root / image_creator / os_type / windows.py @ 53e791bf
History | View | Annotate | Download (26.2 kB)
1 | 121f3bc0 | Nikos Skalkotos | # -*- coding: utf-8 -*-
|
---|---|---|---|
2 | 121f3bc0 | Nikos Skalkotos | #
|
3 | ae48a082 | Nikos Skalkotos | # Copyright 2012 GRNET S.A. All rights reserved.
|
4 | ae48a082 | Nikos Skalkotos | #
|
5 | ae48a082 | Nikos Skalkotos | # Redistribution and use in source and binary forms, with or
|
6 | ae48a082 | Nikos Skalkotos | # without modification, are permitted provided that the following
|
7 | ae48a082 | Nikos Skalkotos | # conditions are met:
|
8 | ae48a082 | Nikos Skalkotos | #
|
9 | ae48a082 | Nikos Skalkotos | # 1. Redistributions of source code must retain the above
|
10 | ae48a082 | Nikos Skalkotos | # copyright notice, this list of conditions and the following
|
11 | ae48a082 | Nikos Skalkotos | # disclaimer.
|
12 | ae48a082 | Nikos Skalkotos | #
|
13 | ae48a082 | Nikos Skalkotos | # 2. Redistributions in binary form must reproduce the above
|
14 | ae48a082 | Nikos Skalkotos | # copyright notice, this list of conditions and the following
|
15 | ae48a082 | Nikos Skalkotos | # disclaimer in the documentation and/or other materials
|
16 | ae48a082 | Nikos Skalkotos | # provided with the distribution.
|
17 | ae48a082 | Nikos Skalkotos | #
|
18 | ae48a082 | Nikos Skalkotos | # THIS SOFTWARE IS PROVIDED BY GRNET S.A. ``AS IS'' AND ANY EXPRESS
|
19 | ae48a082 | Nikos Skalkotos | # OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
|
20 | ae48a082 | Nikos Skalkotos | # WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
21 | ae48a082 | Nikos Skalkotos | # PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL GRNET S.A OR
|
22 | ae48a082 | Nikos Skalkotos | # CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
23 | ae48a082 | Nikos Skalkotos | # SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
24 | ae48a082 | Nikos Skalkotos | # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
|
25 | ae48a082 | Nikos Skalkotos | # USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
|
26 | ae48a082 | Nikos Skalkotos | # AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
27 | ae48a082 | Nikos Skalkotos | # LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
|
28 | ae48a082 | Nikos Skalkotos | # ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
29 | ae48a082 | Nikos Skalkotos | # POSSIBILITY OF SUCH DAMAGE.
|
30 | ae48a082 | Nikos Skalkotos | #
|
31 | ae48a082 | Nikos Skalkotos | # The views and conclusions contained in the software and
|
32 | ae48a082 | Nikos Skalkotos | # documentation are those of the authors and should not be
|
33 | ae48a082 | Nikos Skalkotos | # interpreted as representing official policies, either expressed
|
34 | ae48a082 | Nikos Skalkotos | # or implied, of GRNET S.A.
|
35 | ae48a082 | Nikos Skalkotos | |
36 | 121f3bc0 | Nikos Skalkotos | """This module hosts OS-specific code common for the various Microsoft
|
37 | 121f3bc0 | Nikos Skalkotos | Windows OSs."""
|
38 | 121f3bc0 | Nikos Skalkotos | |
39 | 55133880 | Nikos Skalkotos | from image_creator.os_type import OSBase, sysprep |
40 | c50c5ae7 | Nikos Skalkotos | from image_creator.util import FatalError, check_guestfs_version, get_command |
41 | aa2062ba | Nikos Skalkotos | |
42 | 76b200cf | Nikos Skalkotos | import hivex |
43 | 76b200cf | Nikos Skalkotos | import tempfile |
44 | 76b200cf | Nikos Skalkotos | import os |
45 | c50c5ae7 | Nikos Skalkotos | import time |
46 | c50c5ae7 | Nikos Skalkotos | import random |
47 | 0db17fcf | Nikos Skalkotos | import string |
48 | 12c97404 | Nikos Skalkotos | import subprocess |
49 | 28d354ce | Nikos Skalkotos | import struct |
50 | c50c5ae7 | Nikos Skalkotos | |
51 | c50c5ae7 | Nikos Skalkotos | kvm = get_command('kvm')
|
52 | 76b200cf | Nikos Skalkotos | |
53 | 0db17fcf | Nikos Skalkotos | BOOT_TIMEOUT = 300
|
54 | 0db17fcf | Nikos Skalkotos | |
55 | 53e791bf | Nikos Skalkotos | # For more info see: http://technet.microsoft.com/en-us/library/jj612867.aspx
|
56 | 53e791bf | Nikos Skalkotos | KMS_CLIENT_SETUP_KEYS = { |
57 | 53e791bf | Nikos Skalkotos | "Windows 8 Professional": "NG4HW-VH26C-733KW-K6F98-J8CK4", |
58 | 53e791bf | Nikos Skalkotos | "Windows 8 Professional N": "XCVCF-2NXM9-723PB-MHCB7-2RYQQ", |
59 | 53e791bf | Nikos Skalkotos | "Windows 8 Enterprise": "32JNW-9KQ84-P47T8-D8GGY-CWCK7", |
60 | 53e791bf | Nikos Skalkotos | "Windows 8 Enterprise N": "JMNMF-RHW7P-DMY6X-RF3DR-X2BQT", |
61 | 53e791bf | Nikos Skalkotos | "Windows Server 2012 Core": "BN3D2-R7TKB-3YPBD-8DRP2-27GG4", |
62 | 53e791bf | Nikos Skalkotos | "Windows Server 2012 Core N": "8N2M2-HWPGY-7PGT9-HGDD8-GVGGY", |
63 | 53e791bf | Nikos Skalkotos | "Windows Server 2012 Core Single Language":
|
64 | 53e791bf | Nikos Skalkotos | "2WN2H-YGCQR-KFX6K-CD6TF-84YXQ",
|
65 | 53e791bf | Nikos Skalkotos | "Windows Server 2012 Core Country Specific":
|
66 | 53e791bf | Nikos Skalkotos | "4K36P-JN4VD-GDC6V-KDT89-DYFKP",
|
67 | 53e791bf | Nikos Skalkotos | "Windows Server 2012 Server Standard": "XC9B7-NBPP2-83J2H-RHMBY-92BT4", |
68 | 53e791bf | Nikos Skalkotos | "Windows Server 2012 Standard Core": "XC9B7-NBPP2-83J2H-RHMBY-92BT4", |
69 | 53e791bf | Nikos Skalkotos | "Windows Server 2012 MultiPoint Standard": "HM7DN-YVMH3-46JC3-XYTG7-CYQJJ", |
70 | 53e791bf | Nikos Skalkotos | "Windows Server 2012 MultiPoint Premium": "XNH6W-2V9GX-RGJ4K-Y8X6F-QGJ2G", |
71 | 53e791bf | Nikos Skalkotos | "Windows Server 2012 Datacenter": "48HP8-DN98B-MYWDG-T2DCC-8W83P", |
72 | 53e791bf | Nikos Skalkotos | "Windows Server 2012 Datacenter Core": "48HP8-DN98B-MYWDG-T2DCC-8W83P", |
73 | 53e791bf | Nikos Skalkotos | "Windows 7 Professional": "FJ82H-XT6CR-J8D7P-XQJJ2-GPDD4", |
74 | 53e791bf | Nikos Skalkotos | "Windows 7 Professional N": "MRPKT-YTG23-K7D7T-X2JMM-QY7MG", |
75 | 53e791bf | Nikos Skalkotos | "Windows 7 Professional E": "W82YF-2Q76Y-63HXB-FGJG9-GF7QX", |
76 | 53e791bf | Nikos Skalkotos | "Windows 7 Enterprise": "33PXH-7Y6KF-2VJC9-XBBR8-HVTHH", |
77 | 53e791bf | Nikos Skalkotos | "Windows 7 Enterprise N": "YDRBP-3D83W-TY26F-D46B2-XCKRJ", |
78 | 53e791bf | Nikos Skalkotos | "Windows 7 Enterprise E": "C29WB-22CC8-VJ326-GHFJW-H9DH4", |
79 | 53e791bf | Nikos Skalkotos | "Windows Server 2008 R2 Web": "6TPJF-RBVHG-WBW2R-86QPH-6RTM4", |
80 | 53e791bf | Nikos Skalkotos | "Windows Server 2008 R2 HPC edition": "TT8MH-CG224-D3D7Q-498W2-9QCTX", |
81 | 53e791bf | Nikos Skalkotos | "Windows Server 2008 R2 Standard": "YC6KT-GKW9T-YTKYR-T4X34-R7VHC", |
82 | 53e791bf | Nikos Skalkotos | "Windows Server 2008 R2 Enterprise": "489J6-VHDMP-X63PK-3K798-CPX3Y", |
83 | 53e791bf | Nikos Skalkotos | "Windows Server 2008 R2 Datacenter": "74YFP-3QFB3-KQT8W-PMXWJ-7M648", |
84 | 53e791bf | Nikos Skalkotos | "Windows Server 2008 R2 for Itanium-based Systems":
|
85 | 53e791bf | Nikos Skalkotos | "GT63C-RJFQ3-4GMB6-BRFB9-CB83V",
|
86 | 53e791bf | Nikos Skalkotos | "Windows Vista Business": "YFKBB-PQJJV-G996G-VWGXY-2V3X8", |
87 | 53e791bf | Nikos Skalkotos | "Windows Vista Business N": "HMBQG-8H2RH-C77VX-27R82-VMQBT", |
88 | 53e791bf | Nikos Skalkotos | "Windows Vista Enterprise": "VKK3X-68KWM-X2YGT-QR4M6-4BWMV", |
89 | 53e791bf | Nikos Skalkotos | "Windows Vista Enterprise N": "VTC42-BM838-43QHV-84HX6-XJXKV", |
90 | 53e791bf | Nikos Skalkotos | "Windows Web Server 2008": "WYR28-R7TFJ-3X2YQ-YCY4H-M249D", |
91 | 53e791bf | Nikos Skalkotos | "Windows Server 2008 Standard": "TM24T-X9RMF-VWXK6-X8JC9-BFGM2", |
92 | 53e791bf | Nikos Skalkotos | "Windows Server 2008 Standard without Hyper-V":
|
93 | 53e791bf | Nikos Skalkotos | "W7VD6-7JFBR-RX26B-YKQ3Y-6FFFJ",
|
94 | 53e791bf | Nikos Skalkotos | "Windows Server 2008 Enterprise":
|
95 | 53e791bf | Nikos Skalkotos | "YQGMW-MPWTJ-34KDK-48M3W-X4Q6V",
|
96 | 53e791bf | Nikos Skalkotos | "Windows Server 2008 Enterprise without Hyper-V":
|
97 | 53e791bf | Nikos Skalkotos | "39BXF-X8Q23-P2WWT-38T2F-G3FPG",
|
98 | 53e791bf | Nikos Skalkotos | "Windows Server 2008 HPC": "RCTX3-KWVHP-BR6TB-RB6DM-6X7HP", |
99 | 53e791bf | Nikos Skalkotos | "Windows Server 2008 Datacenter": "7M67G-PC374-GR742-YH8V4-TCBY3", |
100 | 53e791bf | Nikos Skalkotos | "Windows Server 2008 Datacenter without Hyper-V":
|
101 | 53e791bf | Nikos Skalkotos | "22XQ2-VRXRG-P8D42-K34TD-G3QQC",
|
102 | 53e791bf | Nikos Skalkotos | "Windows Server 2008 for Itanium-Based Systems":
|
103 | 53e791bf | Nikos Skalkotos | "4DWFP-JF3DJ-B7DTH-78FJB-PDRHK"}
|
104 | 53e791bf | Nikos Skalkotos | |
105 | 8c574358 | Nikos Skalkotos | |
106 | aa2062ba | Nikos Skalkotos | class Windows(OSBase): |
107 | 88f83027 | Nikos Skalkotos | """OS class for Windows"""
|
108 | 670ea7e3 | Nikos Skalkotos | def __init__(self, image, **kargs): |
109 | 670ea7e3 | Nikos Skalkotos | super(Windows, self).__init__(image, **kargs) |
110 | 670ea7e3 | Nikos Skalkotos | |
111 | 670ea7e3 | Nikos Skalkotos | device = self.g.part_to_dev(self.root) |
112 | 670ea7e3 | Nikos Skalkotos | |
113 | 670ea7e3 | Nikos Skalkotos | self.last_part_num = self.g.part_list(device)[-1]['part_num'] |
114 | 670ea7e3 | Nikos Skalkotos | self.last_drive = None |
115 | 670ea7e3 | Nikos Skalkotos | self.system_drive = None |
116 | 670ea7e3 | Nikos Skalkotos | |
117 | 670ea7e3 | Nikos Skalkotos | for drive, partition in self.g.inspect_get_drive_mappings(self.root): |
118 | 670ea7e3 | Nikos Skalkotos | if partition == "%s%d" % (device, self.last_part_num): |
119 | 670ea7e3 | Nikos Skalkotos | self.last_drive = drive
|
120 | 670ea7e3 | Nikos Skalkotos | if partition == self.root: |
121 | 670ea7e3 | Nikos Skalkotos | self.system_drive = drive
|
122 | 670ea7e3 | Nikos Skalkotos | |
123 | 670ea7e3 | Nikos Skalkotos | assert self.system_drive |
124 | 76b200cf | Nikos Skalkotos | |
125 | 53e791bf | Nikos Skalkotos | self.product_name = self.g.inspect_get_product_name(self.root) |
126 | 53e791bf | Nikos Skalkotos | |
127 | 12c97404 | Nikos Skalkotos | def needed_sysprep_params(self): |
128 | 12c97404 | Nikos Skalkotos | """Returns a list of needed sysprep parameters. Each element in the
|
129 | 12c97404 | Nikos Skalkotos | list is a SysprepParam object.
|
130 | 12c97404 | Nikos Skalkotos | """
|
131 | 12c97404 | Nikos Skalkotos | password = self.SysprepParam(
|
132 | 12c97404 | Nikos Skalkotos | 'password', 'Image Administrator Password', 20, lambda x: True) |
133 | 12c97404 | Nikos Skalkotos | |
134 | 12c97404 | Nikos Skalkotos | return [password]
|
135 | 12c97404 | Nikos Skalkotos | |
136 | 173022fb | Nikos Skalkotos | @sysprep('Disabling IPv6 privacy extensions') |
137 | 173022fb | Nikos Skalkotos | def disable_ipv6_privacy_extensions(self): |
138 | 12c97404 | Nikos Skalkotos | """Disable IPv6 privacy extensions"""
|
139 | 12c97404 | Nikos Skalkotos | |
140 | 0db17fcf | Nikos Skalkotos | self._guest_exec('netsh interface ipv6 set global ' |
141 | 0db17fcf | Nikos Skalkotos | 'randomizeidentifiers=disabled store=persistent')
|
142 | 12c97404 | Nikos Skalkotos | |
143 | 32e21ab7 | Nikos Skalkotos | @sysprep('Disabling Teredo interface') |
144 | 32e21ab7 | Nikos Skalkotos | def disable_teredo(self): |
145 | 32e21ab7 | Nikos Skalkotos | """Disable Teredo interface"""
|
146 | 32e21ab7 | Nikos Skalkotos | |
147 | 32e21ab7 | Nikos Skalkotos | self._guest_exec('netsh interface teredo set state disabled') |
148 | 32e21ab7 | Nikos Skalkotos | |
149 | 32e21ab7 | Nikos Skalkotos | @sysprep('Disabling ISATAP Adapters') |
150 | 32e21ab7 | Nikos Skalkotos | def disable_isatap(self): |
151 | 32e21ab7 | Nikos Skalkotos | """Disable ISATAP Adapters"""
|
152 | 32e21ab7 | Nikos Skalkotos | |
153 | 32e21ab7 | Nikos Skalkotos | self._guest_exec('netsh interface isa set state disabled') |
154 | 32e21ab7 | Nikos Skalkotos | |
155 | 32e21ab7 | Nikos Skalkotos | @sysprep('Enabling ping responses') |
156 | 32e21ab7 | Nikos Skalkotos | def enable_pings(self): |
157 | 32e21ab7 | Nikos Skalkotos | """Enable ping responces"""
|
158 | 32e21ab7 | Nikos Skalkotos | |
159 | 32e21ab7 | Nikos Skalkotos | self._guest_exec('netsh firewall set icmpsetting 8') |
160 | 32e21ab7 | Nikos Skalkotos | |
161 | 38cf4599 | Nikos Skalkotos | @sysprep('Disabling hibernation support') |
162 | 38cf4599 | Nikos Skalkotos | def disable_hibernation(self): |
163 | 38cf4599 | Nikos Skalkotos | """Disable hibernation support and remove the hibernation file"""
|
164 | 38cf4599 | Nikos Skalkotos | |
165 | 38cf4599 | Nikos Skalkotos | self._guest_exec(r'powercfg.exe /hibernate off') |
166 | 38cf4599 | Nikos Skalkotos | |
167 | 32e21ab7 | Nikos Skalkotos | @sysprep('Setting the system clock to UTC') |
168 | 32e21ab7 | Nikos Skalkotos | def utc(self): |
169 | 32e21ab7 | Nikos Skalkotos | """Set the hardware clock to UTC"""
|
170 | 32e21ab7 | Nikos Skalkotos | |
171 | 32e21ab7 | Nikos Skalkotos | path = r'HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation'
|
172 | 32e21ab7 | Nikos Skalkotos | self._guest_exec(
|
173 | 32e21ab7 | Nikos Skalkotos | r'REG ADD %s /v RealTimeIsUniversal /t REG_DWORD /d 1 /f' % path)
|
174 | 32e21ab7 | Nikos Skalkotos | |
175 | 9703f342 | Nikos Skalkotos | @sysprep('Clearing the event logs') |
176 | 9703f342 | Nikos Skalkotos | def clear_logs(self): |
177 | 9703f342 | Nikos Skalkotos | """Clear all the event logs"""
|
178 | 9703f342 | Nikos Skalkotos | |
179 | 9703f342 | Nikos Skalkotos | self._guest_exec(
|
180 | 9703f342 | Nikos Skalkotos | r"cmd /q /c for /f %l in ('wevtutil el') do wevtutil cl %l")
|
181 | 9703f342 | Nikos Skalkotos | |
182 | 173022fb | Nikos Skalkotos | @sysprep('Executing sysprep on the image (may take more that 10 minutes)') |
183 | 173022fb | Nikos Skalkotos | def microsoft_sysprep(self): |
184 | 32e21ab7 | Nikos Skalkotos | """Run the Microsoft System Preparation Tool. This will remove
|
185 | 32e21ab7 | Nikos Skalkotos | system-specific data and will make the image ready to be deployed.
|
186 | 32e21ab7 | Nikos Skalkotos | After this no other task may run.
|
187 | 12c97404 | Nikos Skalkotos | """
|
188 | 12c97404 | Nikos Skalkotos | |
189 | 0db17fcf | Nikos Skalkotos | self._guest_exec(r'C:\Windows\system32\sysprep\sysprep ' |
190 | 0db17fcf | Nikos Skalkotos | r'/quiet /generalize /oobe /shutdown')
|
191 | 12c97404 | Nikos Skalkotos | self.syspreped = True |
192 | c50c5ae7 | Nikos Skalkotos | |
193 | 53e791bf | Nikos Skalkotos | @sysprep('Converting the image into a KMS client', enabled=False) |
194 | 53e791bf | Nikos Skalkotos | def kms_client_setup(self): |
195 | 53e791bf | Nikos Skalkotos | """Install the appropriate KMS client setup key to the image to convert
|
196 | 53e791bf | Nikos Skalkotos | it to a KMS client. Computers that are running volume licensing
|
197 | 53e791bf | Nikos Skalkotos | editions of Windows 8, Windows Server 2012, Windows 7, Windows Server
|
198 | 53e791bf | Nikos Skalkotos | 2008 R2, Windows Vista, and Windows Server 2008 are, by default, KMS
|
199 | 53e791bf | Nikos Skalkotos | clients with no additional configuration needed.
|
200 | 53e791bf | Nikos Skalkotos | """
|
201 | 53e791bf | Nikos Skalkotos | try:
|
202 | 53e791bf | Nikos Skalkotos | setup_key = KMS_CLIENT_SETUP_KEYS[self.product_name]
|
203 | 53e791bf | Nikos Skalkotos | except KeyError: |
204 | 53e791bf | Nikos Skalkotos | self.out.warn(
|
205 | 53e791bf | Nikos Skalkotos | "Don't know the KMS client setup key for product: `%s'" %
|
206 | 53e791bf | Nikos Skalkotos | self.product_name)
|
207 | 53e791bf | Nikos Skalkotos | return
|
208 | 53e791bf | Nikos Skalkotos | |
209 | 53e791bf | Nikos Skalkotos | self._guest_exec(
|
210 | 53e791bf | Nikos Skalkotos | "cscript \Windows\system32\slmgr.vbs /ipk %s" % setup_key)
|
211 | 53e791bf | Nikos Skalkotos | |
212 | 670ea7e3 | Nikos Skalkotos | @sysprep('Shrinking the last filesystem') |
213 | 670ea7e3 | Nikos Skalkotos | def shrink(self): |
214 | 670ea7e3 | Nikos Skalkotos | """Shrink the last filesystem. Make sure the filesystem is defragged"""
|
215 | e773df24 | Nikos Skalkotos | |
216 | e773df24 | Nikos Skalkotos | # Query for the maximum number of reclaimable bytes
|
217 | e773df24 | Nikos Skalkotos | cmd = ( |
218 | e773df24 | Nikos Skalkotos | r'cmd /Q /C "SET SCRIPT=%TEMP%\QUERYMAX_%RANDOM%.TXT & ' +
|
219 | e773df24 | Nikos Skalkotos | r'ECHO SELECT DISK 0 > %SCRIPT% & ' +
|
220 | e773df24 | Nikos Skalkotos | 'ECHO SELECT PARTITION %d >> %%SCRIPT%% & ' % self.last_part_num + |
221 | e773df24 | Nikos Skalkotos | r'ECHO SHRINK QUERYMAX >> %SCRIPT% & ' +
|
222 | e773df24 | Nikos Skalkotos | r'ECHO EXIT >> %SCRIPT% & ' +
|
223 | e773df24 | Nikos Skalkotos | r'DISKPART /S %SCRIPT% & ' +
|
224 | e773df24 | Nikos Skalkotos | r'IF ERRORLEVEL 1 EXIT /B 1 & ' +
|
225 | e773df24 | Nikos Skalkotos | r'DEL /Q %SCRIPT%"')
|
226 | e773df24 | Nikos Skalkotos | |
227 | e773df24 | Nikos Skalkotos | stdout, stderr, rc = self._guest_exec(cmd)
|
228 | e773df24 | Nikos Skalkotos | |
229 | e773df24 | Nikos Skalkotos | querymax = None
|
230 | e773df24 | Nikos Skalkotos | for line in stdout.splitlines(): |
231 | e773df24 | Nikos Skalkotos | # diskpart will return something like this:
|
232 | e773df24 | Nikos Skalkotos | #
|
233 | e773df24 | Nikos Skalkotos | # The maximum number of reclaimable bytes is: xxxx MB
|
234 | e773df24 | Nikos Skalkotos | #
|
235 | e773df24 | Nikos Skalkotos | if line.find('reclaimable') >= 0: |
236 | e773df24 | Nikos Skalkotos | querymax = line.split(':')[1].split()[0].strip() |
237 | e773df24 | Nikos Skalkotos | assert querymax.isdigit(), \
|
238 | e773df24 | Nikos Skalkotos | "Number of reclaimable bytes not a number"
|
239 | e773df24 | Nikos Skalkotos | |
240 | e773df24 | Nikos Skalkotos | if querymax is None: |
241 | e773df24 | Nikos Skalkotos | FatalError("Error in shrinking! "
|
242 | e773df24 | Nikos Skalkotos | "Couldn't find the max number of reclaimable bytes!")
|
243 | e773df24 | Nikos Skalkotos | |
244 | e773df24 | Nikos Skalkotos | querymax = int(querymax)
|
245 | e773df24 | Nikos Skalkotos | # From ntfsresize:
|
246 | e773df24 | Nikos Skalkotos | # Practically the smallest shrunken size generally is at around
|
247 | e773df24 | Nikos Skalkotos | # "used space" + (20-200 MB). Please also take into account that
|
248 | e773df24 | Nikos Skalkotos | # Windows might need about 50-100 MB free space left to boot safely.
|
249 | e773df24 | Nikos Skalkotos | # I'll give 100MB extra space just to be sure
|
250 | e773df24 | Nikos Skalkotos | querymax -= 100
|
251 | e773df24 | Nikos Skalkotos | |
252 | e773df24 | Nikos Skalkotos | if querymax < 0: |
253 | e773df24 | Nikos Skalkotos | self.out.warn("Not enought available space to shrink the image!") |
254 | e773df24 | Nikos Skalkotos | return
|
255 | e773df24 | Nikos Skalkotos | |
256 | e773df24 | Nikos Skalkotos | cmd = ( |
257 | e773df24 | Nikos Skalkotos | r'cmd /Q /C "SET SCRIPT=%TEMP%\QUERYMAX_%RANDOM%.TXT & ' +
|
258 | e773df24 | Nikos Skalkotos | r'ECHO SELECT DISK 0 > %SCRIPT% & ' +
|
259 | e773df24 | Nikos Skalkotos | 'ECHO SELECT PARTITION %d >> %%SCRIPT%% & ' % self.last_part_num + |
260 | e773df24 | Nikos Skalkotos | 'ECHO SHRINK DESIRED=%d >> %%SCRIPT%% & ' % querymax +
|
261 | e773df24 | Nikos Skalkotos | r'ECHO EXIT >> %SCRIPT% & ' +
|
262 | e773df24 | Nikos Skalkotos | r'DISKPART /S %SCRIPT% & ' +
|
263 | e773df24 | Nikos Skalkotos | r'IF ERRORLEVEL 1 EXIT /B 1 & ' +
|
264 | e773df24 | Nikos Skalkotos | r'DEL /Q %SCRIPT%"')
|
265 | e773df24 | Nikos Skalkotos | |
266 | e773df24 | Nikos Skalkotos | stdout, stderr, rc = self._guest_exec(cmd)
|
267 | e773df24 | Nikos Skalkotos | |
268 | e773df24 | Nikos Skalkotos | for line in stdout.splitlines(): |
269 | e773df24 | Nikos Skalkotos | if line.find('shrunk') >= 0: |
270 | e773df24 | Nikos Skalkotos | self.out.output(line)
|
271 | 670ea7e3 | Nikos Skalkotos | |
272 | 55133880 | Nikos Skalkotos | def do_sysprep(self): |
273 | 55133880 | Nikos Skalkotos | """Prepare system for image creation."""
|
274 | 55133880 | Nikos Skalkotos | |
275 | 55133880 | Nikos Skalkotos | if getattr(self, 'syspreped', False): |
276 | 55133880 | Nikos Skalkotos | raise FatalError("Image is already syspreped!") |
277 | 55133880 | Nikos Skalkotos | |
278 | 12c97404 | Nikos Skalkotos | txt = "System preparation parameter: `%s' is needed but missing!"
|
279 | 12c97404 | Nikos Skalkotos | for param in self.needed_sysprep_params(): |
280 | 12c97404 | Nikos Skalkotos | if param[0] not in self.sysprep_params: |
281 | 12c97404 | Nikos Skalkotos | raise FatalError(txt % param[0]) |
282 | 12c97404 | Nikos Skalkotos | |
283 | 55133880 | Nikos Skalkotos | self.mount(readonly=False) |
284 | 55133880 | Nikos Skalkotos | try:
|
285 | 55133880 | Nikos Skalkotos | disabled_uac = self._update_uac_remote_setting(1) |
286 | 0db17fcf | Nikos Skalkotos | token = self._enable_os_monitor()
|
287 | 010f6b30 | Nikos Skalkotos | |
288 | 010f6b30 | Nikos Skalkotos | # disable the firewalls
|
289 | 010f6b30 | Nikos Skalkotos | firewall_states = self._update_firewalls(0, 0, 0) |
290 | 010f6b30 | Nikos Skalkotos | |
291 | 010f6b30 | Nikos Skalkotos | # Delete the pagefile. It will be recreated when the system boots
|
292 | 010f6b30 | Nikos Skalkotos | systemroot = self.g.inspect_get_windows_systemroot(self.root) |
293 | 010f6b30 | Nikos Skalkotos | pagefile = "%s/pagefile.sys" % systemroot
|
294 | 010f6b30 | Nikos Skalkotos | self.g.rm_rf(self.g.case_sensitive_path(pagefile)) |
295 | 010f6b30 | Nikos Skalkotos | |
296 | 55133880 | Nikos Skalkotos | finally:
|
297 | 55133880 | Nikos Skalkotos | self.umount()
|
298 | 55133880 | Nikos Skalkotos | |
299 | 55133880 | Nikos Skalkotos | self.out.output("Shutting down helper VM ...", False) |
300 | 55133880 | Nikos Skalkotos | self.g.sync()
|
301 | 55133880 | Nikos Skalkotos | # guestfs_shutdown which is the prefered way to shutdown the backend
|
302 | 55133880 | Nikos Skalkotos | # process was introduced in version 1.19.16
|
303 | 55133880 | Nikos Skalkotos | if check_guestfs_version(self.g, 1, 19, 16) >= 0: |
304 | 55133880 | Nikos Skalkotos | ret = self.g.shutdown()
|
305 | 55133880 | Nikos Skalkotos | else:
|
306 | 55133880 | Nikos Skalkotos | ret = self.g.kill_subprocess()
|
307 | 55133880 | Nikos Skalkotos | |
308 | 55133880 | Nikos Skalkotos | self.out.success('done') |
309 | 0db17fcf | Nikos Skalkotos | |
310 | 0db17fcf | Nikos Skalkotos | vm = None
|
311 | 0db17fcf | Nikos Skalkotos | monitor = None
|
312 | 55133880 | Nikos Skalkotos | try:
|
313 | c50c5ae7 | Nikos Skalkotos | self.out.output("Starting windows VM ...", False) |
314 | 0db17fcf | Nikos Skalkotos | monitorfd, monitor = tempfile.mkstemp() |
315 | 0db17fcf | Nikos Skalkotos | os.close(monitorfd) |
316 | 0db17fcf | Nikos Skalkotos | vm, display = self._create_vm(monitor)
|
317 | 0db17fcf | Nikos Skalkotos | self.out.success("started (console on vnc display: %d)." % display) |
318 | 0db17fcf | Nikos Skalkotos | |
319 | 0db17fcf | Nikos Skalkotos | self.out.output("Waiting for OS to boot ...", False) |
320 | 0db17fcf | Nikos Skalkotos | if not self._wait_on_file(monitor, token): |
321 | 0db17fcf | Nikos Skalkotos | raise FatalError("Windows booting timed out.") |
322 | 0db17fcf | Nikos Skalkotos | else:
|
323 | c6b84dc4 | Nikos Skalkotos | time.sleep(10) # Just to be sure everything is up |
324 | 0db17fcf | Nikos Skalkotos | self.out.success('done') |
325 | 0db17fcf | Nikos Skalkotos | |
326 | 0db17fcf | Nikos Skalkotos | self.out.output("Disabling automatic logon ...", False) |
327 | 0db17fcf | Nikos Skalkotos | self._disable_autologon()
|
328 | c50c5ae7 | Nikos Skalkotos | self.out.success('done') |
329 | 12c97404 | Nikos Skalkotos | |
330 | 0db17fcf | Nikos Skalkotos | self.out.output('Preparing system from image creation:') |
331 | 0db17fcf | Nikos Skalkotos | |
332 | 12c97404 | Nikos Skalkotos | tasks = self.list_syspreps()
|
333 | 12c97404 | Nikos Skalkotos | enabled = filter(lambda x: x.enabled, tasks) |
334 | 12c97404 | Nikos Skalkotos | size = len(enabled)
|
335 | 12c97404 | Nikos Skalkotos | |
336 | 670ea7e3 | Nikos Skalkotos | # Make sure shrink runs in the end, before ms sysprep
|
337 | 670ea7e3 | Nikos Skalkotos | enabled = filter(lambda x: self.sysprep_info(x).name != 'shrink', |
338 | 670ea7e3 | Nikos Skalkotos | enabled) |
339 | 670ea7e3 | Nikos Skalkotos | |
340 | 670ea7e3 | Nikos Skalkotos | shrink_enabled = False
|
341 | 670ea7e3 | Nikos Skalkotos | if len(enabled) != size: |
342 | 670ea7e3 | Nikos Skalkotos | enabled.append(self.shrink)
|
343 | 670ea7e3 | Nikos Skalkotos | shrink_enabled = True
|
344 | 670ea7e3 | Nikos Skalkotos | |
345 | 12c97404 | Nikos Skalkotos | # Make sure the ms sysprep is the last task to run if it is enabled
|
346 | 12c97404 | Nikos Skalkotos | enabled = filter(
|
347 | 670ea7e3 | Nikos Skalkotos | lambda x: self.sysprep_info(x).name != 'microsoft-sysprep', |
348 | 670ea7e3 | Nikos Skalkotos | enabled) |
349 | 12c97404 | Nikos Skalkotos | |
350 | 12c97404 | Nikos Skalkotos | ms_sysprep_enabled = False
|
351 | 12c97404 | Nikos Skalkotos | if len(enabled) != size: |
352 | 32e21ab7 | Nikos Skalkotos | enabled.append(self.microsoft_sysprep)
|
353 | 12c97404 | Nikos Skalkotos | ms_sysprep_enabled = True
|
354 | 12c97404 | Nikos Skalkotos | |
355 | 12c97404 | Nikos Skalkotos | cnt = 0
|
356 | 12c97404 | Nikos Skalkotos | for task in enabled: |
357 | 12c97404 | Nikos Skalkotos | cnt += 1
|
358 | 12c97404 | Nikos Skalkotos | self.out.output(('(%d/%d)' % (cnt, size)).ljust(7), False) |
359 | 12c97404 | Nikos Skalkotos | task() |
360 | 12c97404 | Nikos Skalkotos | setattr(task.im_func, 'executed', True) |
361 | 12c97404 | Nikos Skalkotos | |
362 | 010f6b30 | Nikos Skalkotos | self.out.output("Sending shut down command ...", False) |
363 | 12c97404 | Nikos Skalkotos | if not ms_sysprep_enabled: |
364 | 12c97404 | Nikos Skalkotos | self._shutdown()
|
365 | 0db17fcf | Nikos Skalkotos | self.out.success("done") |
366 | 12c97404 | Nikos Skalkotos | |
367 | 010f6b30 | Nikos Skalkotos | self.out.output("Waiting for windows to shut down ...", False) |
368 | c50c5ae7 | Nikos Skalkotos | vm.wait() |
369 | 010f6b30 | Nikos Skalkotos | self.out.success("done") |
370 | 55133880 | Nikos Skalkotos | finally:
|
371 | 0db17fcf | Nikos Skalkotos | if monitor is not None: |
372 | 0db17fcf | Nikos Skalkotos | os.unlink(monitor) |
373 | 0db17fcf | Nikos Skalkotos | |
374 | 0db17fcf | Nikos Skalkotos | if vm is not None: |
375 | 0db17fcf | Nikos Skalkotos | self._destroy_vm(vm)
|
376 | 12c97404 | Nikos Skalkotos | |
377 | 55133880 | Nikos Skalkotos | self.out.output("Relaunching helper VM (may take a while) ...", |
378 | 55133880 | Nikos Skalkotos | False)
|
379 | 55133880 | Nikos Skalkotos | self.g.launch()
|
380 | 55133880 | Nikos Skalkotos | self.out.success('done') |
381 | 55133880 | Nikos Skalkotos | |
382 | 010f6b30 | Nikos Skalkotos | self.mount(readonly=False) |
383 | 010f6b30 | Nikos Skalkotos | try:
|
384 | 010f6b30 | Nikos Skalkotos | if disabled_uac:
|
385 | 010f6b30 | Nikos Skalkotos | self._update_uac_remote_setting(0) |
386 | 010f6b30 | Nikos Skalkotos | |
387 | 010f6b30 | Nikos Skalkotos | self._update_firewalls(*firewall_states)
|
388 | 010f6b30 | Nikos Skalkotos | finally:
|
389 | 010f6b30 | Nikos Skalkotos | self.umount()
|
390 | 55133880 | Nikos Skalkotos | |
391 | 0db17fcf | Nikos Skalkotos | def _create_vm(self, monitor): |
392 | 0db17fcf | Nikos Skalkotos | """Create a VM with the image attached as the disk
|
393 | 0db17fcf | Nikos Skalkotos |
|
394 | 0db17fcf | Nikos Skalkotos | monitor: a file to be used to monitor when the OS is up
|
395 | 0db17fcf | Nikos Skalkotos | """
|
396 | 0db17fcf | Nikos Skalkotos | |
397 | 0db17fcf | Nikos Skalkotos | def random_mac(): |
398 | 0db17fcf | Nikos Skalkotos | mac = [0x00, 0x16, 0x3e, |
399 | 0db17fcf | Nikos Skalkotos | random.randint(0x00, 0x7f), |
400 | 0db17fcf | Nikos Skalkotos | random.randint(0x00, 0xff), |
401 | 0db17fcf | Nikos Skalkotos | random.randint(0x00, 0xff)] |
402 | 0db17fcf | Nikos Skalkotos | |
403 | 0db17fcf | Nikos Skalkotos | return ':'.join(map(lambda x: "%02x" % x, mac)) |
404 | 0db17fcf | Nikos Skalkotos | |
405 | 0db17fcf | Nikos Skalkotos | # Use ganeti's VNC port range for a random vnc port
|
406 | 0db17fcf | Nikos Skalkotos | vnc_port = random.randint(11000, 14999) |
407 | 0db17fcf | Nikos Skalkotos | display = vnc_port - 5900
|
408 | 0db17fcf | Nikos Skalkotos | |
409 | 670ea7e3 | Nikos Skalkotos | vm = kvm( |
410 | 670ea7e3 | Nikos Skalkotos | '-smp', '1', '-m', '1024', '-drive', |
411 | 670ea7e3 | Nikos Skalkotos | 'file=%s,format=raw,cache=unsafe,if=virtio' % self.image.device, |
412 | 670ea7e3 | Nikos Skalkotos | '-netdev', 'type=user,hostfwd=tcp::445-:445,id=netdev0', |
413 | 670ea7e3 | Nikos Skalkotos | '-device', 'virtio-net-pci,mac=%s,netdev=netdev0' % random_mac(), |
414 | 670ea7e3 | Nikos Skalkotos | '-vnc', ':%d' % display, '-serial', 'file:%s' % monitor, _bg=True) |
415 | 0db17fcf | Nikos Skalkotos | |
416 | 0db17fcf | Nikos Skalkotos | return vm, display
|
417 | 0db17fcf | Nikos Skalkotos | |
418 | 0db17fcf | Nikos Skalkotos | def _destroy_vm(self, vm): |
419 | 0db17fcf | Nikos Skalkotos | """Destroy a VM previously created by _create_vm"""
|
420 | 0db17fcf | Nikos Skalkotos | if vm.process.alive:
|
421 | 0db17fcf | Nikos Skalkotos | vm.terminate() |
422 | 0db17fcf | Nikos Skalkotos | |
423 | 12c97404 | Nikos Skalkotos | def _shutdown(self): |
424 | 12c97404 | Nikos Skalkotos | """Shuts down the windows VM"""
|
425 | 0db17fcf | Nikos Skalkotos | self._guest_exec(r'shutdown /s /t 5') |
426 | 12c97404 | Nikos Skalkotos | |
427 | 0db17fcf | Nikos Skalkotos | def _wait_on_file(self, fname, msg): |
428 | 0db17fcf | Nikos Skalkotos | """Wait until a message appears on a file"""
|
429 | 12c97404 | Nikos Skalkotos | |
430 | 0db17fcf | Nikos Skalkotos | for i in range(BOOT_TIMEOUT): |
431 | 0db17fcf | Nikos Skalkotos | time.sleep(1)
|
432 | 0db17fcf | Nikos Skalkotos | with open(fname) as f: |
433 | 0db17fcf | Nikos Skalkotos | for line in f: |
434 | 0db17fcf | Nikos Skalkotos | if line.startswith(msg):
|
435 | 0db17fcf | Nikos Skalkotos | return True |
436 | 0db17fcf | Nikos Skalkotos | return False |
437 | 12c97404 | Nikos Skalkotos | |
438 | 0db17fcf | Nikos Skalkotos | def _disable_autologon(self): |
439 | 0db17fcf | Nikos Skalkotos | """Disable automatic logon on the windows image"""
|
440 | 0db17fcf | Nikos Skalkotos | |
441 | 0db17fcf | Nikos Skalkotos | winlogon = \ |
442 | 0db17fcf | Nikos Skalkotos | r'"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"'
|
443 | 0db17fcf | Nikos Skalkotos | |
444 | 0db17fcf | Nikos Skalkotos | self._guest_exec('REG DELETE %s /v DefaultUserName /f' % winlogon) |
445 | 0db17fcf | Nikos Skalkotos | self._guest_exec('REG DELETE %s /v DefaultPassword /f' % winlogon) |
446 | 0db17fcf | Nikos Skalkotos | self._guest_exec('REG DELETE %s /v AutoAdminLogon /f' % winlogon) |
447 | 55133880 | Nikos Skalkotos | |
448 | 55133880 | Nikos Skalkotos | def _registry_file_path(self, regfile): |
449 | 55133880 | Nikos Skalkotos | """Retrieves the case sensitive path to a registry file"""
|
450 | 55133880 | Nikos Skalkotos | |
451 | 55133880 | Nikos Skalkotos | systemroot = self.g.inspect_get_windows_systemroot(self.root) |
452 | 55133880 | Nikos Skalkotos | path = "%s/system32/config/%s" % (systemroot, regfile)
|
453 | 55133880 | Nikos Skalkotos | try:
|
454 | 55133880 | Nikos Skalkotos | path = self.g.case_sensitive_path(path)
|
455 | 55133880 | Nikos Skalkotos | except RuntimeError as e: |
456 | 55133880 | Nikos Skalkotos | raise FatalError("Unable to retrieve registry file: %s. Reason: %s" |
457 | 55133880 | Nikos Skalkotos | % (regfile, str(e)))
|
458 | 55133880 | Nikos Skalkotos | return path
|
459 | 55133880 | Nikos Skalkotos | |
460 | 0db17fcf | Nikos Skalkotos | def _enable_os_monitor(self): |
461 | 0db17fcf | Nikos Skalkotos | """Add a script in the registry that will send a random string to the
|
462 | 0db17fcf | Nikos Skalkotos | first serial port when the windows image finishes booting.
|
463 | 0db17fcf | Nikos Skalkotos | """
|
464 | 0db17fcf | Nikos Skalkotos | |
465 | 0db17fcf | Nikos Skalkotos | token = "".join(random.choice(string.ascii_letters) for x in range(16)) |
466 | 0db17fcf | Nikos Skalkotos | |
467 | 0db17fcf | Nikos Skalkotos | path = self._registry_file_path('SOFTWARE') |
468 | 0db17fcf | Nikos Skalkotos | softwarefd, software = tempfile.mkstemp() |
469 | 0db17fcf | Nikos Skalkotos | try:
|
470 | 0db17fcf | Nikos Skalkotos | os.close(softwarefd) |
471 | 0db17fcf | Nikos Skalkotos | self.g.download(path, software)
|
472 | 0db17fcf | Nikos Skalkotos | |
473 | 0db17fcf | Nikos Skalkotos | h = hivex.Hivex(software, write=True)
|
474 | 0db17fcf | Nikos Skalkotos | |
475 | 0db17fcf | Nikos Skalkotos | # Enable automatic logon.
|
476 | 0db17fcf | Nikos Skalkotos | # This is needed because we need to execute a script that we add in
|
477 | 0db17fcf | Nikos Skalkotos | # the RunOnce registry entry and those programs only get executed
|
478 | 0db17fcf | Nikos Skalkotos | # when a user logs on. There is a RunServicesOnce registry entry
|
479 | 0db17fcf | Nikos Skalkotos | # whose keys get executed in the background when the logon dialog
|
480 | 0db17fcf | Nikos Skalkotos | # box first appears, but they seem to only work with services and
|
481 | 0db17fcf | Nikos Skalkotos | # not arbitrary command line expressions :-(
|
482 | 0db17fcf | Nikos Skalkotos | #
|
483 | 0db17fcf | Nikos Skalkotos | # Instructions on how to turn on automatic logon in Windows can be
|
484 | 0db17fcf | Nikos Skalkotos | # found here: http://support.microsoft.com/kb/324737
|
485 | 0db17fcf | Nikos Skalkotos | #
|
486 | 0db17fcf | Nikos Skalkotos | # Warning: Registry change will not work if the โLogon Bannerโ is
|
487 | 0db17fcf | Nikos Skalkotos | # defined on the server either by a Group Policy object (GPO) or by
|
488 | 0db17fcf | Nikos Skalkotos | # a local policy.
|
489 | 0db17fcf | Nikos Skalkotos | |
490 | 0db17fcf | Nikos Skalkotos | winlogon = h.root() |
491 | 0db17fcf | Nikos Skalkotos | for child in ('Microsoft', 'Windows NT', 'CurrentVersion', |
492 | 0db17fcf | Nikos Skalkotos | 'Winlogon'):
|
493 | 0db17fcf | Nikos Skalkotos | winlogon = h.node_get_child(winlogon, child) |
494 | 0db17fcf | Nikos Skalkotos | |
495 | 0db17fcf | Nikos Skalkotos | h.node_set_value( |
496 | 0db17fcf | Nikos Skalkotos | winlogon, |
497 | 0db17fcf | Nikos Skalkotos | {'key': 'DefaultUserName', 't': 1, |
498 | 0db17fcf | Nikos Skalkotos | 'value': "Administrator".encode('utf-16le')}) |
499 | 0db17fcf | Nikos Skalkotos | h.node_set_value( |
500 | 0db17fcf | Nikos Skalkotos | winlogon, |
501 | 0db17fcf | Nikos Skalkotos | {'key': 'DefaultPassword', 't': 1, |
502 | 0db17fcf | Nikos Skalkotos | 'value': self.sysprep_params['password'].encode('utf-16le')}) |
503 | 0db17fcf | Nikos Skalkotos | h.node_set_value( |
504 | 0db17fcf | Nikos Skalkotos | winlogon, |
505 | 0db17fcf | Nikos Skalkotos | {'key': 'AutoAdminLogon', 't': 1, |
506 | 0db17fcf | Nikos Skalkotos | 'value': "1".encode('utf-16le')}) |
507 | 0db17fcf | Nikos Skalkotos | |
508 | 0db17fcf | Nikos Skalkotos | key = h.root() |
509 | 0db17fcf | Nikos Skalkotos | for child in ('Microsoft', 'Windows', 'CurrentVersion'): |
510 | 0db17fcf | Nikos Skalkotos | key = h.node_get_child(key, child) |
511 | 0db17fcf | Nikos Skalkotos | |
512 | 0db17fcf | Nikos Skalkotos | runonce = h.node_get_child(key, "RunOnce")
|
513 | 0db17fcf | Nikos Skalkotos | if runonce is None: |
514 | 0db17fcf | Nikos Skalkotos | runonce = h.node_add_child(key, "RunOnce")
|
515 | 0db17fcf | Nikos Skalkotos | |
516 | 0db17fcf | Nikos Skalkotos | value = ( |
517 | 0db17fcf | Nikos Skalkotos | r'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe '
|
518 | 0db17fcf | Nikos Skalkotos | r'-ExecutionPolicy RemoteSigned '
|
519 | 0db17fcf | Nikos Skalkotos | r'"&{$port=new-Object System.IO.Ports.SerialPort COM1,9600,'
|
520 | 0db17fcf | Nikos Skalkotos | r'None,8,one;$port.open();$port.WriteLine(\"' + token + r'\");' |
521 | 0db17fcf | Nikos Skalkotos | r'$port.Close()}"').encode('utf-16le') |
522 | 0db17fcf | Nikos Skalkotos | |
523 | 0db17fcf | Nikos Skalkotos | h.node_set_value(runonce, |
524 | 0db17fcf | Nikos Skalkotos | {'key': "BootMonitor", 't': 1, 'value': value}) |
525 | 0db17fcf | Nikos Skalkotos | |
526 | 28d354ce | Nikos Skalkotos | value = ( |
527 | 28d354ce | Nikos Skalkotos | r'REG ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion'
|
528 | 28d354ce | Nikos Skalkotos | r'\policies\system /v LocalAccountTokenFilterPolicy'
|
529 | 28d354ce | Nikos Skalkotos | r' /t REG_DWORD /d 1 /f').encode('utf-16le') |
530 | 28d354ce | Nikos Skalkotos | |
531 | 28d354ce | Nikos Skalkotos | h.node_set_value(runonce, |
532 | 28d354ce | Nikos Skalkotos | {'key': "UpdateRegistry", 't': 1, 'value': value}) |
533 | 28d354ce | Nikos Skalkotos | |
534 | 0db17fcf | Nikos Skalkotos | h.commit(None)
|
535 | 0db17fcf | Nikos Skalkotos | |
536 | 0db17fcf | Nikos Skalkotos | self.g.upload(software, path)
|
537 | 0db17fcf | Nikos Skalkotos | finally:
|
538 | 0db17fcf | Nikos Skalkotos | os.unlink(software) |
539 | 0db17fcf | Nikos Skalkotos | |
540 | 0db17fcf | Nikos Skalkotos | return token
|
541 | 0db17fcf | Nikos Skalkotos | |
542 | 010f6b30 | Nikos Skalkotos | def _update_firewalls(self, domain, public, standard): |
543 | 010f6b30 | Nikos Skalkotos | """Enables or disables the firewall for the Domain, the Public and the
|
544 | 010f6b30 | Nikos Skalkotos | Standard profile. Returns a triplete with the old values.
|
545 | 010f6b30 | Nikos Skalkotos |
|
546 | 010f6b30 | Nikos Skalkotos | 1 will enable a firewall and 0 will disable it
|
547 | 010f6b30 | Nikos Skalkotos | """
|
548 | 010f6b30 | Nikos Skalkotos | |
549 | 010f6b30 | Nikos Skalkotos | if domain not in (0, 1): |
550 | 010f6b30 | Nikos Skalkotos | raise ValueError("Valid values for domain parameter are 0 and 1") |
551 | 010f6b30 | Nikos Skalkotos | |
552 | 010f6b30 | Nikos Skalkotos | if public not in (0, 1): |
553 | 010f6b30 | Nikos Skalkotos | raise ValueError("Valid values for public parameter are 0 and 1") |
554 | 010f6b30 | Nikos Skalkotos | |
555 | 010f6b30 | Nikos Skalkotos | if standard not in (0, 1): |
556 | 010f6b30 | Nikos Skalkotos | raise ValueError("Valid values for standard parameter are 0 and 1") |
557 | 010f6b30 | Nikos Skalkotos | |
558 | 010f6b30 | Nikos Skalkotos | path = self._registry_file_path("SYSTEM") |
559 | 010f6b30 | Nikos Skalkotos | systemfd, system = tempfile.mkstemp() |
560 | 010f6b30 | Nikos Skalkotos | try:
|
561 | 010f6b30 | Nikos Skalkotos | os.close(systemfd) |
562 | 010f6b30 | Nikos Skalkotos | self.g.download(path, system)
|
563 | 010f6b30 | Nikos Skalkotos | |
564 | 010f6b30 | Nikos Skalkotos | h = hivex.Hivex(system, write=True)
|
565 | 010f6b30 | Nikos Skalkotos | |
566 | 010f6b30 | Nikos Skalkotos | select = h.node_get_child(h.root(), 'Select')
|
567 | 010f6b30 | Nikos Skalkotos | current_value = h.node_get_value(select, 'Current')
|
568 | 010f6b30 | Nikos Skalkotos | |
569 | 010f6b30 | Nikos Skalkotos | # expecting a little endian dword
|
570 | 010f6b30 | Nikos Skalkotos | assert h.value_type(current_value)[1] == 4 |
571 | 010f6b30 | Nikos Skalkotos | current = "%03d" % h.value_dword(current_value)
|
572 | 010f6b30 | Nikos Skalkotos | |
573 | 010f6b30 | Nikos Skalkotos | firewall_policy = h.root() |
574 | 010f6b30 | Nikos Skalkotos | for child in ('ControlSet%s' % current, 'services', 'SharedAccess', |
575 | 010f6b30 | Nikos Skalkotos | 'Parameters', 'FirewallPolicy'): |
576 | 010f6b30 | Nikos Skalkotos | firewall_policy = h.node_get_child(firewall_policy, child) |
577 | 010f6b30 | Nikos Skalkotos | |
578 | 010f6b30 | Nikos Skalkotos | old_values = [] |
579 | 010f6b30 | Nikos Skalkotos | new_values = [domain, public, standard] |
580 | 010f6b30 | Nikos Skalkotos | for profile in ('Domain', 'Public', 'Standard'): |
581 | 010f6b30 | Nikos Skalkotos | node = h.node_get_child(firewall_policy, '%sProfile' % profile)
|
582 | 010f6b30 | Nikos Skalkotos | |
583 | 010f6b30 | Nikos Skalkotos | old_value = h.node_get_value(node, 'EnableFirewall')
|
584 | 010f6b30 | Nikos Skalkotos | |
585 | 010f6b30 | Nikos Skalkotos | # expecting a little endian dword
|
586 | 010f6b30 | Nikos Skalkotos | assert h.value_type(old_value)[1] == 4 |
587 | 010f6b30 | Nikos Skalkotos | old_values.append(h.value_dword(old_value)) |
588 | 010f6b30 | Nikos Skalkotos | |
589 | 28d354ce | Nikos Skalkotos | h.node_set_value( |
590 | 28d354ce | Nikos Skalkotos | node, {'key': 'EnableFirewall', 't': 4L, |
591 | 28d354ce | Nikos Skalkotos | 'value': struct.pack("<I", new_values.pop(0))}) |
592 | 010f6b30 | Nikos Skalkotos | |
593 | 010f6b30 | Nikos Skalkotos | h.commit(None)
|
594 | 010f6b30 | Nikos Skalkotos | self.g.upload(system, path)
|
595 | 010f6b30 | Nikos Skalkotos | |
596 | 010f6b30 | Nikos Skalkotos | finally:
|
597 | 010f6b30 | Nikos Skalkotos | os.unlink(system) |
598 | 010f6b30 | Nikos Skalkotos | |
599 | 010f6b30 | Nikos Skalkotos | return old_values
|
600 | 010f6b30 | Nikos Skalkotos | |
601 | 55133880 | Nikos Skalkotos | def _update_uac_remote_setting(self, value): |
602 | 55133880 | Nikos Skalkotos | """Updates the registry key value:
|
603 | 55133880 | Nikos Skalkotos | [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies
|
604 | 55133880 | Nikos Skalkotos | \System]"LocalAccountTokenFilterPolicy"
|
605 | 55133880 | Nikos Skalkotos |
|
606 | 55133880 | Nikos Skalkotos | value = 1 will disable the UAC remote restrictions
|
607 | 55133880 | Nikos Skalkotos | value = 0 will enable the UAC remote restrictions
|
608 | 55133880 | Nikos Skalkotos |
|
609 | 55133880 | Nikos Skalkotos | For more info see here: http://support.microsoft.com/kb/951016
|
610 | 55133880 | Nikos Skalkotos |
|
611 | 55133880 | Nikos Skalkotos | Returns:
|
612 | 55133880 | Nikos Skalkotos | True if the key is changed
|
613 | 55133880 | Nikos Skalkotos | False if the key is unchanged
|
614 | 55133880 | Nikos Skalkotos | """
|
615 | 55133880 | Nikos Skalkotos | |
616 | 55133880 | Nikos Skalkotos | if value not in (0, 1): |
617 | 55133880 | Nikos Skalkotos | raise ValueError("Valid values for value parameter are 0 and 1") |
618 | 55133880 | Nikos Skalkotos | |
619 | 55133880 | Nikos Skalkotos | path = self._registry_file_path('SOFTWARE') |
620 | 55133880 | Nikos Skalkotos | softwarefd, software = tempfile.mkstemp() |
621 | 55133880 | Nikos Skalkotos | try:
|
622 | 55133880 | Nikos Skalkotos | os.close(softwarefd) |
623 | 55133880 | Nikos Skalkotos | self.g.download(path, software)
|
624 | 55133880 | Nikos Skalkotos | |
625 | 55133880 | Nikos Skalkotos | h = hivex.Hivex(software, write=True)
|
626 | 55133880 | Nikos Skalkotos | |
627 | 55133880 | Nikos Skalkotos | key = h.root() |
628 | 55133880 | Nikos Skalkotos | for child in ('Microsoft', 'Windows', 'CurrentVersion', 'Policies', |
629 | 55133880 | Nikos Skalkotos | 'System'):
|
630 | 55133880 | Nikos Skalkotos | key = h.node_get_child(key, child) |
631 | 55133880 | Nikos Skalkotos | |
632 | 55133880 | Nikos Skalkotos | policy = None
|
633 | 55133880 | Nikos Skalkotos | for val in h.node_values(key): |
634 | 55133880 | Nikos Skalkotos | if h.value_key(val) == "LocalAccountTokenFilterPolicy": |
635 | 55133880 | Nikos Skalkotos | policy = val |
636 | 55133880 | Nikos Skalkotos | |
637 | 55133880 | Nikos Skalkotos | if policy is not None: |
638 | 55133880 | Nikos Skalkotos | dword = h.value_dword(policy) |
639 | 55133880 | Nikos Skalkotos | if dword == value:
|
640 | 55133880 | Nikos Skalkotos | return False |
641 | 55133880 | Nikos Skalkotos | elif value == 0: |
642 | 55133880 | Nikos Skalkotos | return False |
643 | 55133880 | Nikos Skalkotos | |
644 | 28d354ce | Nikos Skalkotos | new_value = {'key': "LocalAccountTokenFilterPolicy", 't': 4L, |
645 | 28d354ce | Nikos Skalkotos | 'value': struct.pack("<I", value)} |
646 | 55133880 | Nikos Skalkotos | |
647 | 55133880 | Nikos Skalkotos | h.node_set_value(key, new_value) |
648 | 55133880 | Nikos Skalkotos | h.commit(None)
|
649 | 55133880 | Nikos Skalkotos | |
650 | 55133880 | Nikos Skalkotos | self.g.upload(software, path)
|
651 | 55133880 | Nikos Skalkotos | |
652 | 55133880 | Nikos Skalkotos | finally:
|
653 | 55133880 | Nikos Skalkotos | os.unlink(software) |
654 | 55133880 | Nikos Skalkotos | |
655 | 55133880 | Nikos Skalkotos | return True |
656 | 55133880 | Nikos Skalkotos | |
657 | b8c0848c | Nikos Skalkotos | def _do_collect_metadata(self): |
658 | b8c0848c | Nikos Skalkotos | """Collect metadata about the OS"""
|
659 | b8c0848c | Nikos Skalkotos | super(Windows, self)._do_collect_metadata() |
660 | 76b200cf | Nikos Skalkotos | self.meta["USERS"] = " ".join(self._get_users()) |
661 | 76b200cf | Nikos Skalkotos | |
662 | 76b200cf | Nikos Skalkotos | def _get_users(self): |
663 | 121f3bc0 | Nikos Skalkotos | """Returns a list of users found in the images"""
|
664 | 55133880 | Nikos Skalkotos | path = self._registry_file_path('SAM') |
665 | 76b200cf | Nikos Skalkotos | samfd, sam = tempfile.mkstemp() |
666 | 76b200cf | Nikos Skalkotos | try:
|
667 | 55133880 | Nikos Skalkotos | os.close(samfd) |
668 | 76b200cf | Nikos Skalkotos | self.g.download(path, sam)
|
669 | 76b200cf | Nikos Skalkotos | |
670 | 76b200cf | Nikos Skalkotos | h = hivex.Hivex(sam) |
671 | 76b200cf | Nikos Skalkotos | |
672 | 76b200cf | Nikos Skalkotos | key = h.root() |
673 | 76b200cf | Nikos Skalkotos | # Navigate to /SAM/Domains/Account/Users/Names
|
674 | 76b200cf | Nikos Skalkotos | for child in ('SAM', 'Domains', 'Account', 'Users', 'Names'): |
675 | 76b200cf | Nikos Skalkotos | key = h.node_get_child(key, child) |
676 | 76b200cf | Nikos Skalkotos | |
677 | 76b200cf | Nikos Skalkotos | users = [h.node_name(x) for x in h.node_children(key)] |
678 | 76b200cf | Nikos Skalkotos | |
679 | 76b200cf | Nikos Skalkotos | finally:
|
680 | 76b200cf | Nikos Skalkotos | os.unlink(sam) |
681 | 76b200cf | Nikos Skalkotos | |
682 | 76b200cf | Nikos Skalkotos | # Filter out the guest account
|
683 | 76b200cf | Nikos Skalkotos | return filter(lambda x: x != "Guest", users) |
684 | aa2062ba | Nikos Skalkotos | |
685 | 0db17fcf | Nikos Skalkotos | def _guest_exec(self, command, fatal=True): |
686 | 0db17fcf | Nikos Skalkotos | """Execute a command on a windows VM"""
|
687 | 0db17fcf | Nikos Skalkotos | |
688 | 12c97404 | Nikos Skalkotos | user = "Administrator%" + self.sysprep_params['password'] |
689 | 12c97404 | Nikos Skalkotos | addr = 'localhost'
|
690 | 12c97404 | Nikos Skalkotos | runas = '--runas=%s' % user
|
691 | 12c97404 | Nikos Skalkotos | winexe = subprocess.Popen( |
692 | 670ea7e3 | Nikos Skalkotos | ['winexe', '-U', user, runas, "//%s" % addr, command], |
693 | 12c97404 | Nikos Skalkotos | stdout=subprocess.PIPE, stderr=subprocess.PIPE) |
694 | 12c97404 | Nikos Skalkotos | |
695 | 0db17fcf | Nikos Skalkotos | stdout, stderr = winexe.communicate() |
696 | 12c97404 | Nikos Skalkotos | rc = winexe.poll() |
697 | 12c97404 | Nikos Skalkotos | |
698 | 0db17fcf | Nikos Skalkotos | if rc != 0 and fatal: |
699 | 0db17fcf | Nikos Skalkotos | reason = stderr if len(stderr) else stdout |
700 | c6b84dc4 | Nikos Skalkotos | self.out.output("Command: `%s' failed. Reason: %s" % |
701 | c6b84dc4 | Nikos Skalkotos | (command, reason)) |
702 | 0db17fcf | Nikos Skalkotos | raise FatalError("Command: `%s' failed. Reason: %s" % |
703 | 0db17fcf | Nikos Skalkotos | (command, reason)) |
704 | 0db17fcf | Nikos Skalkotos | |
705 | 0db17fcf | Nikos Skalkotos | return (stdout, stderr, rc)
|
706 | 12c97404 | Nikos Skalkotos | |
707 | aa2062ba | Nikos Skalkotos | # vim: set sta sts=4 shiftwidth=4 sw=4 et ai : |