvement Program 'sbCeip' - "The USB CEIP (Customer Experience Improvement Program) task collects Universal Serial Bus related statistics and information about your machine and sends it to the Windows Device Connectivity engineering group at Microsoft. The information received is used to help improve the reliability, stability, and overall functionality of USB in Windows. If the user has not consented to participate in Windows CEIP, this task does not do anything." +DisableSchedulerTask "Customer Experience Improvement Program\UsbCeip" + +# Device Information 'Device' +DisableSchedulerTask "Device Information\Device" + +# Diagnosis 'Scheduled' - "The Windows Scheduled Maintenance Task performs periodic maintenance of the computer system by fixing problems automatically or reporting them through Security and Maintenance." +DisableSchedulerTask "Diagnosis\Scheduled" + +# DiskDiagnostic 'Microsoft-Windows-DiskDiagnosticDataCollector' - "The Windows Disk Diagnostic reports general disk and system information to Microsoft for users participating in the Customer Experience Program." +DisableSchedulerTask "DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" + +# ExploitGuard 'ExploitGuard MDM policy Refresh' - "Task for applying changes to the machine's Exploit Protection settings." +DisableSchedulerTask "ExploitGuard\ExploitGuard MDM policy Refresh" + +# Feedback/Siuf 'DmClient' +DisableSchedulerTask "Feedback\Siuf\DmClient" + +# Feedback/Siuf 'DmClient'OnScenarioDownload' +DisableSchedulerTask "Feedback\Siuf\DmClientOnScenarioDownload" + +# File Classification Infrastructure 'Property Definition Sync' +DisableSchedulerTask "File Classification Infrastructure\Property Definition Sync" + +# InstallService 'ScanForUpdates' +DisableSchedulerTask "InstallService\ScanForUpdates" + +# InstallService 'ScanForUpdatesAsUser' +DisableSchedulerTask "InstallService\ScanForUpdatesAsUser" + +# LanguageComponentsInstaller 'Installation' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\Installation" + +# LanguageComponentsInstaller 'ReconcileLanguageResources' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\ReconcileLanguageResources" + +# PI 'Secure-Boot-Update' - "This task updates the Secure Boot variables." +DisableSchedulerTask "PI\Secure-Boot-Update" + +# PI 'Sqm-Tasks' - "This task gathers information about the Trusted Platform Module (TPM), Secure Boot, and Measured Boot." +DisableSchedulerTask "PI\Sqm-Tasks" + +# Power Efficiency Diagnotics 'AnalyzeSystem' - "This task analyzes the system looking for conditions that may cause high energy use." +DisableSchedulerTask "PushToInstall\Registration" + +# Servicing 'StartComponentCleanup' +DisableSchedulerTask "Servicing\StartComponentCleanup" + +# SoftwareProtectionPlatform 'SvcRestartTaskNetwork' - "This task restarts the Software Protection Platform service when a new network is detected" +DisableSchedulerTask "SoftwareProtectionPlatform\SvcRestartTaskNetwork" diff --git a/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-update-orchestrator.ps1 b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-update-orchestrator.ps1 new file mode 100644 index 00000000..1022c798 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-update-orchestrator.ps1 @@ -0,0 +1,14 @@ +# Disable UpdateOrchestrator + +$name = "UpdateOrchestrator" +$path = "C:\Windows\System32\Tasks\Microsoft\Windows\$name" + +takeown /F $path /A /R +icacls $path /grant Administrators:F /T +del "$path\Schedule Scan" +del "$path\Schedule Scan Static Task" +del "$path\UpdateModelTask" +del "$path\USO_UxBroker" + +# Disable Update orchestrator service +reg.exe ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsoSvc" /V Start /T REG_dWORD /D 4 /F diff --git a/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-windefender.ps1 b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-windefender.ps1 new file mode 100644 index 00000000..17b30db0 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-windefender.ps1 @@ -0,0 +1,21 @@ +# Copyright (C) 2020 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# Turning off win defender. +# +# If disabled manually, windows will automatically enable it after +# some period of time. Disabling it speeds up the builds. +# NOTE! Windows Defender Antivirus needs to be turned off! +# Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Windows Defender Antivirus' +# Edit 'Turn off Windows Defender Antivirus' > 'Enabled' > 'Apply' + +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableAntiSpyware /T REG_dWORD /D 1 /F" +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableRoutinelyTakingAction /T REG_dWORD /D 1 /F" + +# Disable 'QueueReporting' - "Windows Error Reporting task to process queued reports." +DisableSchedulerTask "Windows Error Reporting\QueueReporting" + +# Disable WindowsUpdate from Task Scheduler +DisableSchedulerTask "WindowsUpdate\Scheduled Start" diff --git a/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-windows-file-protector.ps1 b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-windows-file-protector.ps1 new file mode 100644 index 00000000..f1d09fb5 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-windows-file-protector.ps1 @@ -0,0 +1,4 @@ +# Disable Windows File Protection +# Windows File Protection feature in Microsoft Windows prevents programs from replacing critical Windows system files. + +reg.exe ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /V SFCDisable /T REG_dWORD /D 0xffffff9d /F diff --git a/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-windows-update-medic.ps1 b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-windows-update-medic.ps1 new file mode 100644 index 00000000..e8210ea3 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-windows-update-medic.ps1 @@ -0,0 +1,25 @@ +# Windows Update Medic Service (WaaSMedicSvc)'PerformRemediation' helps recover update-related services to the supported configuration. +# WaasMedicSvc keeps re-starting Windows Update, even if it disabled manually. +# Even Admin user don't have privileged to disable PerformRemediation from Task Scheduler which means that WaaSMedicSvc.dll need's to be removed from the system + +$limit = (Get-Date).AddMinutes(20) +$path = "C:\Windows\System32\WaaSMedicAgent.exe" + +DO { + takeown /F $path + icacls $path /grant Administrators:f + Write-host "Deleting $path" + + Try { + del $path + } + Catch [System.UnauthorizedAccessException] { + Write-host "Access to the path '$path' is denied." + Continue + } + + if ((Get-Date) -gt $limit) { + exit 1 + } + +}while (Test-Path -Path "$path") diff --git a/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-windows-updates.ps1 b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-windows-updates.ps1 new file mode 100644 index 00000000..62e19814 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/disable-windows-updates.ps1 @@ -0,0 +1,24 @@ +# Copyright (C) 2017 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# This script disables the automatic Windows updates + +$service = get-service wuauserv +if (-not $service) { + Write-Host "Windows Update service not found." + exit 0 +} + +if ($service.Status -eq "Stopped") { + Write-Host "Windows Update service already stopped." +} else { + Write-Host "Stopping Windows Update service." + Stop-Service -Name "wuauserv" -Force +} + +$startup = Get-WmiObject Win32_Service | Where-Object {$_.Name -eq "wuauserv"} | Select -ExpandProperty "StartMode" +if ($startup -ne "Disabled") { + set-service wuauserv -startup disabled +} else { + Write-Host "Windows Update service startup already disabled." +} diff --git a/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/msvc2015_update.txt b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/msvc2015_update.txt new file mode 100644 index 00000000..bafa6c75 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/msvc2015_update.txt @@ -0,0 +1,16 @@ +### Visual Studio 2015 ### +Visual Studio 2015 version 14.0.25420.1 Update 3 was installed manually using ISO-image: http://ci-files01-hki.ci.qt.io/input/windows/en_visual_studio_professional_2015_with_update_3_x86_x64_dvd_8923272.iso +(Mount the ISO-image by double clicking it and run 'vs_professional.exe') + +default plus following components were selected: +* Programming Languages + * Visual C++ + - Common Tools for Visual C++ 2015 +* Windows and Web Development + * Universal Windows App Development Tools + - Tools (1.4.1) and Windows SDK (10.0.14393) + - Windows 10 SDK (10.0.10586) + - Windows 10 SDK (10.0.10240) +* Common Tools + -Visual Studio Extensibility Tools Update 3 + diff --git a/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/msvc2019.txt b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/msvc2019.txt new file mode 100644 index 00000000..013c01b4 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/msvc2019.txt @@ -0,0 +1,77 @@ +### Visual Studio 2019 ### +Visual Studio 2019 version 16.11.27 was installed manually using installer: http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__505064367.1547034421.exe + +Installed MSVC-2019 Components: + +.NET Framework 4.5 targeting pack +.NET Framework 4.5.1 targeting pack +.NET Framework 4.5.2 targeting pack +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.8 SDK +.NET Framework 4.8 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data typer for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL ADAL runtime +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2016 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2019 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v142 build tools (14.29-16.10) +MSBuild +MSVC v142 - VS 2019 C++ ARM build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ ARM64 build tools (Latest) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.20) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ x64/x86 build tools (Latest) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v142 build tools (ARM) +C++ ATL for latest v142 build tools (ARM64) +C++ ATL for latest v142 build tools (x86 & x64) +TypeScript 4.3 SDK +Windows 10 SDK (10.0.16299.0) +Windows 10 SDK (10.0.17134.0) +Windows 10 SDK (10.0.17763.0) +Windows 10 SDK (10.0.18362.0) +Windows 10 SDK (10.0.19041.0) +Windows 10 SDK (10.0.20348.0) +Windows 11 SDK (10.0.22000.0) + +# NOTE! Work loads were added during installation! + +############################################################ +### Visual Studio 2019 build tools ### + +Visual studio 2019 build tools version 16.11.27 was installed manually using installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_buildtools__251503345.1575372514.exe" + * Only default installation, no additional selections + +############################################################ +### Debugging tools ### + +* Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' +############################################################ diff --git a/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/msvc2022.txt b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/msvc2022.txt new file mode 100644 index 00000000..09764b39 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-10_22H2-x86_64/msvc2022.txt @@ -0,0 +1,73 @@ +### Visual Studio 2022 Official release ### +Visual Studio 2022 version 17.6.4 was installed manually using installer: http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__msvc2022_1339502178.1525841376.exe + +Installed MSVC-2022 Components: + +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.8.1 SDK +.NET Framework 4.8.1 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data typer for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2019 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2022 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v143 build tools (14.33-17.3) +C++/CLI support for v143 build tools (Latest) +MSBuild +MSVC v143 - VS 2022 C++ ARM build tools (Latest) +MSVC v143 - VS 2022 C++ ARM build tools (v14.33-17.3) +MSVC v143 - VS 2022 C++ ARM64 build tools (Latest) +MSVC v143 - VS 2022 C++ ARM64 build tools (v14.33-17.3) +MSVC v143 - VS 2022 C++ x64/x86 build tools (Latest) +MSVC v143 - VS 2022 C++ x64/x86 build tools (v14.33-17.3) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v143 build tools (ARM) +C++ ATL for latest v143 build tools (ARM64) +C++ ATL for latest v143 build tools (x86 & x64) +TypeScript 4.7 SDK +TypeScript Server +Windows 10 SDK (10.0.18362.0) +Windows 10 SDK (10.0.19041.0) +Windows 10 SDK (10.0.20348.0) +Windows 10 SDK (10.0.22000.0) +Windows 10 SDK (10.0.22621.0) +Windows Universal C Runtime + +# NOTE! Work loads were added during installation! + +############################################################ +### Visual Studio 2022 build tools ### + + Visual studio 2022 build tools version 17.6.4 was installed manually using installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_BuildTools_msvc2022.exe" + * Only default installation, no additional selections + +############################################################ +### Debugging tools ### + +* Check that debugging tools are installed + * Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' +############################################################ diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/01-enable-dotnet-framework.ps1 b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/01-enable-dotnet-framework.ps1 new file mode 100644 index 00000000..e7f4c248 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/01-enable-dotnet-framework.ps1 @@ -0,0 +1,22 @@ +# The DirectX SDK installer requires .Net framework 3.5 which isn't installed +# by default + +$netFeature = "NetFx3" +try { + $netFeatureState = (Get-WindowsOptionalFeature -Online -FeatureName "$netFeature").State + if ($netFeatureState -eq "Enabled") { + Write-Host ".Net Framework is already installed" + exit 0 + } +} catch { + Write-Host "Could not find .Net Framework Windows feature." + exit 1 +} + +Write-Host "Installing .Net Framework client" +try { + Enable-WindowsOptionalFeature -Online -FeatureName "$netFeature" -All -NoRestart +} catch { + Write-Host "Could not install .Net framework" + exit 1 +} diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..65c28a2c --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,72 @@ +# List about manual pre-installations to Tier1 image: + +VM Options: +Boot options/Firmware: BIOS + +Language to install: English UK +Time and currency format: English UK +Keyboard or input method: United Kingdom +location: finnish +Windows 11 Enterprise +Region: Finland +Keyboard layout: United Kingdom + +* Set up for work or school +* Sign-in options - Domain join instead + - Add user & pw +* Location - no +* Find my device - no +* Diagnostic data - Required only +* Inking and typing - no +* Tailored expreriences - no +* Advertising ID - no + +* Resolution set to 1280x800 +* Coin-setup: + - Installing Boostrap agent + - Disabling fast boot + - Disabling firewall + - Disabling UAC + - Enabling autologin + - Automatic login + - Disabling windows updates +* Turn of Windows defender: + - Microsoft Defender Antivirus turned off: Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Microsoft Defender Antivirus' + - Edit 'Turn off Microsoft Defender Antivirus' > 'Enabled' > 'Apply' + - Reboot on Safe mode: + - Open msconfig - Boot tab - enable “Safe boot“ - apply - restart + - In Safe mode: + - Take Ownership of Defender: + - Open properties - Right click "C:\Program Files\Windows Defender\Platform" and select 'Properties' + - Open Security tab - Advanced - Owner: Change - Advanced - Find now - Select Administrators - Ok - Ok + - Remove all Permissions: Permissions tab - Select 'Disable inheritance' - Select 'Convert..' - Remove all entries - select 'Replace owner on subcontainers and objects' - Select 'Replace all child object permi…' - Apply + - Disable Windows defender also from RegEdit: + - Open regedit - Navigate to 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Service' + - Change the following folders the key Start to 4 + - Sense (Windows defender advanced threat protection) + - WdBoot (Windows defender boot) + - WdFilter (Microsoft antimalware file system filter driver) + - WdNisDrv (Windows Defender Network Inspection Driver) + - WdNisSvc (Windows Defender Network Inspection Service) + - WinDefend (Windows Defender Antivirus Service) + - mpssvc (Windows Defender Firewall) + - NOTE! Without these step windows defender can't be disabled! +* Remote connections allowed: + - Enable Remote Desktop +* Background defrag disabled: 'Defragment And Optimize Drives' - 'change settings' - unchecked "run on a schedule" + - Run in terminal: 'schtasks /Delete /TN "Microsoft\Windows\Defrag\ScheduledDefrag"' +* Time zone: 'Co-ordinated Universal Time' +* Windows search disabled: 'Control Panel\System and Security\Windows Tools\Services' - 'Windows search' - stop & disable +* Sysmain disabled: 'Control Panel\System and Security\Administrative Tools\Services' - 'SysMain' - stop & disable +* Power saver disabled: System -> Power + - set 'When plugged in, turn off my screen after' to 'never' +* Turn windows features on or off -> Check the "SMB 1.0/CIFS File Sharing Support +* (Restart Windows) +* Google Chrome installed for RTA +* Virus & threat protection settings: + * Check that there's no active antivirus providers +* From 'Region Settings' + * Set Regional format: English (United States) +* Defragment and Optimize Drives + * Change settings - Uncheck "Run on schedule" +* Activate Windows diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/create_windows-11_image_with_virtio_drivers.txt b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/create_windows-11_image_with_virtio_drivers.txt new file mode 100644 index 00000000..5e0451db --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/create_windows-11_image_with_virtio_drivers.txt @@ -0,0 +1,42 @@ +# Create Windows 11 Tier1 image with Virtio drivers + +# Create Ubuntu 20.04 and install virt-manager: +Create e.g. Ubuntu 20.04 VM +Connect to machine and download the ISO-image and virtio-drivers (http://ci-files01-hki.ci.qt.io/input/windows/virtio/virtio-win-0.1.204.iso or https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/archive-virtio/virtio-win-0.1.204-1/) +sudo apt update +sudo apt install virt-manager +sudo systemctl start libvirtd +sudo systemctl enable libvirtd +sudo reboot now + +# Start virt-manager and add configurations for Windows 11: +virt-manager +File - New virtual machine +Local install media - Select ISO-image - Unselect automatically detect and select 'Microsoft Windows server 2019' +Add memory and CPU +Disk space 550 +customize configuration before install +from virtual machine manager - edit - Preferences - Enable system tray icon and Enable XML editing +Overview: Firmware: UEFI x86_64: /usr/share/OVMF/OVMG_CODE.fd - Apply (chipset Q35) (i440FX UEFI) 4: UEFI-secboot +XML: Remove these two lines: + <timer name="rtc" tickpolicy="catchip"/> + <timer name="pit" tickpolicy="delay"/> + under these change 'no' to 'yes': + <timer name="hpet" present="yes" + Apply +Sata Disk 1: Disk bus: Virtio + Apply +NIC: Device model: virtio + Apply +Add Hardware: Storage: Device Type: CDROM Device + Select or create custom storage - Manage - Browse local - virtio-win-0.1.204.iso - Open - Finish +Begin installation + +# If note "This PC can't run Windows 11" appears +shift + F10 - regedit - add: HKEY_LOCAL_MACHINE/SYSTEM/Setup/LabConfig + add DWORD value BypassTPMCheck with value 1 + add DWORD value BypassSecureBootCheck value 1 + +Load driver (select win10) + +After reboot and startup open virtio-win-0.1.204.iso and run virtio-win-qt-x64 diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-clean-manager.ps1 b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-clean-manager.ps1 new file mode 100644 index 00000000..45ce141f --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-clean-manager.ps1 @@ -0,0 +1,8 @@ +# This script will disable automatic disk cleanup + +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy`" /V 04 /T REG_dWORD /D 0 /F" + +# Maintenance task used by the system to launch a silent auto disk cleanup when running low on free disk space. +DisableSchedulerTask "DiskCleanup\SilentCleanup" diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-defragment.ps1 b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-defragment.ps1 new file mode 100644 index 00000000..bb449e56 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-defragment.ps1 @@ -0,0 +1,42 @@ +# Copyright (C) 2019 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# Windows 7 does not have Get-ScheduledTask and Unregister-ScheduledTask +# thus needing its own version. +Write-Host "Disabling defragmentation" +$version = Get-CimInstance Win32_OperatingSystem | Select-Object -ExpandProperty Caption +if ($version -like '*Windows 7*'){ + $pi = New-Object System.Diagnostics.ProcessStartInfo + $pi.FileName = "C:\Windows\System32\schtasks.exe" + $pi.RedirectStandardError = $true + $pi.UseShellExecute = $false + $pi.Arguments = "/Delete /TN `"\Microsoft\Windows\Defrag\ScheduledDefrag`" /F" + $prog = New-Object System.Diagnostics.Process + $prog.StartInfo = $pi + $prog.Start() | Out-Null + $err = $prog.StandardError.ReadToEnd() + $prog.WaitForExit() + if ($prog.ExitCode -eq 0){ + Write-Host "Scheduled defragmentation removed" + } else { + if ($err -like '*cannot find the file*'){ + Write-Host "No scheduled defragmentation task found" + exit 0 + } else { + Write-Host "Error while deleting scheduled defragmentation task: $err" + } + } +} +else { + try { + $state = (Get-ScheduledTask -ErrorAction Stop -TaskName "ScheduledDefrag").State + Write-Host "Scheduled defragmentation task found in state: $state" + } + catch { + Write-Host "No scheduled defragmentation task found" + exit 0 + } + Write-Host "Unregistering scheduled defragmentation task" + Unregister-ScheduledTask -ErrorAction Stop -Confirm:$false -TaskName ScheduledDefrag + Write-Host "Scheduled Defragmentation task was cancelled" +} diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-ntp.ps1 b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-ntp.ps1 new file mode 100644 index 00000000..22651763 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-ntp.ps1 @@ -0,0 +1,4 @@ +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +# Disable the NTP from syncing +Run-Executable "w32tm.exe" "/config /syncfromflags:NO" diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-schedule-tasks.ps1 b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-schedule-tasks.ps1 new file mode 100644 index 00000000..88b83879 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-schedule-tasks.ps1 @@ -0,0 +1,72 @@ +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +# This script will remove unneeded Tasks from Task Scheduler + +# Application Experience 'Microsoft Compatibility Appraiser' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Application Experience\Microsoft Compatibility Appraiser" + +# Application Experience 'ProgramDataUpdater' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program" +DisableSchedulerTask "Application Experience\ProgramDataUpdater" + +# Autochk 'Proxy' - "This task collects and uploads autochk SQM data if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Autochk\Proxy" + +# Chkdsk 'ProactiveScan' - "NTFS Volume Health Scan" +DisableSchedulerTask "Chkdsk\ProactiveScan" + +# Chkdsk 'SyspartRepair' +DeleteSchedulerTask "Chkdsk\SyspartRepair" + +# Customer Experience Improvement Program 'Consolidator' - "If the user has consented to participate in the Windows Customer Experience Improvement Program, this job collects and sends usage data to Microsoft." +DisableSchedulerTask "Customer Experience Improvement Program\Consolidator" + +# Customer Experience Improvement Program 'sbCeip' - "The USB CEIP (Customer Experience Improvement Program) task collects Universal Serial Bus related statistics and information about your machine and sends it to the Windows Device Connectivity engineering group at Microsoft. The information received is used to help improve the reliability, stability, and overall functionality of USB in Windows. If the user has not consented to participate in Windows CEIP, this task does not do anything." +DisableSchedulerTask "Customer Experience Improvement Program\UsbCeip" + +# Device Information 'Device' +DisableSchedulerTask "Device Information\Device" + +# Diagnosis 'Scheduled' - "The Windows Scheduled Maintenance Task performs periodic maintenance of the computer system by fixing problems automatically or reporting them through Security and Maintenance." +DisableSchedulerTask "Diagnosis\Scheduled" + +# DiskDiagnostic 'Microsoft-Windows-DiskDiagnosticDataCollector' - "The Windows Disk Diagnostic reports general disk and system information to Microsoft for users participating in the Customer Experience Program." +DisableSchedulerTask "DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" + +# ExploitGuard 'ExploitGuard MDM policy Refresh' - "Task for applying changes to the machine's Exploit Protection settings." +DisableSchedulerTask "ExploitGuard\ExploitGuard MDM policy Refresh" + +# Feedback/Siuf 'DmClient' +DisableSchedulerTask "Feedback\Siuf\DmClient" + +# Feedback/Siuf 'DmClient'OnScenarioDownload' +DisableSchedulerTask "Feedback\Siuf\DmClientOnScenarioDownload" + +# File Classification Infrastructure 'Property Definition Sync' +DisableSchedulerTask "File Classification Infrastructure\Property Definition Sync" + +# InstallService 'ScanForUpdates' +DisableSchedulerTask "InstallService\ScanForUpdates" + +# InstallService 'ScanForUpdatesAsUser' +DisableSchedulerTask "InstallService\ScanForUpdatesAsUser" + +# LanguageComponentsInstaller 'Installation' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\Installation" + +# LanguageComponentsInstaller 'ReconcileLanguageResources' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\ReconcileLanguageResources" + +# PI 'Secure-Boot-Update' - "This task updates the Secure Boot variables." +DisableSchedulerTask "PI\Secure-Boot-Update" + +# PI 'Sqm-Tasks' - "This task gathers information about the Trusted Platform Module (TPM), Secure Boot, and Measured Boot." +DisableSchedulerTask "PI\Sqm-Tasks" + +# Power Efficiency Diagnotics 'AnalyzeSystem' - "This task analyzes the system looking for conditions that may cause high energy use." +DisableSchedulerTask "PushToInstall\Registration" + +# Servicing 'StartComponentCleanup' +DisableSchedulerTask "Servicing\StartComponentCleanup" + +# SoftwareProtectionPlatform 'SvcRestartTaskNetwork' - "This task restarts the Software Protection Platform service when a new network is detected" +DisableSchedulerTask "SoftwareProtectionPlatform\SvcRestartTaskNetwork" diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-update-orchestrator.ps1 b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-update-orchestrator.ps1 new file mode 100644 index 00000000..1022c798 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-update-orchestrator.ps1 @@ -0,0 +1,14 @@ +# Disable UpdateOrchestrator + +$name = "UpdateOrchestrator" +$path = "C:\Windows\System32\Tasks\Microsoft\Windows\$name" + +takeown /F $path /A /R +icacls $path /grant Administrators:F /T +del "$path\Schedule Scan" +del "$path\Schedule Scan Static Task" +del "$path\UpdateModelTask" +del "$path\USO_UxBroker" + +# Disable Update orchestrator service +reg.exe ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsoSvc" /V Start /T REG_dWORD /D 4 /F diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-windefender.ps1 b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-windefender.ps1 new file mode 100644 index 00000000..17b30db0 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-windefender.ps1 @@ -0,0 +1,21 @@ +# Copyright (C) 2020 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# Turning off win defender. +# +# If disabled manually, windows will automatically enable it after +# some period of time. Disabling it speeds up the builds. +# NOTE! Windows Defender Antivirus needs to be turned off! +# Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Windows Defender Antivirus' +# Edit 'Turn off Windows Defender Antivirus' > 'Enabled' > 'Apply' + +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableAntiSpyware /T REG_dWORD /D 1 /F" +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableRoutinelyTakingAction /T REG_dWORD /D 1 /F" + +# Disable 'QueueReporting' - "Windows Error Reporting task to process queued reports." +DisableSchedulerTask "Windows Error Reporting\QueueReporting" + +# Disable WindowsUpdate from Task Scheduler +DisableSchedulerTask "WindowsUpdate\Scheduled Start" diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-windows-file-protector.ps1 b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-windows-file-protector.ps1 new file mode 100644 index 00000000..f1d09fb5 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-windows-file-protector.ps1 @@ -0,0 +1,4 @@ +# Disable Windows File Protection +# Windows File Protection feature in Microsoft Windows prevents programs from replacing critical Windows system files. + +reg.exe ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /V SFCDisable /T REG_dWORD /D 0xffffff9d /F diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-windows-update-medic.ps1 b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-windows-update-medic.ps1 new file mode 100644 index 00000000..e8210ea3 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-windows-update-medic.ps1 @@ -0,0 +1,25 @@ +# Windows Update Medic Service (WaaSMedicSvc)'PerformRemediation' helps recover update-related services to the supported configuration. +# WaasMedicSvc keeps re-starting Windows Update, even if it disabled manually. +# Even Admin user don't have privileged to disable PerformRemediation from Task Scheduler which means that WaaSMedicSvc.dll need's to be removed from the system + +$limit = (Get-Date).AddMinutes(20) +$path = "C:\Windows\System32\WaaSMedicAgent.exe" + +DO { + takeown /F $path + icacls $path /grant Administrators:f + Write-host "Deleting $path" + + Try { + del $path + } + Catch [System.UnauthorizedAccessException] { + Write-host "Access to the path '$path' is denied." + Continue + } + + if ((Get-Date) -gt $limit) { + exit 1 + } + +}while (Test-Path -Path "$path") diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-windows-updates.ps1 b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-windows-updates.ps1 new file mode 100644 index 00000000..62e19814 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/disable-windows-updates.ps1 @@ -0,0 +1,24 @@ +# Copyright (C) 2017 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# This script disables the automatic Windows updates + +$service = get-service wuauserv +if (-not $service) { + Write-Host "Windows Update service not found." + exit 0 +} + +if ($service.Status -eq "Stopped") { + Write-Host "Windows Update service already stopped." +} else { + Write-Host "Stopping Windows Update service." + Stop-Service -Name "wuauserv" -Force +} + +$startup = Get-WmiObject Win32_Service | Where-Object {$_.Name -eq "wuauserv"} | Select -ExpandProperty "StartMode" +if ($startup -ne "Disabled") { + set-service wuauserv -startup disabled +} else { + Write-Host "Windows Update service startup already disabled." +} diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/msvc2015_update.txt b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/msvc2015_update.txt new file mode 100644 index 00000000..5a730029 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/msvc2015_update.txt @@ -0,0 +1,15 @@ +### Visual Studio 2015 ### +Visual Studio 2015 version 14.0.25420.1 Update 3 was installed manually using ISO-image: http://ci-files01-hki.ci.qt.io/input/windows/en_visual_studio_professional_2015_with_update_3_x86_x64_dvd_8923272.iso +(Mount the ISO-image by double clicking it and run 'vs_professional.exe') + +default plus following components were selected: +* Programming Languages + * Visual C++ + - Common Tools for Visual C++ 2015 +* Universal Windows App Development Tools + - Tools (1.4.1) and Windows SDK (10.0.14393) + - Windows 10 SDK (10.0.10586) + - Windows 10 SDK (10.0.10240) +* Common Tools + -Visual Studio Extensibility Tools Update 3 + diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/msvc2019.txt b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/msvc2019.txt new file mode 100644 index 00000000..16486b08 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/msvc2019.txt @@ -0,0 +1,77 @@ +### Visual Studio 2019 ### +Visual Studio 2019 version 16.11.5 was installed manually using installer: http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__505064367.1547034421.exe + +Installed MSVC-2019 Components: + +.NET Framework 4.5 targeting pack +.NET Framework 4.5.1 targeting pack +.NET Framework 4.5.2 targeting pack +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.8 SDK +.NET Framework 4.8 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data typer for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL ADAL runtime +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2016 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2019 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v142 build tools (14.29-16.10) +MSBuild +MSVC v142 - VS 2019 C++ ARM build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ ARM64 build tools (Latest) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.20) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ x64/x86 build tools (Latest) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v142 build tools (ARM) +C++ ATL for latest v142 build tools (ARM64) +C++ ATL for latest v142 build tools (x86 & x64) +TypeScript 4.3 SDK +Windows 10 SDK (10.0.16299.0) +Windows 10 SDK (10.0.17134.0) +Windows 10 SDK (10.0.17763.0) +Windows 10 SDK (10.0.18362.0) +Windows 10 SDK (10.0.19041.0) +Windows 10 SDK (10.0.20348.0) +Windows 11 SDK (10.0.22000.0) + +# NOTE! Work loads were added during installation! + +############################################################ +### Visual Studio 2019 build tools ### + +Visual studio 2019 build tools version 16.11.5 was installed manually using installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_buildtools__251503345.1575372514.exe" + * Only default installation, no additional selections + +############################################################ +### Debugging tools ### + +* Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' +############################################################ diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/msvc2022.txt b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/msvc2022.txt new file mode 100644 index 00000000..40487be4 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/msvc2022.txt @@ -0,0 +1,77 @@ +### Visual Studio 2022 Preview ### +Visual Studio 2022 version 17.0.0 preview 7.0 was installed manually using installer: http://ci-files01-hki.ci.qt.io/input/windows/vs_professional_2022_preview.exe +### Visual Studio 2022 Official release ### +Visual Studio 2022 version 17.0.1 was installed manually using installer: http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__msvc2022_1339502178.1525841376.exe + +Installed MSVC-2022 Components: + +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.8 SDK +.NET Framework 4.8 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data typer for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2019 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2022 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v143 build tools (14.30-17.0) +C++/CLI support for v143 build tools (Latest) +MSBuild +MSVC v143 - VS 2022 C++ ARM build tools (Latest) +MSVC v143 - VS 2022 C++ ARM build tools (v14.30-17.0) +MSVC v143 - VS 2022 C++ ARM64 build tools (Latest) +MSVC v143 - VS 2022 C++ ARM64 build tools (v14.30-17.0) +MSVC v143 - VS 2022 C++ x64/x86 build tools (Latest) +MSVC v143 - VS 2022 C++ x64/x86 build tools (v14.30-17.0) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v143 build tools (ARM) +C++ ATL for latest v143 build tools (ARM64) +C++ ATL for latest v143 build tools (x86 & x64) +TypeScript 4.4 SDK +TypeScript Server +Windows 10 SDK (10.0.18362.0) +Windows 10 SDK (10.0.19041.0) +Windows 10 SDK (10.0.20348.0) +Windows 10 SDK (10.0.22000.0) +Windows Universal C Runtime + +# NOTE! Work loads were added during installation! + +############################################################ +### Visual Studio 2022 build tools ### + +Visual studio 2022 build tools version 17.0.0 preview 7.0 was installed manually using installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_buildtools__msvc2022_preview.exe" + * Only default installation, no additional selections + + Visual studio 2022 build tools version 17.0.1 was installed manually using installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_BuildTools_msvc2022.exe" + * Only default installation, no additional selections + +############################################################ +### Debugging tools ### + +* Check that debugging tools are installed + * Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' +############################################################ diff --git a/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/virtio.txt b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/virtio.txt new file mode 100644 index 00000000..e6ec797d --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_21H2-x86_64/virtio.txt @@ -0,0 +1,31 @@ +Install virtio + +Our vanilla images are pre-installed in VMware where we have networking available. In KVM we can +use the VMware installed vmxnet3 NIC to fetch VirtIO drivers, install them, and only then switch +to using the VirtIO NIC in KVM. + +NOTE! Install these Virtio drivers in Opennebula when using Windows 10 20H2 +* Download https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/archive-virtio/virtio-win-0.1.185-2/virtio-win-0.1.185.iso + cache: http://ci-files01-hki.ci.qt.io/input/windows/virtio/virtio-win-0.1.185.iso +* Mount virtio-win-0.1.185.iso by double clicking it. +* Right click 'E:\NetKVM\w10\amd64\netkvm.inf' and select Install +* Right click 'E:\Balloon\w10\amd64\balloon.inf' and select Install +* Right click 'E:\vioscsi\w10\amd64\vioscsi.inf' and select Install +* Right click 'E:\vioserial\w10\amd64\vioser.inf' and select Install +* Navigate to E:\guest-agent directory and double click qemu-ga-x86_64 + +Because vioscsi does not install the entries in windows registry before we actually +have a VirtIO device installed, and we can't boot with a VirtIO device before +the driver is installed, we have to blindly install the registry entries: + +* Download https://bugreports.qt.io/secure/attachment/95685/95685_vioscsi.reg + cache: http://ci-files01-hki.ci.qt.io/input/windows/virtio/vioscsi.reg + +However, we've seen that the Owner in the registry can be wrong. This entry +sets it to oem11.inf, but we've seen it be oem10.inf in one case and it has +to be corrected so that it will boot from the VirtIO driver. This was found out +by having 2 devices installed simultaneously and having the drivers install +properly into the registry. + +* Eject the mounting +* Remove downloaded virtio-win-0.1.171.iso diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..abd3954d --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,64 @@ +# Follow manual pre-setup from intra to install Windows 11 ARM and virtio drivers: +# "How to create a Windows 11 ARM tier1 image using Qemu" + +# Configure Windows after pre-setup +* Enable Remote Desktop: + - Settings - System - Remote Desktop - On +* Resolution set to 1280x800 + - Unfortunately not possible, only 1280x1024 is available +* Coin-setup: + - Installing Boostrap agent + - Disabling fast boot + - Disabling firewall + - Disabling UAC + - Enabling autologin + - Automatic login + - Disabling windows updates +* Turn off Windows defender: + - Microsoft Defender Antivirus turned off: Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Microsoft Defender Antivirus' + - Edit 'Turn off Microsoft Defender Antivirus' > 'Enabled' > 'Apply' + - Reboot on Safe mode: + - Open msconfig - Boot tab - enable “Safe boot“ - apply - restart + - In Safe mode: + - Take Ownership of Defender: + - Open properties - Right click "C:\Program Files\Windows Defender\Platform" and select 'Properties' + - Open Security tab - Advanced - Owner: Change - Advanced - Find now - Select Administrators - Ok - Ok + - Remove all Permissions: Permissions tab - Select 'Disable inheritance' - Remove all entries -Select 'Replace all child object permi…' - Apply + - Disable Windows defender also from RegEdit: + - Open regedit - Navigate to 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services' + - Change the following folders the key Start to 4 + - Sense (Windows defender advanced threat protection) + - WdBoot (Windows defender boot) + - WdFilter (Microsoft antimalware file system filter driver) + - WdNisDrv (Windows Defender Network Inspection Driver) + - WdNisSvc (Windows Defender Network Inspection Service) + - WinDefend (Windows Defender Antivirus Service) + - mpssvc (Windows Defender Firewall) + - NOTE! Without these step windows defender can't be disabled! + - Reboot back to normal mode +* Background defrag disabled: 'Defragment And Optimize Drives' - 'change settings' - unchecked "run on a schedule" + - Run in terminal: 'schtasks /Delete /TN "Microsoft\Windows\Defrag\ScheduledDefrag"' +* Time: + - Settings - System - Date & time - Time zone: 'Co-ordinated Universal Time' + - Settings - System - Date & time - "Set the time automatically: Off" +* Regional format: + - Settings - Time & language - Language and region - regional format - English (United States) +* Power saver: + - Settings - System - Power - Screen and sleep: set 'When plugged in, turn off my screen after' to 'never' +* Windows search disabled: + - 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Services' - 'Windows search' - stop & disable +* Sysmain disabled: + - 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Services' - 'SysMain' - stop & disable +* Windows update: + - Settings - Windows Update - run available updates (Windows update2023-09 Cumulative Update for Windows 11 Version 22H2 for arm64-based Systems (KB5030219)) + - After reboot disable windows updates: + - 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Services' - 'Windows updates' - stop & disable +* Turn windows features on or off -> Check the "SMB 1.0/CIFS File Sharing Support" +* (Restart Windows) +* Google Chrome installed for RTA +* Virus & threat protection settings: + * Check that there's no active antivirus providers +* Activate Windows + +# Next +Proceed to install pre-provisioning scripts manually to Tier1 image diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-clean-manager.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-clean-manager.ps1 new file mode 100644 index 00000000..45ce141f --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-clean-manager.ps1 @@ -0,0 +1,8 @@ +# This script will disable automatic disk cleanup + +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy`" /V 04 /T REG_dWORD /D 0 /F" + +# Maintenance task used by the system to launch a silent auto disk cleanup when running low on free disk space. +DisableSchedulerTask "DiskCleanup\SilentCleanup" diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-defragment.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-defragment.ps1 new file mode 100644 index 00000000..bb449e56 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-defragment.ps1 @@ -0,0 +1,42 @@ +# Copyright (C) 2019 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# Windows 7 does not have Get-ScheduledTask and Unregister-ScheduledTask +# thus needing its own version. +Write-Host "Disabling defragmentation" +$version = Get-CimInstance Win32_OperatingSystem | Select-Object -ExpandProperty Caption +if ($version -like '*Windows 7*'){ + $pi = New-Object System.Diagnostics.ProcessStartInfo + $pi.FileName = "C:\Windows\System32\schtasks.exe" + $pi.RedirectStandardError = $true + $pi.UseShellExecute = $false + $pi.Arguments = "/Delete /TN `"\Microsoft\Windows\Defrag\ScheduledDefrag`" /F" + $prog = New-Object System.Diagnostics.Process + $prog.StartInfo = $pi + $prog.Start() | Out-Null + $err = $prog.StandardError.ReadToEnd() + $prog.WaitForExit() + if ($prog.ExitCode -eq 0){ + Write-Host "Scheduled defragmentation removed" + } else { + if ($err -like '*cannot find the file*'){ + Write-Host "No scheduled defragmentation task found" + exit 0 + } else { + Write-Host "Error while deleting scheduled defragmentation task: $err" + } + } +} +else { + try { + $state = (Get-ScheduledTask -ErrorAction Stop -TaskName "ScheduledDefrag").State + Write-Host "Scheduled defragmentation task found in state: $state" + } + catch { + Write-Host "No scheduled defragmentation task found" + exit 0 + } + Write-Host "Unregistering scheduled defragmentation task" + Unregister-ScheduledTask -ErrorAction Stop -Confirm:$false -TaskName ScheduledDefrag + Write-Host "Scheduled Defragmentation task was cancelled" +} diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-ntp.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-ntp.ps1 new file mode 100644 index 00000000..22651763 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-ntp.ps1 @@ -0,0 +1,4 @@ +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +# Disable the NTP from syncing +Run-Executable "w32tm.exe" "/config /syncfromflags:NO" diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-schedule-tasks.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-schedule-tasks.ps1 new file mode 100644 index 00000000..88b83879 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-schedule-tasks.ps1 @@ -0,0 +1,72 @@ +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +# This script will remove unneeded Tasks from Task Scheduler + +# Application Experience 'Microsoft Compatibility Appraiser' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Application Experience\Microsoft Compatibility Appraiser" + +# Application Experience 'ProgramDataUpdater' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program" +DisableSchedulerTask "Application Experience\ProgramDataUpdater" + +# Autochk 'Proxy' - "This task collects and uploads autochk SQM data if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Autochk\Proxy" + +# Chkdsk 'ProactiveScan' - "NTFS Volume Health Scan" +DisableSchedulerTask "Chkdsk\ProactiveScan" + +# Chkdsk 'SyspartRepair' +DeleteSchedulerTask "Chkdsk\SyspartRepair" + +# Customer Experience Improvement Program 'Consolidator' - "If the user has consented to participate in the Windows Customer Experience Improvement Program, this job collects and sends usage data to Microsoft." +DisableSchedulerTask "Customer Experience Improvement Program\Consolidator" + +# Customer Experience Improvement Program 'sbCeip' - "The USB CEIP (Customer Experience Improvement Program) task collects Universal Serial Bus related statistics and information about your machine and sends it to the Windows Device Connectivity engineering group at Microsoft. The information received is used to help improve the reliability, stability, and overall functionality of USB in Windows. If the user has not consented to participate in Windows CEIP, this task does not do anything." +DisableSchedulerTask "Customer Experience Improvement Program\UsbCeip" + +# Device Information 'Device' +DisableSchedulerTask "Device Information\Device" + +# Diagnosis 'Scheduled' - "The Windows Scheduled Maintenance Task performs periodic maintenance of the computer system by fixing problems automatically or reporting them through Security and Maintenance." +DisableSchedulerTask "Diagnosis\Scheduled" + +# DiskDiagnostic 'Microsoft-Windows-DiskDiagnosticDataCollector' - "The Windows Disk Diagnostic reports general disk and system information to Microsoft for users participating in the Customer Experience Program." +DisableSchedulerTask "DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" + +# ExploitGuard 'ExploitGuard MDM policy Refresh' - "Task for applying changes to the machine's Exploit Protection settings." +DisableSchedulerTask "ExploitGuard\ExploitGuard MDM policy Refresh" + +# Feedback/Siuf 'DmClient' +DisableSchedulerTask "Feedback\Siuf\DmClient" + +# Feedback/Siuf 'DmClient'OnScenarioDownload' +DisableSchedulerTask "Feedback\Siuf\DmClientOnScenarioDownload" + +# File Classification Infrastructure 'Property Definition Sync' +DisableSchedulerTask "File Classification Infrastructure\Property Definition Sync" + +# InstallService 'ScanForUpdates' +DisableSchedulerTask "InstallService\ScanForUpdates" + +# InstallService 'ScanForUpdatesAsUser' +DisableSchedulerTask "InstallService\ScanForUpdatesAsUser" + +# LanguageComponentsInstaller 'Installation' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\Installation" + +# LanguageComponentsInstaller 'ReconcileLanguageResources' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\ReconcileLanguageResources" + +# PI 'Secure-Boot-Update' - "This task updates the Secure Boot variables." +DisableSchedulerTask "PI\Secure-Boot-Update" + +# PI 'Sqm-Tasks' - "This task gathers information about the Trusted Platform Module (TPM), Secure Boot, and Measured Boot." +DisableSchedulerTask "PI\Sqm-Tasks" + +# Power Efficiency Diagnotics 'AnalyzeSystem' - "This task analyzes the system looking for conditions that may cause high energy use." +DisableSchedulerTask "PushToInstall\Registration" + +# Servicing 'StartComponentCleanup' +DisableSchedulerTask "Servicing\StartComponentCleanup" + +# SoftwareProtectionPlatform 'SvcRestartTaskNetwork' - "This task restarts the Software Protection Platform service when a new network is detected" +DisableSchedulerTask "SoftwareProtectionPlatform\SvcRestartTaskNetwork" diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-update-orchestrator.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-update-orchestrator.ps1 new file mode 100644 index 00000000..72473d8f --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-update-orchestrator.ps1 @@ -0,0 +1,13 @@ +# Disable UpdateOrchestrator + +$name = "UpdateOrchestrator" +$path = "C:\Windows\System32\Tasks\Microsoft\Windows\$name" + +takeown /F $path /A /R +icacls $path /grant Administrators:F /T +del "$path\Schedule Scan" +del "$path\Schedule Scan Static Task" +del "$path\USO_UxBroker" + +# Disable Update orchestrator service +reg.exe ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsoSvc" /V Start /T REG_dWORD /D 4 /F diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-windefender.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-windefender.ps1 new file mode 100644 index 00000000..17b30db0 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-windefender.ps1 @@ -0,0 +1,21 @@ +# Copyright (C) 2020 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# Turning off win defender. +# +# If disabled manually, windows will automatically enable it after +# some period of time. Disabling it speeds up the builds. +# NOTE! Windows Defender Antivirus needs to be turned off! +# Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Windows Defender Antivirus' +# Edit 'Turn off Windows Defender Antivirus' > 'Enabled' > 'Apply' + +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableAntiSpyware /T REG_dWORD /D 1 /F" +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableRoutinelyTakingAction /T REG_dWORD /D 1 /F" + +# Disable 'QueueReporting' - "Windows Error Reporting task to process queued reports." +DisableSchedulerTask "Windows Error Reporting\QueueReporting" + +# Disable WindowsUpdate from Task Scheduler +DisableSchedulerTask "WindowsUpdate\Scheduled Start" diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-windows-file-protector.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-windows-file-protector.ps1 new file mode 100644 index 00000000..f1d09fb5 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-windows-file-protector.ps1 @@ -0,0 +1,4 @@ +# Disable Windows File Protection +# Windows File Protection feature in Microsoft Windows prevents programs from replacing critical Windows system files. + +reg.exe ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /V SFCDisable /T REG_dWORD /D 0xffffff9d /F diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-windows-update-medic.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-windows-update-medic.ps1 new file mode 100644 index 00000000..6accbd3b --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-windows-update-medic.ps1 @@ -0,0 +1,25 @@ +# Windows Update Medic Service (WaaSMedicSvc)'PerformRemediation' helps recover update-related services to the supported configuration. +# WaasMedicSvc keeps re-starting Windows Update, even if it disabled manually. +# Even Admin user don't have privileged to disable PerformRemediation from Task Scheduler which means that WaaSMedicSvc.dll need's to be removed from the system + +$limit = (Get-Date).AddMinutes(20) +$path = "C:\Windows\System32\WaaSMedicSvc.dll" + +DO { + takeown /F $path + icacls $path /grant Administrators:f + Write-host "Deleting $path" + + Try { + del $path + } + Catch [System.UnauthorizedAccessException] { + Write-host "Access to the path '$path' is denied." + Continue + } + + if ((Get-Date) -gt $limit) { + exit 1 + } + +}while (Test-Path -Path "$path") diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-windows-updates.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-windows-updates.ps1 new file mode 100644 index 00000000..62e19814 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/disable-windows-updates.ps1 @@ -0,0 +1,24 @@ +# Copyright (C) 2017 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# This script disables the automatic Windows updates + +$service = get-service wuauserv +if (-not $service) { + Write-Host "Windows Update service not found." + exit 0 +} + +if ($service.Status -eq "Stopped") { + Write-Host "Windows Update service already stopped." +} else { + Write-Host "Stopping Windows Update service." + Stop-Service -Name "wuauserv" -Force +} + +$startup = Get-WmiObject Win32_Service | Where-Object {$_.Name -eq "wuauserv"} | Select -ExpandProperty "StartMode" +if ($startup -ne "Disabled") { + set-service wuauserv -startup disabled +} else { + Write-Host "Windows Update service startup already disabled." +} diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/msvc2022.txt b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/msvc2022.txt new file mode 100644 index 00000000..9fd62d00 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-aarch64/msvc2022.txt @@ -0,0 +1,74 @@ +### Visual Studio Professional 2022 Official release ### +Visual Studio Professional 2022 version 17.3.5 was installed manually using installer: http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__msvc2022_1339502178.1525841376.exe +Visual Studio Professional 2022 was updated to 17.8.2 vith Visual Studio Installer + +Installed MSVC-2022 Components: + +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.8 SDK +.NET Framework 4.8 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data typer for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2019 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2022 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v143 build tools (14.30-17.0) +C++/CLI support for v143 build tools (Latest) +MSBuild +MSVC v143 - VS 2022 C++ ARM build tools (Latest) +MSVC v143 - VS 2022 C++ ARM build tools (v14.30-17.0) +MSVC v143 - VS 2022 C++ ARM64 build tools (Latest) +MSVC v143 - VS 2022 C++ ARM64 build tools (v14.30-17.0) +MSVC v143 - VS 2022 C++ ARM64/ARM64EC build tools (Latest) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v143 build tools (ARM) +C++ ATL for latest v143 build tools (ARM64) +TypeScript 4.7 SDK +TypeScript Server +Windows 10 SDK (10.0.18362.0) +Windows 10 SDK (10.0.19041.0) +Windows 10 SDK (10.0.20348.0) +Windows 11 SDK (10.0.22000.0) +Windows 11 SDK (10.0.22621.0) +Windows Universal C Runtime + +# NOTE! Work loads were added during installation! + +############################################################ +### Visual Studio 2022 build tools ### + + Visual studio 2022 build tools version 17.3.5 was installed manually using installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_BuildTools_msvc2022.exe" + * Only default installation, no additional selections + Visual Studio 2022 build tools were updated to 17.6.4 vith Visual Studio Installer + * Some of the installed framework versions are out of support and do not get any security updates + +############################################################ +### Debugging tools ### + +* Check that debugging tools are installed + * Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' +############################################################ diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/01-enable-dotnet-framework.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/01-enable-dotnet-framework.ps1 new file mode 100644 index 00000000..e7f4c248 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/01-enable-dotnet-framework.ps1 @@ -0,0 +1,22 @@ +# The DirectX SDK installer requires .Net framework 3.5 which isn't installed +# by default + +$netFeature = "NetFx3" +try { + $netFeatureState = (Get-WindowsOptionalFeature -Online -FeatureName "$netFeature").State + if ($netFeatureState -eq "Enabled") { + Write-Host ".Net Framework is already installed" + exit 0 + } +} catch { + Write-Host "Could not find .Net Framework Windows feature." + exit 1 +} + +Write-Host "Installing .Net Framework client" +try { + Enable-WindowsOptionalFeature -Online -FeatureName "$netFeature" -All -NoRestart +} catch { + Write-Host "Could not install .Net framework" + exit 1 +} diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..45ab2fb3 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,93 @@ +# List about manual pre-installations to Tier1 image: + +VM Options: +Boot options/Firmware: BIOS + +Language to install: English UK +Time and currency format: English UK +Keyboard or input method: United Kingdom +Windows 11 Enterprise +location: finnish + + +# If note "This PC can't run Windows 11" appears +shift + F10 - regedit - add: HKEY_LOCAL_MACHINE/SYSTEM/Setup/LabConfig + add DWORD value BypassTPMCheck with value 1 + add DWORD value BypassSecureBootCheck value 1 + +Load driver - browse - virtio-win-0.1.204 - amd64 - w10 + + +Region: Finland +Keyboard layout: United Kingdom +Keyboard layout: English (United State) + + +* Sign-in options - Domain join instead + - Add user & pw +* Location - no +* Find my device - no +* Diagnostic data - Required only +* Inking and typing - no +* Tailored expreriences - no +* Advertising ID - no + +Reboot +After reboot and startup open virtio-win-0.1.204.iso and run virtio-win-qt-x64 + +* Enable Remote Desktop: + - Settings - System - Remote Desktop - On +* Resolution set to 1280x800 +* Coin-setup: + - Installing Boostrap agent + - Disabling fast boot + - Disabling firewall + - Disabling UAC + - Enabling autologin + - Automatic login + - Disabling windows updates +* Turn off Windows defender: + - Microsoft Defender Antivirus turned off: Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Microsoft Defender Antivirus' + - Edit 'Turn off Microsoft Defender Antivirus' > 'Enabled' > 'Apply' + - Reboot on Safe mode: + - Open msconfig - Boot tab - enable “Safe boot“ - apply - restart + - In Safe mode: + - Take Ownership of Defender: + - Open properties - Right click "C:\Program Files\Windows Defender\Platform" and select 'Properties' + - Open Security tab - Advanced - Owner: Change - Advanced - Find now - Select Administrators - Ok - Ok + - Remove all Permissions: Permissions tab - Select 'Disable inheritance' - Remove all entries -Select 'Replace all child object permi…' - Apply + - Disable Windows defender also from RegEdit: + - Open regedit - Navigate to 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Service' + - Change the following folders the key Start to 4 + - Sense (Windows defender advanced threat protection) + - WdBoot (Windows defender boot) + - WdFilter (Microsoft antimalware file system filter driver) + - WdNisDrv (Windows Defender Network Inspection Driver) + - WdNisSvc (Windows Defender Network Inspection Service) + - WinDefend (Windows Defender Antivirus Service) + - mpssvc (Windows Defender Firewall) + - NOTE! Without these step windows defender can't be disabled! + - Reboot back to normal mode +* Background defrag disabled: 'Defragment And Optimize Drives' - 'change settings' - unchecked "run on a schedule" + - Run in terminal: 'schtasks /Delete /TN "Microsoft\Windows\Defrag\ScheduledDefrag"' +* Time: + - Settings - System - Date & time - Time zone: 'Co-ordinated Universal Time' + - Settings - System - Date & time - "Set the time automatically: Off" +* Regional format: + - Settings - Time & language - Language and region - regional format - English (United States) +* Power saver: + - Settings - System - Power - Screen and sleep: set 'When plugged in, turn off my screen after' to 'never' +* Windows search disabled: + - 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Services' - 'Windows search' - stop & disable +* Sysmain disabled: + - 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Services' - 'SysMain' - stop & disable +* Windows update: + - Settings - Windows Update - run available updates (Windows update2022-09 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5017321)) + - After reboot disable windows updates: + - 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Services' - 'Windows updates' - stop & disable +* Turn windows features on or off -> Check the "SMB 1.0/CIFS File Sharing Support" +* (Restart Windows) +* Google Chrome installed for RTA +* Virus & threat protection settings: + * Check that there's no active antivirus providers +* Activate Windows diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-clean-manager.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-clean-manager.ps1 new file mode 100644 index 00000000..45ce141f --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-clean-manager.ps1 @@ -0,0 +1,8 @@ +# This script will disable automatic disk cleanup + +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy`" /V 04 /T REG_dWORD /D 0 /F" + +# Maintenance task used by the system to launch a silent auto disk cleanup when running low on free disk space. +DisableSchedulerTask "DiskCleanup\SilentCleanup" diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-defragment.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-defragment.ps1 new file mode 100644 index 00000000..bb449e56 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-defragment.ps1 @@ -0,0 +1,42 @@ +# Copyright (C) 2019 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# Windows 7 does not have Get-ScheduledTask and Unregister-ScheduledTask +# thus needing its own version. +Write-Host "Disabling defragmentation" +$version = Get-CimInstance Win32_OperatingSystem | Select-Object -ExpandProperty Caption +if ($version -like '*Windows 7*'){ + $pi = New-Object System.Diagnostics.ProcessStartInfo + $pi.FileName = "C:\Windows\System32\schtasks.exe" + $pi.RedirectStandardError = $true + $pi.UseShellExecute = $false + $pi.Arguments = "/Delete /TN `"\Microsoft\Windows\Defrag\ScheduledDefrag`" /F" + $prog = New-Object System.Diagnostics.Process + $prog.StartInfo = $pi + $prog.Start() | Out-Null + $err = $prog.StandardError.ReadToEnd() + $prog.WaitForExit() + if ($prog.ExitCode -eq 0){ + Write-Host "Scheduled defragmentation removed" + } else { + if ($err -like '*cannot find the file*'){ + Write-Host "No scheduled defragmentation task found" + exit 0 + } else { + Write-Host "Error while deleting scheduled defragmentation task: $err" + } + } +} +else { + try { + $state = (Get-ScheduledTask -ErrorAction Stop -TaskName "ScheduledDefrag").State + Write-Host "Scheduled defragmentation task found in state: $state" + } + catch { + Write-Host "No scheduled defragmentation task found" + exit 0 + } + Write-Host "Unregistering scheduled defragmentation task" + Unregister-ScheduledTask -ErrorAction Stop -Confirm:$false -TaskName ScheduledDefrag + Write-Host "Scheduled Defragmentation task was cancelled" +} diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-ntp.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-ntp.ps1 new file mode 100644 index 00000000..22651763 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-ntp.ps1 @@ -0,0 +1,4 @@ +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +# Disable the NTP from syncing +Run-Executable "w32tm.exe" "/config /syncfromflags:NO" diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-schedule-tasks.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-schedule-tasks.ps1 new file mode 100644 index 00000000..88b83879 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-schedule-tasks.ps1 @@ -0,0 +1,72 @@ +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +# This script will remove unneeded Tasks from Task Scheduler + +# Application Experience 'Microsoft Compatibility Appraiser' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Application Experience\Microsoft Compatibility Appraiser" + +# Application Experience 'ProgramDataUpdater' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program" +DisableSchedulerTask "Application Experience\ProgramDataUpdater" + +# Autochk 'Proxy' - "This task collects and uploads autochk SQM data if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Autochk\Proxy" + +# Chkdsk 'ProactiveScan' - "NTFS Volume Health Scan" +DisableSchedulerTask "Chkdsk\ProactiveScan" + +# Chkdsk 'SyspartRepair' +DeleteSchedulerTask "Chkdsk\SyspartRepair" + +# Customer Experience Improvement Program 'Consolidator' - "If the user has consented to participate in the Windows Customer Experience Improvement Program, this job collects and sends usage data to Microsoft." +DisableSchedulerTask "Customer Experience Improvement Program\Consolidator" + +# Customer Experience Improvement Program 'sbCeip' - "The USB CEIP (Customer Experience Improvement Program) task collects Universal Serial Bus related statistics and information about your machine and sends it to the Windows Device Connectivity engineering group at Microsoft. The information received is used to help improve the reliability, stability, and overall functionality of USB in Windows. If the user has not consented to participate in Windows CEIP, this task does not do anything." +DisableSchedulerTask "Customer Experience Improvement Program\UsbCeip" + +# Device Information 'Device' +DisableSchedulerTask "Device Information\Device" + +# Diagnosis 'Scheduled' - "The Windows Scheduled Maintenance Task performs periodic maintenance of the computer system by fixing problems automatically or reporting them through Security and Maintenance." +DisableSchedulerTask "Diagnosis\Scheduled" + +# DiskDiagnostic 'Microsoft-Windows-DiskDiagnosticDataCollector' - "The Windows Disk Diagnostic reports general disk and system information to Microsoft for users participating in the Customer Experience Program." +DisableSchedulerTask "DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" + +# ExploitGuard 'ExploitGuard MDM policy Refresh' - "Task for applying changes to the machine's Exploit Protection settings." +DisableSchedulerTask "ExploitGuard\ExploitGuard MDM policy Refresh" + +# Feedback/Siuf 'DmClient' +DisableSchedulerTask "Feedback\Siuf\DmClient" + +# Feedback/Siuf 'DmClient'OnScenarioDownload' +DisableSchedulerTask "Feedback\Siuf\DmClientOnScenarioDownload" + +# File Classification Infrastructure 'Property Definition Sync' +DisableSchedulerTask "File Classification Infrastructure\Property Definition Sync" + +# InstallService 'ScanForUpdates' +DisableSchedulerTask "InstallService\ScanForUpdates" + +# InstallService 'ScanForUpdatesAsUser' +DisableSchedulerTask "InstallService\ScanForUpdatesAsUser" + +# LanguageComponentsInstaller 'Installation' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\Installation" + +# LanguageComponentsInstaller 'ReconcileLanguageResources' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\ReconcileLanguageResources" + +# PI 'Secure-Boot-Update' - "This task updates the Secure Boot variables." +DisableSchedulerTask "PI\Secure-Boot-Update" + +# PI 'Sqm-Tasks' - "This task gathers information about the Trusted Platform Module (TPM), Secure Boot, and Measured Boot." +DisableSchedulerTask "PI\Sqm-Tasks" + +# Power Efficiency Diagnotics 'AnalyzeSystem' - "This task analyzes the system looking for conditions that may cause high energy use." +DisableSchedulerTask "PushToInstall\Registration" + +# Servicing 'StartComponentCleanup' +DisableSchedulerTask "Servicing\StartComponentCleanup" + +# SoftwareProtectionPlatform 'SvcRestartTaskNetwork' - "This task restarts the Software Protection Platform service when a new network is detected" +DisableSchedulerTask "SoftwareProtectionPlatform\SvcRestartTaskNetwork" diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-update-orchestrator.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-update-orchestrator.ps1 new file mode 100644 index 00000000..72473d8f --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-update-orchestrator.ps1 @@ -0,0 +1,13 @@ +# Disable UpdateOrchestrator + +$name = "UpdateOrchestrator" +$path = "C:\Windows\System32\Tasks\Microsoft\Windows\$name" + +takeown /F $path /A /R +icacls $path /grant Administrators:F /T +del "$path\Schedule Scan" +del "$path\Schedule Scan Static Task" +del "$path\USO_UxBroker" + +# Disable Update orchestrator service +reg.exe ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsoSvc" /V Start /T REG_dWORD /D 4 /F diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-windefender.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-windefender.ps1 new file mode 100644 index 00000000..17b30db0 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-windefender.ps1 @@ -0,0 +1,21 @@ +# Copyright (C) 2020 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# Turning off win defender. +# +# If disabled manually, windows will automatically enable it after +# some period of time. Disabling it speeds up the builds. +# NOTE! Windows Defender Antivirus needs to be turned off! +# Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Windows Defender Antivirus' +# Edit 'Turn off Windows Defender Antivirus' > 'Enabled' > 'Apply' + +. "$PSScriptRoot\..\..\provisioning\common\windows\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableAntiSpyware /T REG_dWORD /D 1 /F" +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableRoutinelyTakingAction /T REG_dWORD /D 1 /F" + +# Disable 'QueueReporting' - "Windows Error Reporting task to process queued reports." +DisableSchedulerTask "Windows Error Reporting\QueueReporting" + +# Disable WindowsUpdate from Task Scheduler +DisableSchedulerTask "WindowsUpdate\Scheduled Start" diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-windows-file-protector.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-windows-file-protector.ps1 new file mode 100644 index 00000000..f1d09fb5 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-windows-file-protector.ps1 @@ -0,0 +1,4 @@ +# Disable Windows File Protection +# Windows File Protection feature in Microsoft Windows prevents programs from replacing critical Windows system files. + +reg.exe ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /V SFCDisable /T REG_dWORD /D 0xffffff9d /F diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-windows-update-medic.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-windows-update-medic.ps1 new file mode 100644 index 00000000..6accbd3b --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-windows-update-medic.ps1 @@ -0,0 +1,25 @@ +# Windows Update Medic Service (WaaSMedicSvc)'PerformRemediation' helps recover update-related services to the supported configuration. +# WaasMedicSvc keeps re-starting Windows Update, even if it disabled manually. +# Even Admin user don't have privileged to disable PerformRemediation from Task Scheduler which means that WaaSMedicSvc.dll need's to be removed from the system + +$limit = (Get-Date).AddMinutes(20) +$path = "C:\Windows\System32\WaaSMedicSvc.dll" + +DO { + takeown /F $path + icacls $path /grant Administrators:f + Write-host "Deleting $path" + + Try { + del $path + } + Catch [System.UnauthorizedAccessException] { + Write-host "Access to the path '$path' is denied." + Continue + } + + if ((Get-Date) -gt $limit) { + exit 1 + } + +}while (Test-Path -Path "$path") diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-windows-updates.ps1 b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-windows-updates.ps1 new file mode 100644 index 00000000..62e19814 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/disable-windows-updates.ps1 @@ -0,0 +1,24 @@ +# Copyright (C) 2017 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# This script disables the automatic Windows updates + +$service = get-service wuauserv +if (-not $service) { + Write-Host "Windows Update service not found." + exit 0 +} + +if ($service.Status -eq "Stopped") { + Write-Host "Windows Update service already stopped." +} else { + Write-Host "Stopping Windows Update service." + Stop-Service -Name "wuauserv" -Force +} + +$startup = Get-WmiObject Win32_Service | Where-Object {$_.Name -eq "wuauserv"} | Select -ExpandProperty "StartMode" +if ($startup -ne "Disabled") { + set-service wuauserv -startup disabled +} else { + Write-Host "Windows Update service startup already disabled." +} diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/msvc2019.txt b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/msvc2019.txt new file mode 100644 index 00000000..3d05cf07 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/msvc2019.txt @@ -0,0 +1,79 @@ +### Visual Studio 2019 ### +Visual Studio 2019 version 16.11.19 was installed manually using installer: http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__505064367.1547034421.exe +Visual Studio 2019 was updated to version 16.11.27 with Visual Studio Installer + +Installed MSVC-2019 Components: + +.NET Framework 4.5 targeting pack +.NET Framework 4.5.1 targeting pack +.NET Framework 4.5.2 targeting pack +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.8 SDK +.NET Framework 4.8 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data typer for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL ADAL runtime +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2016 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2019 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v142 build tools (14.29-16.10) +MSBuild +MSVC v142 - VS 2019 C++ ARM build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ ARM64 build tools (Latest) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.20) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ x64/x86 build tools (Latest) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v142 build tools (ARM) +C++ ATL for latest v142 build tools (ARM64) +C++ ATL for latest v142 build tools (x86 & x64) +TypeScript 4.3 SDK +Windows 10 SDK (10.0.16299.0) +Windows 10 SDK (10.0.17134.0) +Windows 10 SDK (10.0.17763.0) +Windows 10 SDK (10.0.18362.0) +Windows 10 SDK (10.0.19041.0) +Windows 10 SDK (10.0.20348.0) +Windows 11 SDK (10.0.22000.0) + +# NOTE! Work loads were added during installation! + +############################################################ +### Visual Studio 2019 build tools ### + +Visual studio 2019 build tools version 16.11.19 was installed manually using installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_buildtools__251503345.1575372514.exe" + * Only default installation, no additional selections +Visual studio 2019 build tools were updated to version 16.11.27 with Visual Studio Installer + +############################################################ +### Debugging tools ### + +* Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' +############################################################ diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/msvc2022.txt b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/msvc2022.txt new file mode 100644 index 00000000..1495863f --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/msvc2022.txt @@ -0,0 +1,76 @@ +### Visual Studio 2022 Official release ### +Visual Studio 2022 version 17.3.5 was installed manually using installer: http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__msvc2022_1339502178.1525841376.exe +Visual Studio 2022 was updated to 17.6.4 vith Visual Studio Installer + +Installed MSVC-2022 Components: + +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.8 SDK +.NET Framework 4.8 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data typer for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2019 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2022 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v143 build tools (14.30-17.0) +C++/CLI support for v143 build tools (Latest) +MSBuild +MSVC v143 - VS 2022 C++ ARM build tools (Latest) +MSVC v143 - VS 2022 C++ ARM build tools (v14.30-17.0) +MSVC v143 - VS 2022 C++ ARM64 build tools (Latest) +MSVC v143 - VS 2022 C++ ARM64 build tools (v14.30-17.0) +MSVC v143 - VS 2022 C++ x64/x86 build tools (Latest) +MSVC v143 - VS 2022 C++ x64/x86 build tools (v14.30-17.0) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v143 build tools (ARM) +C++ ATL for latest v143 build tools (ARM64) +C++ ATL for latest v143 build tools (x86 & x64) +TypeScript 4.7 SDK +TypeScript Server +Windows 10 SDK (10.0.18362.0) +Windows 10 SDK (10.0.19041.0) +Windows 10 SDK (10.0.20348.0) +Windows 11 SDK (10.0.22000.0) +Windows 11 SDK (10.0.22621.0) +Windows Universal C Runtime + +# NOTE! Work loads were added during installation! + +############################################################ +### Visual Studio 2022 build tools ### + + Visual studio 2022 build tools version 17.3.5 was installed manually using installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_BuildTools_msvc2022.exe" + * Only default installation, no additional selections + Visual Studio 2022 build tools were updated to 17.6.4 vith Visual Studio Installer + * Some of the installed framework versions are out of support and do not get any security updates + +############################################################ +### Debugging tools ### + +* Check that debugging tools are installed + * Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' +############################################################ diff --git a/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/virtio.txt b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/virtio.txt new file mode 100644 index 00000000..e6ec797d --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_22H2-x86_64/virtio.txt @@ -0,0 +1,31 @@ +Install virtio + +Our vanilla images are pre-installed in VMware where we have networking available. In KVM we can +use the VMware installed vmxnet3 NIC to fetch VirtIO drivers, install them, and only then switch +to using the VirtIO NIC in KVM. + +NOTE! Install these Virtio drivers in Opennebula when using Windows 10 20H2 +* Download https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/archive-virtio/virtio-win-0.1.185-2/virtio-win-0.1.185.iso + cache: http://ci-files01-hki.ci.qt.io/input/windows/virtio/virtio-win-0.1.185.iso +* Mount virtio-win-0.1.185.iso by double clicking it. +* Right click 'E:\NetKVM\w10\amd64\netkvm.inf' and select Install +* Right click 'E:\Balloon\w10\amd64\balloon.inf' and select Install +* Right click 'E:\vioscsi\w10\amd64\vioscsi.inf' and select Install +* Right click 'E:\vioserial\w10\amd64\vioser.inf' and select Install +* Navigate to E:\guest-agent directory and double click qemu-ga-x86_64 + +Because vioscsi does not install the entries in windows registry before we actually +have a VirtIO device installed, and we can't boot with a VirtIO device before +the driver is installed, we have to blindly install the registry entries: + +* Download https://bugreports.qt.io/secure/attachment/95685/95685_vioscsi.reg + cache: http://ci-files01-hki.ci.qt.io/input/windows/virtio/vioscsi.reg + +However, we've seen that the Owner in the registry can be wrong. This entry +sets it to oem11.inf, but we've seen it be oem10.inf in one case and it has +to be corrected so that it will boot from the VirtIO driver. This was found out +by having 2 devices installed simultaneously and having the drivers install +properly into the registry. + +* Eject the mounting +* Remove downloaded virtio-win-0.1.171.iso diff --git a/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/01-enable-dotnet-framework.ps1 b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/01-enable-dotnet-framework.ps1 new file mode 100644 index 00000000..e7f4c248 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/01-enable-dotnet-framework.ps1 @@ -0,0 +1,22 @@ +# The DirectX SDK installer requires .Net framework 3.5 which isn't installed +# by default + +$netFeature = "NetFx3" +try { + $netFeatureState = (Get-WindowsOptionalFeature -Online -FeatureName "$netFeature").State + if ($netFeatureState -eq "Enabled") { + Write-Host ".Net Framework is already installed" + exit 0 + } +} catch { + Write-Host "Could not find .Net Framework Windows feature." + exit 1 +} + +Write-Host "Installing .Net Framework client" +try { + Enable-WindowsOptionalFeature -Online -FeatureName "$netFeature" -All -NoRestart +} catch { + Write-Host "Could not install .Net framework" + exit 1 +} diff --git a/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/README_MANUAL_INSTALLATIONS b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/README_MANUAL_INSTALLATIONS new file mode 100644 index 00000000..fa10604a --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/README_MANUAL_INSTALLATIONS @@ -0,0 +1,140 @@ +# List about manual pre-installations to Tier1 image: + +VM Options: +Boot options/Firmware: BIOS + +Language to install: English (United States) +Time and currency format: English (United States) +Keyboard or input method: United Kingdom +Windows 11 Enterprise +location: finnish + + +# If note "This PC can't run Windows 11" appears +shift + F10 - regedit - add: HKEY_LOCAL_MACHINE/SYSTEM/Setup/LabConfig + 'regedit' to open Registry Editor + Go to: HKEY_LOCAL_MACHINE/SYSTEM/Setup/ + Right click 'Setup' folder: New -> Key -> Name: LabConfig +add DWORD value BypassTPMCheck with value 1 + Right click 'LabConfig' folder: New -> DWORD (32-bit) -> Name: BypassTPMCheck + Double-click on the BypassTPMCheck, change value to 1 +add DWORD value BypassSecureBootCheck value 1 + repeat +Close the regedit and the installation window ('X') to start the installation again. + +Load driver - browse - virtio-win-0.1.204 - amd64 - w10 + + +Region: Finland +Keyboard layout: United Kingdom +Keyboard layout: English (United State) + + +* Sign-in options - Domain join instead + - Add user & pw +* Location - no +* Find my device - no +* Diagnostic data - Required only +* Inking and typing - no +* Tailored expreriences - no +* Advertising ID - no + +Reboot +After reboot and startup, go to 'This PC' -> virtio-win-0.1.204 and run virtio-win-qt-x64 + +# Register the image to OpenNebula now +# After registering the image and opening a persistent VM out of it in ON, continue to these steps + +* Using Windows Remote Desktop Connection (RDP) is recommended + - Connect to the tier-1 VM with VNC in OpenNebula + - Open CMD, run: ipconfig + - Input the IP to RDP. Click "Show options" -> add username. Connect. + - You can now copy&paste paths and .ps1 scripts later +* Resolution set to 1280x800 + - If 1280x800 is not listed in the settings, select a 1280 width (e.g. 1280x960) and: + - regedit -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\GraphicsDrivers\Configuration + - Select a key/folder and its subkeys (00/00) that has the resolution you just selected + - Change every height value (e.g. 960) to 800 + - Restart Windows +* Coin-setup: +* Download the agent executable from the IP that is used in Qt5 dev COIN_DOWNLOAD_URL (check from a build log): + http://[COIN IP]/coin/binary/windows_amd64/agent.exe +* Run the executable. It should do the following configurations to Windows but you should check them. + - Installing Bootstrap agent + - Disabling fast boot + - No related settings in control panel. + - Make sure it's disabled: gpedit -> Computer Configuration\Administrative Templates\System\Shutdown\ + - Require use of fast startup -> set to "Disabled". + - Disabling firewall + - Disabling UAC + - Enabling autologin + - regedit -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device + - DevicePasswordLessBuildVersion: 2 -> 0 + - netplwiz -> uncheck: "Users must enter a user name and password...", apply + - Disabling windows updates + - gpedit -> Computer Configuration\Administrative Templates\Windows Components\Windows Update\Manage end user experience + - "Configure Automatic Updates" -> "Disabled" + - Bootstrap agent CMD window should now pop-up at every Windows start up. +* Turn off Windows defender: + - Microsoft Defender Antivirus turned off: Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Microsoft Defender Antivirus' + - Edit 'Turn off Microsoft Defender Antivirus' > 'Enabled' > 'Apply' + - Reboot on Safe mode: + - Open msconfig - Boot tab - enable “Safe boot“ - apply - restart + - In Safe mode: + - Take Ownership of Defender: + - Open properties - Right click "C:\Program Files\Windows Defender\Platform" and select 'Properties' + - Open Security tab - Advanced - Owner: Change - Advanced - Find now - Select Administrators - Ok - Ok + - Remove all Permissions: Permissions tab + - Select 'Disable inheritance' + - Remove all entries + - Select 'Replace all child object permi…' - Apply + - Disable Windows defender also from RegEdit: + - Open regedit - Navigate to 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services' + - Change the following folders the key Start to 4 + - Sense (Windows defender advanced threat protection) + - WdBoot (Windows defender boot) + - WdFilter (Microsoft antimalware file system filter driver) + - WdNisDrv (Windows Defender Network Inspection Driver) + - WdNisSvc (Windows Defender Network Inspection Service) + - WinDefend (Windows Defender Antivirus Service) + - mpssvc (Windows Defender Firewall) + - NOTE! Without these step windows defender can't be disabled! + - Reboot back to normal mode +* Background defrag disabled: 'Defragment And Optimize Drives' - 'change settings' - unchecked "run on a schedule" + - Run in terminal: 'schtasks /Delete /TN "Microsoft\Windows\Defrag\ScheduledDefrag"' +* Time: + - Settings - Time & language - Date & time - Time zone: 'Coordinated Universal Time' + - Settings - System - Date & time - "Set the time automatically: Off" +* Regional format: + - Settings - Time & language - Language and region - regional format - English (United States) +* Power saver: + - Settings - System - Power - Screen and sleep: set 'When plugged in, turn off my screen after' to 'never' +* Windows search disabled: + - 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Tools\Services' + - 'Windows search' - properties - stop & Startup type: disabled +* Sysmain disabled: + - 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Tools\Services' - 'SysMain' - stop & disable +* Windows update: + - Settings - Windows Update - run available updates (Windows update2024-02 Cumulative Update for Windows 11 Version 23H2 for x64-based Systems (KB5034765)) + - After reboot disable windows updates: + - 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Tools\Services' - 'Windows updates' - stop & disable +* Turn windows features on or off -> Check the "SMB 1.0/CIFS File Sharing Support" +* Allow running scripts by all users + - Open PowerShell, type: Set-ExecutionPolicy -ExecutionPolicy Bypass +* (Restart Windows) +* Google Chrome installed for RTA +* Virus & threat protection settings: + * Check that there's no active antivirus providers +* Disable useless startup apps with Task manager + - OneDrive + - SecurityHealthSystray + - Microsoft Edge + - Open Edge and turn off all boosts and background tasks. Task manager should not show Edge processes when Edge is off. +* Disable clean manager + - Settings: System -> Storage -> Storage management -> Storage Sense: Off +* Run the disable/enable .ps1 scripts + - Copy&paste the scripts (+helpers.ps1) to the VM, run them. +* Install msvc2019 and msvc2022 (follow the msvc2019.txt and msvc2022.txt files) + - Open Task Scheduler: Task Scheduler Library > Microsoft > VisualStudio > Updates > right-click: BackgroundDownload > disable +* Activate Windows +* When everything seems ready: shut down Windows, Select 'Power off' in OpenNebula. diff --git a/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-ntp.ps1 b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-ntp.ps1 new file mode 100644 index 00000000..7f68f8ac --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-ntp.ps1 @@ -0,0 +1,4 @@ +. "$PSScriptRoot\helpers.ps1 + +# Disable the NTP from syncing +Run-Executable "w32tm.exe" "/config /syncfromflags:NO" diff --git a/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-schedule-tasks.ps1 b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-schedule-tasks.ps1 new file mode 100644 index 00000000..e9223c24 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-schedule-tasks.ps1 @@ -0,0 +1,72 @@ +. "$PSScriptRoot\helpers.ps1" + +# This script will remove unneeded Tasks from Task Scheduler + +# Application Experience 'Microsoft Compatibility Appraiser' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Application Experience\Microsoft Compatibility Appraiser" + +# Application Experience 'ProgramDataUpdater' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program" +DisableSchedulerTask "Application Experience\ProgramDataUpdater" + +# Autochk 'Proxy' - "This task collects and uploads autochk SQM data if opted-in to the Microsoft Customer Experience Improvement Program." +DisableSchedulerTask "Autochk\Proxy" + +# Chkdsk 'ProactiveScan' - "NTFS Volume Health Scan" +DisableSchedulerTask "Chkdsk\ProactiveScan" + +# Chkdsk 'SyspartRepair' +DeleteSchedulerTask "Chkdsk\SyspartRepair" + +# Customer Experience Improvement Program 'Consolidator' - "If the user has consented to participate in the Windows Customer Experience Improvement Program, this job collects and sends usage data to Microsoft." +DisableSchedulerTask "Customer Experience Improvement Program\Consolidator" + +# Customer Experience Improvement Program 'sbCeip' - "The USB CEIP (Customer Experience Improvement Program) task collects Universal Serial Bus related statistics and information about your machine and sends it to the Windows Device Connectivity engineering group at Microsoft. The information received is used to help improve the reliability, stability, and overall functionality of USB in Windows. If the user has not consented to participate in Windows CEIP, this task does not do anything." +DisableSchedulerTask "Customer Experience Improvement Program\UsbCeip" + +# Device Information 'Device' +DisableSchedulerTask "Device Information\Device" + +# Diagnosis 'Scheduled' - "The Windows Scheduled Maintenance Task performs periodic maintenance of the computer system by fixing problems automatically or reporting them through Security and Maintenance." +DisableSchedulerTask "Diagnosis\Scheduled" + +# DiskDiagnostic 'Microsoft-Windows-DiskDiagnosticDataCollector' - "The Windows Disk Diagnostic reports general disk and system information to Microsoft for users participating in the Customer Experience Program." +DisableSchedulerTask "DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" + +# ExploitGuard 'ExploitGuard MDM policy Refresh' - "Task for applying changes to the machine's Exploit Protection settings." +DisableSchedulerTask "ExploitGuard\ExploitGuard MDM policy Refresh" + +# Feedback/Siuf 'DmClient' +DisableSchedulerTask "Feedback\Siuf\DmClient" + +# Feedback/Siuf 'DmClient'OnScenarioDownload' +DisableSchedulerTask "Feedback\Siuf\DmClientOnScenarioDownload" + +# File Classification Infrastructure 'Property Definition Sync' +DisableSchedulerTask "File Classification Infrastructure\Property Definition Sync" + +# InstallService 'ScanForUpdates' +DisableSchedulerTask "InstallService\ScanForUpdates" + +# InstallService 'ScanForUpdatesAsUser' +DisableSchedulerTask "InstallService\ScanForUpdatesAsUser" + +# LanguageComponentsInstaller 'Installation' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\Installation" + +# LanguageComponentsInstaller 'ReconcileLanguageResources' - "Install language components that match the user's language list." +DisableSchedulerTask "LanguageComponentsInstaller\ReconcileLanguageResources" + +# PI 'Secure-Boot-Update' - "This task updates the Secure Boot variables." +DisableSchedulerTask "PI\Secure-Boot-Update" + +# PI 'Sqm-Tasks' - "This task gathers information about the Trusted Platform Module (TPM), Secure Boot, and Measured Boot." +DisableSchedulerTask "PI\Sqm-Tasks" + +# Power Efficiency Diagnotics 'AnalyzeSystem' - "This task analyzes the system looking for conditions that may cause high energy use." +DisableSchedulerTask "PushToInstall\Registration" + +# Servicing 'StartComponentCleanup' +DisableSchedulerTask "Servicing\StartComponentCleanup" + +# SoftwareProtectionPlatform 'SvcRestartTaskNetwork' - "This task restarts the Software Protection Platform service when a new network is detected" +DisableSchedulerTask "SoftwareProtectionPlatform\SvcRestartTaskNetwork" diff --git a/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-update-orchestrator.ps1 b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-update-orchestrator.ps1 new file mode 100644 index 00000000..72473d8f --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-update-orchestrator.ps1 @@ -0,0 +1,13 @@ +# Disable UpdateOrchestrator + +$name = "UpdateOrchestrator" +$path = "C:\Windows\System32\Tasks\Microsoft\Windows\$name" + +takeown /F $path /A /R +icacls $path /grant Administrators:F /T +del "$path\Schedule Scan" +del "$path\Schedule Scan Static Task" +del "$path\USO_UxBroker" + +# Disable Update orchestrator service +reg.exe ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsoSvc" /V Start /T REG_dWORD /D 4 /F diff --git a/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-windefender.ps1 b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-windefender.ps1 new file mode 100644 index 00000000..713c5f40 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-windefender.ps1 @@ -0,0 +1,21 @@ +# Copyright (C) 2020 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# Turning off win defender. +# +# If disabled manually, windows will automatically enable it after +# some period of time. Disabling it speeds up the builds. +# NOTE! Windows Defender Antivirus needs to be turned off! +# Open 'gpedit.msc': 'Computer Configuration' - 'Administrative Templates' - 'Windows Components' - 'Windows Defender Antivirus' +# Edit 'Turn off Windows Defender Antivirus' > 'Enabled' > 'Apply' + +. "$PSScriptRoot\helpers.ps1" + +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableAntiSpyware /T REG_dWORD /D 1 /F" +Run-Executable "reg.exe" "ADD `"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`" /V DisableRoutinelyTakingAction /T REG_dWORD /D 1 /F" + +# Disable 'QueueReporting' - "Windows Error Reporting task to process queued reports." +DisableSchedulerTask "Windows Error Reporting\QueueReporting" + +# Disable WindowsUpdate from Task Scheduler +DisableSchedulerTask "WindowsUpdate\Scheduled Start" diff --git a/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-windows-file-protector.ps1 b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-windows-file-protector.ps1 new file mode 100644 index 00000000..f1d09fb5 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-windows-file-protector.ps1 @@ -0,0 +1,4 @@ +# Disable Windows File Protection +# Windows File Protection feature in Microsoft Windows prevents programs from replacing critical Windows system files. + +reg.exe ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /V SFCDisable /T REG_dWORD /D 0xffffff9d /F diff --git a/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-windows-update-medic.ps1 b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-windows-update-medic.ps1 new file mode 100644 index 00000000..6accbd3b --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-windows-update-medic.ps1 @@ -0,0 +1,25 @@ +# Windows Update Medic Service (WaaSMedicSvc)'PerformRemediation' helps recover update-related services to the supported configuration. +# WaasMedicSvc keeps re-starting Windows Update, even if it disabled manually. +# Even Admin user don't have privileged to disable PerformRemediation from Task Scheduler which means that WaaSMedicSvc.dll need's to be removed from the system + +$limit = (Get-Date).AddMinutes(20) +$path = "C:\Windows\System32\WaaSMedicSvc.dll" + +DO { + takeown /F $path + icacls $path /grant Administrators:f + Write-host "Deleting $path" + + Try { + del $path + } + Catch [System.UnauthorizedAccessException] { + Write-host "Access to the path '$path' is denied." + Continue + } + + if ((Get-Date) -gt $limit) { + exit 1 + } + +}while (Test-Path -Path "$path") diff --git a/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-windows-updates.ps1 b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-windows-updates.ps1 new file mode 100644 index 00000000..62e19814 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/disable-windows-updates.ps1 @@ -0,0 +1,24 @@ +# Copyright (C) 2017 The Qt Company Ltd. +# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only + +# This script disables the automatic Windows updates + +$service = get-service wuauserv +if (-not $service) { + Write-Host "Windows Update service not found." + exit 0 +} + +if ($service.Status -eq "Stopped") { + Write-Host "Windows Update service already stopped." +} else { + Write-Host "Stopping Windows Update service." + Stop-Service -Name "wuauserv" -Force +} + +$startup = Get-WmiObject Win32_Service | Where-Object {$_.Name -eq "wuauserv"} | Select -ExpandProperty "StartMode" +if ($startup -ne "Disabled") { + set-service wuauserv -startup disabled +} else { + Write-Host "Windows Update service startup already disabled." +} diff --git a/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/msvc2019.txt b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/msvc2019.txt new file mode 100644 index 00000000..f8d64dd5 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/msvc2019.txt @@ -0,0 +1,77 @@ +### Visual Studio 2019 ### +Visual Studio 2019 version 16.11.34 was installed manually using installer: http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__505064367.1547034421.exe + +Installed MSVC-2019 Components: + +.NET Framework 4.5 targeting pack +.NET Framework 4.5.1 targeting pack +.NET Framework 4.5.2 targeting pack +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.8 SDK +.NET Framework 4.8 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data typer for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL ADAL runtime +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2016 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2019 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v142 build tools (14.29-16.10) +MSBuild +MSVC v142 - VS 2019 C++ ARM build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ ARM64 build tools (Latest) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.20) +MSVC v142 - VS 2019 C++ ARM64 build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.20) +MSVC v142 - VS 2019 C++ x64/x86 build tools (v14.29-16.10) +MSVC v142 - VS 2019 C++ x64/x86 build tools (Latest) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v142 build tools (ARM) +C++ ATL for latest v142 build tools (ARM64) +C++ ATL for latest v142 build tools (x86 & x64) +TypeScript 4.3 SDK +Windows 10 SDK (10.0.16299.0) +Windows 10 SDK (10.0.17134.0) +Windows 10 SDK (10.0.17763.0) +Windows 10 SDK (10.0.18362.0) +Windows 10 SDK (10.0.19041.0) +Windows 10 SDK (10.0.20348.0) +Windows 11 SDK (10.0.22000.0) + +# NOTE! Work loads were added during installation! + +############################################################ +### Visual Studio 2019 build tools ### + +Visual studio 2019 build tools version 16.11.34 was installed manually using installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_buildtools__251503345.1575372514.exe" + * Only default installation, no additional selections (MSBuild Tools) + +############################################################ +### Debugging tools ### + +* Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' +############################################################ diff --git a/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/msvc2022.txt b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/msvc2022.txt new file mode 100644 index 00000000..a5a0c412 --- /dev/null +++ b/coin/pre-provisioning/qtci-windows-11_23H2-x86_64/msvc2022.txt @@ -0,0 +1,74 @@ +### Visual Studio 2022 Official release ### +Visual Studio 2022 version 17.9.1 was installed manually using installer: http://ci-files01-hki.ci.qt.io/input/windows/vs_professional__msvc2022_1339502178.1525841376.exe + +Installed MSVC-2022 Components: + +.NET Framework 4.6.1 SDK +.NET Framework 4.6.1 targeting pack +.NET Framework 4.6.2 SDK +.NET Framework 4.6.2 targeting pack +.NET Framework 4.8 SDK +.NET Framework 4.8 targeting pack +.NET Native +.NET Portable Library targeting pack +CLR data types for SQL Sever +Connectivity and publishing tools +Data sources for SQL Server support +SQL Server Command Linne Utilities +SQL Server Data Tools +SQL Server Express 2019 LocalDB +SQL Server ODBC Driver +ClickOnce Publishing +Developer Analytics tools +NuGet package manager +Text Template Transformation +C# and Visual Basic Roslyn compilers +C++ 2022 Redistributable Update +C++ Cmake tools for Windows +C++/CLI support for v143 build tools (14.30-17.0) +C++/CLI support for v143 build tools (Latest) +MSBuild +MSVC v143 - VS 2022 C++ ARM build tools (Latest) +MSVC v143 - VS 2022 C++ ARM build tools (v14.30-17.0) +MSVC v143 - VS 2022 C++ ARM64/ARM64EC build tools (Latest) +MSVC v143 - VS 2022 C++ ARM64 build tools (v14.30-17.0) +MSVC v143 - VS 2022 C++ x64/x86 build tools (Latest) +MSVC v143 - VS 2022 C++ x64/x86 build tools (v14.30-17.0) +.NET profiling tools +C++ profiling tools +JavaScript diagnostics +Just-In-Time debugger +C# and Visual Basic +C++ core features +JavaSript and TypeScript language support +Razor Language Services +Graphics debugger and GPU profiler for DirectX +Image and 3D model editors +C++ ATL for latest v143 build tools (ARM) +C++ ATL for latest v143 build tools (ARM64/ARM64EC) +C++ ATL for latest v143 build tools (x86 & x64) +TypeScript 4.7 SDK - Deprecated, was not in components anymore. Downloaded 4.7.4 from VS marketplace +https://marketplace.visualstudio.com/items?itemName=TypeScriptTeam.typescript-474 +TypeScript Server +Windows 10 SDK (10.0.18362.0) +Windows 10 SDK (10.0.19041.0) +Windows 10 SDK (10.0.20348.0) +Windows 11 SDK (10.0.22000.0) +Windows 11 SDK (10.0.22621.0) +Windows Universal C Runtime + +# NOTE! Work loads were added during installation! + +############################################################ +### Visual Studio 2022 build tools ### + + Visual studio 2022 build tools version 17.9.1 was installed manually using installer: "http://ci-files01-hki.ci.qt.io/input/windows/vs_BuildTools_msvc2022.exe" + * Only default installation, no additional selections + +############################################################ +### Debugging tools ### + +* Check that debugging tools are installed + * Modify 'Windows Software Development Kit - Windows 10.0.18362.1' from 'Add or remove programs' + - Add feature 'Debugging Tools for Windows' +############################################################ |