-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
bd42084
commit 515ad82
Showing
3 changed files
with
154 additions
and
9 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,121 @@ | ||
| param ( | ||
| # GitHub Actions Runner registration token. Note that these tokens are only valid for one hour after creation, so we always expect the user to provide one. | ||
| # https://docs.github.com/en/actions/hosting-your-own-runners/adding-self-hosted-runners | ||
| [Parameter(Mandatory=$true)] | ||
| [string]$GitHubActionsRunnerToken, | ||
|
|
||
| # GitHub Actions Runner repository. E.g. "https://github.com/MY_ORG" (org-level) or "https://github.com/MY_ORG/MY_REPO" (repo-level) | ||
| # https://docs.github.com/en/actions/hosting-your-own-runners/adding-self-hosted-runners | ||
| [Parameter(Mandatory=$true)] | ||
| [string]$GithubActionsRunnerRegistrationUrl, | ||
|
|
||
| # Actions Runner name. Needs to be unique in the org/repo | ||
| [Parameter(Mandatory=$true)] | ||
| [string]$GithubActionsRunnerName | ||
| ) | ||
|
|
||
| Write-Output "Starting post-deployment script." | ||
|
|
||
| # ================================= | ||
| # TOOL VERSIONS AND OTHER VARIABLES | ||
| # ================================= | ||
|
|
||
| $GitForWindowsVersion = "2.39.0" | ||
| $GitForWindowsTag = "2.39.0.windows.1" | ||
| $GitForWindowsHash = "2eaba567e17784654be77ba997329742d87845c6f15e33c9620f9a331c69a976" | ||
| # Note that the GitHub Actions Runner auto-updates itself by default, but do try to reference a relatively new version here. | ||
| $GitHubActionsRunnerVersion = "2.300.2" | ||
| $GithubActionsRunnerArch = "arm64" | ||
| $GithubActionsRunnerHash = "9409e50d9ad33d8031355ed079b8f56cf3699f35cf5d0ca51e54deed432758ef" | ||
| $GithubActionsRunnerLabels = "self-hosted,Windows,ARM64" | ||
| # Keep this path short to prevent Long Path issues | ||
| $GitHubActionsRunnerPath = "C:\actions-runner" | ||
|
|
||
| # ====================== | ||
| # WINDOWS DEVELOPER MODE | ||
| # ====================== | ||
|
|
||
| # Needed for symlink support | ||
| Write-Output "Enabling Windows Developer Mode..." | ||
| Start-Process -Wait "reg" 'add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock" /t REG_DWORD /f /v "AllowDevelopmentWithoutDevLicense" /d "1"' | ||
| Write-Output "Enabled Windows developer mode." | ||
|
|
||
| # ============================= | ||
| # MICROSOFT DEFENDER EXCLUSIONS | ||
| # ============================= | ||
|
|
||
| Write-Output "Adding Microsoft Defender Exclusions..." | ||
| Add-MpPreference -ExclusionPath "C:\" | ||
| Write-Output "Finished adding Microsoft Defender Exclusions." | ||
|
|
||
| # ====================== | ||
| # GIT FOR WINDOWS | ||
| # ====================== | ||
|
|
||
| Write-Output "Downloading Git for Windows..." | ||
| $GitForWindowsOutputFile = "./git-for-windows-installer.exe" | ||
| $ProgressPreference = 'SilentlyContinue' | ||
| Invoke-WebRequest -UseBasicParsing -Uri "https://github.com/git-for-windows/git/releases/download/v${GitForWindowsTag}/Git-${GitForWindowsVersion}-64-bit.exe" -OutFile $GitForWindowsOutputFile | ||
| $ProgressPreference = 'Continue' | ||
|
|
||
| if((Get-FileHash -Path $GitForWindowsOutputFile -Algorithm SHA256).Hash.ToUpper() -ne $GitForWindowsHash.ToUpper()){ throw 'Computed checksum did not match' } | ||
|
|
||
| Write-Output "Installing Git for Windows..." | ||
| @" | ||
| [Setup] | ||
| Lang=default | ||
| Dir=C:\Program Files\Git | ||
| Group=Git | ||
| NoIcons=0 | ||
| SetupType=default | ||
| Components=gitlfs,windowsterminal | ||
| Tasks= | ||
| EditorOption=VIM | ||
| CustomEditorPath= | ||
| DefaultBranchOption= | ||
| PathOption=CmdTools | ||
| SSHOption=OpenSSH | ||
| TortoiseOption=false | ||
| CURLOption=WinSSL | ||
| CRLFOption=CRLFAlways | ||
| BashTerminalOption=ConHost | ||
| GitPullBehaviorOption=FFOnly | ||
| UseCredentialManager=Core | ||
| PerformanceTweaksFSCache=Enabled | ||
| EnableSymlinks=Disabled | ||
| EnablePseudoConsoleSupport=Disabled | ||
| EnableFSMonitor=Disabled | ||
| "@ | Out-File -FilePath "./git-installer-config.inf" | ||
|
|
||
| Start-Process -Wait $GitForWindowsOutputFile '/VERYSILENT /NORESTART /NOCANCEL /SP- /CLOSEAPPLICATIONS /RESTARTAPPLICATIONS /LOADINF="./git-installer-config.inf"' | ||
|
|
||
| Write-Output "Finished installing Git for Windows." | ||
|
|
||
| # ====================== | ||
| # GITHUB ACTIONS RUNNER | ||
| # ====================== | ||
|
|
||
| Write-Output "Downloading GitHub Actions runner..." | ||
|
|
||
| mkdir $GitHubActionsRunnerPath | Out-Null | ||
| $ProgressPreference = 'SilentlyContinue' | ||
| Invoke-WebRequest -UseBasicParsing -Uri https://github.com/actions/runner/releases/download/v${GitHubActionsRunnerVersion}/actions-runner-win-${GithubActionsRunnerArch}-${GitHubActionsRunnerVersion}.zip -OutFile ${GitHubActionsRunnerPath}\actions-runner-win-${GithubActionsRunnerArch}-${GitHubActionsRunnerVersion}.zip | ||
| $ProgressPreference = 'Continue' | ||
| if((Get-FileHash -Path ${GitHubActionsRunnerPath}\actions-runner-win-${GithubActionsRunnerArch}-${GitHubActionsRunnerVersion}.zip -Algorithm SHA256).Hash.ToUpper() -ne $GithubActionsRunnerHash.ToUpper()){ throw 'Computed checksum did not match' } | ||
|
|
||
| Write-Output "Installing GitHub Actions runner ${GitHubActionsRunnerVersion} as a Windows service with labels ${GithubActionsRunnerLabels}..." | ||
|
|
||
| Add-Type -AssemblyName System.IO.Compression.FileSystem ; [System.IO.Compression.ZipFile]::ExtractToDirectory("${GitHubActionsRunnerPath}\actions-runner-win-${GithubActionsRunnerArch}-${GitHubActionsRunnerVersion}.zip", $GitHubActionsRunnerPath) | ||
| cmd.exe /c "${GitHubActionsRunnerPath}\config.cmd" --unattended --ephemeral --name ${GithubActionsRunnerName} --runasservice --labels ${GithubActionsRunnerLabels} --url ${GithubActionsRunnerRegistrationUrl} --token ${GitHubActionsRunnerToken} | ||
|
|
||
| # Ensure that the service was created. If not, exit with error code. | ||
| $MatchedServices = Get-Service -Name "actions.runner.*" | ||
| if ($MatchedServices.count -eq 0) { | ||
| Write-Error "GitHub Actions service not found (should start with actions.runner). Check the logs in ${GitHubActionsRunnerPath}\_diag for more details." | ||
| exit 1 | ||
| } | ||
|
|
||
| # Immediately stop the service as we want to leave the VM in a deallocated state for later use. The service will automatically be started when Windows starts. | ||
| Stop-Service -Name "actions.runner.*" -Verbose | ||
|
|
||
| Write-Output "Finished installing GitHub Actions runner." |