Skip to content

Commit

Permalink
Merge pull request #2555 from shubhamshinde360/PA-6329
Browse files Browse the repository at this point in the history
(PA-6329) Add Windows 2016 FIPS platform definition to puppet-agent main
  • Loading branch information
shubhamshinde360 authored Sep 23, 2024
2 parents e8df7e4 + def5727 commit 2217a74
Showing 1 changed file with 29 additions and 0 deletions.
29 changes: 29 additions & 0 deletions configs/platforms/windowsfips-2016-x64.rb
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
platform "windowsfips-2016-x64" do |plat|
plat.vmpooler_template 'win-2016-fips-x86_64'
plat.servicetype 'windows'

# We need to ensure we install chocolatey prior to adding any nuget repos. Otherwise, everything will fall over
plat.add_build_repository "https://artifactory.delivery.puppetlabs.net/artifactory/generic/buildsources/windows/chocolatey/install-chocolatey-1.4.0.ps1"
plat.provision_with "C:/ProgramData/chocolatey/bin/choco.exe feature enable -n useFipsCompliantChecksums"

plat.add_build_repository "https://artifactory.delivery.puppetlabs.net/artifactory/api/nuget/nuget"

# We don't want to install any packages from the chocolatey repo by accident
plat.provision_with "C:/ProgramData/chocolatey/bin/choco.exe sources remove -name chocolatey"

# Install 7zip from chocolatey since it does not come pre-installed in the windowsfips-2016 VM.
plat.provision_with "C:/ProgramData/chocolatey/bin/choco.exe install -y -debug 7zip.install"

#FIXME we need Fips Compliant Wix, currently not in choco repositories
plat.provision_with "curl -L --fail --retry 3 -o /tmp/wix314-binaries.zip https://artifactory.delivery.puppetlabs.net/artifactory/generic__buildsources/buildsources/wix314-binaries.zip && \"C:/Program Files/7-Zip/7z.exe\" x -y -o\"C:/Program Files (x86)/WiX Toolset v3.14/bin\" C:/cygwin64/tmp/wix314-binaries.zip && rm /tmp/wix314-binaries.zip && SETX WIX \"C:\\Program Files (x86)\\WiX Toolset v3.14\" /M"

plat.install_build_dependencies_with "C:/ProgramData/chocolatey/bin/choco.exe install -y --no-progress"

plat.make "/usr/bin/make"
plat.patch "TMP=/var/tmp /usr/bin/patch.exe --binary"

plat.platform_triple "x86_64-w64-mingw32"

plat.package_type "msi"
plat.output_dir "windowsfips"
end

0 comments on commit 2217a74

Please sign in to comment.