Initial commit
This commit is contained in:
Filip Stedronsky
commit
0c68ff3ca0
|
|
@ -0,0 +1,18 @@
|
|||
# Deploy Windows 10 from Linux
|
||||
|
||||
This is a simple Python script that installs Windows 10 to a target disk from a running
|
||||
Linux system (i.e., without booting from Windows installation ISO and without using Windows PE).
|
||||
|
||||
## Use cases
|
||||
|
||||
* Mass-install Windows workstations from a PXE-booted Linux environment.
|
||||
(Here it may be useful to convert install.wim to a pipable WIM file
|
||||
and then you can stream it e.g. using HTTP from a server).
|
||||
* Provision VMs with Windows 10 with a single command, without any
|
||||
intermediate steps with mounting ISOs, changing boot order and the like.
|
||||
|
||||
## Limitations
|
||||
|
||||
* Currently supports only BIOS boot, not UEFI. But this should be easy
|
||||
to implement.
|
||||
|
||||
|
|
@ -0,0 +1,165 @@
|
|||
#!/usr/bin/python3
|
||||
|
||||
import sys,os,shutil
|
||||
import time
|
||||
import string
|
||||
import clize
|
||||
from clize import ArgumentError, Parameter
|
||||
import argparse
|
||||
from contextlib import *
|
||||
from pathlib import Path
|
||||
import subprocess
|
||||
import tempfile
|
||||
import parted
|
||||
|
||||
def is_part(pth):
|
||||
pth = Path(pth)
|
||||
if not pth.is_block_device(): raise RuntimeError("Not a block device, cannot determine partition-ness")
|
||||
sys_path = Path("/sys/class/block") / pth.name
|
||||
if not sys_path.exists(): raise RuntimeError("{sys_path} does not exist (for {pth})")
|
||||
return (sys_path / 'partition').exists()
|
||||
|
||||
|
||||
|
||||
@contextmanager
|
||||
def with_device(pth):
|
||||
pth = Path(pth)
|
||||
if pth.is_file():
|
||||
r = subprocess.run(['losetup', '--show', '-f', '-P', pth], check=True, capture_output=True)
|
||||
dev = Path(r.stdout.decode('ascii').strip())
|
||||
if not dev.is_block_device():
|
||||
raise RuntimeError(f"Cannot find loop device {dev}")
|
||||
try:
|
||||
yield dev
|
||||
finally:
|
||||
subprocess.run(['losetup', '-d', dev])
|
||||
elif pth.is_block_device():
|
||||
pass
|
||||
|
||||
def ci_lookup(base, *comps, creating=False, parents=False):
|
||||
"""Lookup path components case-insensitively"""
|
||||
cur = Path(base)
|
||||
for idx, comp in enumerate(comps):
|
||||
cands = [ item for item in cur.iterdir() if item.name.lower() == comp.lower() ]
|
||||
if not cands:
|
||||
if creating and idx == len(comps) - 1:
|
||||
cur = cur / comp
|
||||
break
|
||||
elif parents and idx < len(comps) - 1:
|
||||
cur = cur / comp
|
||||
cur.mkdir()
|
||||
continue
|
||||
else:
|
||||
raise FileNotFoundError(f"'{comp}' not found case-insensitively in '{cur}'")
|
||||
elif len(cands) > 1:
|
||||
raise RuntimeError(f"Multiple case-insensitive candidates for '{comp}' in '{cur}': {cands}")
|
||||
else:
|
||||
cur = cands[0]
|
||||
return cur
|
||||
|
||||
|
||||
@contextmanager
|
||||
def with_iso(iso):
|
||||
with ExitStack() as es:
|
||||
dir = Path(tempfile.mkdtemp(prefix="win10_iso_"))
|
||||
es.callback(lambda: dir.rmdir())
|
||||
subprocess.run(['mount', '-o', 'loop,ro', '-t', 'udf', str(iso), str(dir)], check=True)
|
||||
es.callback(lambda: subprocess.run(['umount', dir]))
|
||||
wim = ci_lookup(dir, 'sources', 'install.wim')
|
||||
yield wim
|
||||
|
||||
@contextmanager
|
||||
def with_mounted(part):
|
||||
part = Path(part)
|
||||
with ExitStack() as es:
|
||||
dir = Path(tempfile.mkdtemp(prefix=f"ntfs_{part.name}_"))
|
||||
es.callback(lambda: dir.rmdir())
|
||||
subprocess.run(['ntfs-3g', str(part), dir], check=True)
|
||||
es.callback(lambda: subprocess.run(['umount', dir]))
|
||||
yield dir
|
||||
|
||||
|
||||
def create_partitions(dev):
|
||||
with open(dev, 'r+b') as fh:
|
||||
fh.write(bytearray(4096)) # clear MBR and other metadata
|
||||
|
||||
device = parted.Device(str(dev))
|
||||
disk = parted.freshDisk(device, 'msdos')
|
||||
geometry = parted.Geometry(device=device, start=2048,
|
||||
length=device.getLength() - 2048)
|
||||
filesystem = parted.FileSystem(type='ntfs', geometry=geometry)
|
||||
partition = parted.Partition(disk=disk, type=parted.PARTITION_NORMAL,
|
||||
fs=filesystem, geometry=geometry)
|
||||
disk.addPartition(partition=partition,
|
||||
constraint=device.optimalAlignedConstraint)
|
||||
partition.setFlag(parted.PARTITION_BOOT)
|
||||
disk.commit()
|
||||
|
||||
|
||||
def part_path(dev, partno):
|
||||
dev = Path(dev)
|
||||
return dev.parent / f"{dev.name}{'p' if dev.name[-1] in string.digits else ''}{partno}"
|
||||
|
||||
|
||||
def format_part(part):
|
||||
cmd = ['mkntfs', '-vv', '-f', '-S', '63', '-H', '255', '--partition-start', '2048', str(part)]
|
||||
subprocess.run(cmd, check=True)
|
||||
|
||||
|
||||
def apply_wim(part, wim, image_name):
|
||||
subprocess.run(['wimapply', str(wim), str(image_name), str(part)], check=True)
|
||||
|
||||
def setup_vbr(part):
|
||||
subprocess.run(['ms-sys', '-f', '--ntfs', str(part)], check=True)
|
||||
|
||||
def setup_mbr(disk):
|
||||
subprocess.run(['ms-sys', '-f', '--mbr7', str(disk)], check=True)
|
||||
|
||||
def copy_boot_files(dir):
|
||||
shutil.copy(ci_lookup(dir, 'Windows', 'Boot', 'PCAT', 'bootmgr'), ci_lookup(dir, 'bootmgr', creating=True))
|
||||
boot_dir = ci_lookup(dir, 'Boot', creating=True)
|
||||
boot_dir.mkdir(exist_ok=True)
|
||||
shutil.copy(Path(__file__).parent / 'BCD', ci_lookup(boot_dir, 'BCD', creating=True))
|
||||
|
||||
|
||||
def setup_part(part, wim, image_name, *, unattend=None, postproc=None):
|
||||
format_part(part)
|
||||
setup_vbr(part)
|
||||
apply_wim(part, wim, image_name)
|
||||
with with_mounted(part) as dir:
|
||||
copy_boot_files(dir)
|
||||
if unattend:
|
||||
trg = ci_lookup(dir, 'Windows', 'Panther', 'unattend.xml', creating=True, parents=True)
|
||||
print(f"Copying unattend file: {unattend} -> {trg}")
|
||||
shutil.copy(unattend, trg)
|
||||
if postproc:
|
||||
if '/' not in postproc: postproc = f"./{postproc}"
|
||||
subprocess.run([str(postproc), dir])
|
||||
|
||||
|
||||
def exactly_one(*a):
|
||||
return sum( bool(x) for x in a ) == 1
|
||||
|
||||
def main(*, disk=None, part=None, wim=None, iso=None, image_name=None, unattend=None, postproc=None):
|
||||
if not exactly_one(disk, part):
|
||||
raise ArgumentError("You must specify exactly one of 'disk', 'part'")
|
||||
if not exactly_one(wim, iso):
|
||||
raise ArgumentError("You must specify exactly one of 'wim', 'iso'")
|
||||
with ExitStack() as es:
|
||||
if iso:
|
||||
wim = es.enter_context(with_iso(iso))
|
||||
if disk:
|
||||
create_partitions(disk)
|
||||
with with_device(disk) as dev:
|
||||
create_partitions(dev)
|
||||
setup_mbr(dev)
|
||||
part = part_path(dev, 1)
|
||||
setup_part(part, wim, image_name, unattend=unattend, postproc=postproc)
|
||||
else:
|
||||
setup_part(part, unattend=unattend, postproc=postproc)
|
||||
|
||||
if __name__ == '__main__':
|
||||
clize.run(main)
|
||||
|
||||
|
||||
|
||||
|
|
@ -0,0 +1,134 @@
|
|||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<unattend xmlns="urn:schemas-microsoft-com:unattend">
|
||||
<!--
|
||||
=====================
|
||||
SPECIALIZE SETTINGS
|
||||
=====================
|
||||
During the specialize pass of Windows Setup, machine-specific information for the image is applied.
|
||||
For example, you can configure network settings, international settings, and domain information.
|
||||
The specialize pass is used in conjunction with the generalize pass.
|
||||
The generalize pass is used to create a Windows reference image that can be used throughout an organization.
|
||||
From this basic Windows reference image, you can add further customizations that apply to different divisions
|
||||
within an organization or apply to different installations of Windows.
|
||||
The specialize pass is used to apply these specific customizations.
|
||||
-->
|
||||
<settings pass="specialize">
|
||||
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
|
||||
<ComputerName>testws1</ComputerName>
|
||||
|
||||
</component>
|
||||
|
||||
<component name="Microsoft-Windows-RemoteAssistance-Exe" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
|
||||
<CreateEncryptedOnlyTickets>true</CreateEncryptedOnlyTickets>
|
||||
<fAllowToGetHelp>true</fAllowToGetHelp>
|
||||
</component>
|
||||
<component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
|
||||
<InputLocale>0409:00000409</InputLocale>
|
||||
<SystemLocale>en-US</SystemLocale>
|
||||
<UILanguage>en-US</UILanguage>
|
||||
<UILanguageFallback>en-US</UILanguageFallback>
|
||||
<UserLocale>en-US</UserLocale>
|
||||
</component>
|
||||
<component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
|
||||
<RunSynchronous>
|
||||
<RunSynchronousCommand wcm:action="add">
|
||||
<Description>Some preparation script</Description>
|
||||
<Order>1</Order>
|
||||
<Path>cmd.exe /c C:\my_script.cmd</Path>
|
||||
</RunSynchronousCommand>
|
||||
</RunSynchronous>
|
||||
</component>
|
||||
<component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
|
||||
<DomainProfile_EnableFirewall>false</DomainProfile_EnableFirewall>
|
||||
<PrivateProfile_EnableFirewall>false</PrivateProfile_EnableFirewall>
|
||||
<PublicProfile_EnableFirewall>false</PublicProfile_EnableFirewall>
|
||||
</component>
|
||||
<component name="Microsoft-Windows-Embedded-EmbeddedLogon" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
|
||||
<NoLockScreen>1</NoLockScreen>
|
||||
</component>
|
||||
</settings>
|
||||
<!--
|
||||
=====================
|
||||
AUDITSYSTEM SETTINGS
|
||||
=====================
|
||||
The auditSystem pass is an optional pass that enables you to add additional device drivers and applications to the image.
|
||||
This results in fewer required images because a reference image can be created with a minimal set of drivers.
|
||||
The image can be updated with additional drivers during the audit process.
|
||||
You can then test and resolve any operating system issues related to malfunctioning or incorrectly installed devices on the image.
|
||||
For example, you can install additional language packs, updates, or other applications, such as Microsoft Office.
|
||||
See Reseal mode in oobeSystem.
|
||||
-->
|
||||
<!--
|
||||
<settings pass="auditSystem">
|
||||
</settings>
|
||||
-->
|
||||
<!--
|
||||
=====================
|
||||
AUDITUSER SETTINGS
|
||||
=====================
|
||||
The auditUser pass is similar to the auditSystem pass.
|
||||
However, the auditUser pass processes these settings after users have logged on, not before they have logged on.
|
||||
Like the auditSystem pass, the auditUser pass is used to test the functionality of the Windows Vista image.
|
||||
See Reseal mode in oobeSystem.
|
||||
-->
|
||||
<!--
|
||||
<settings pass="auditUser">
|
||||
</settings>
|
||||
-->
|
||||
<!--
|
||||
=====================
|
||||
OOBESYSTEM SETTINGS
|
||||
=====================
|
||||
The oobeSystem pass configures settings that are applied during the first-boot experience for end users, also called Windows Welcome.
|
||||
oobeSystem settings are processed before a user first logs into Windows.
|
||||
Out-of-Box-Experience (OOBE) runs the first time the user starts a new computer.
|
||||
OOBE runs before the Windows shell or any additional software runs, and performs a small set of tasks necessary to configure and run Windows.
|
||||
-->
|
||||
<settings pass="oobeSystem">
|
||||
|
||||
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
|
||||
|
||||
<TimeZone>Central Europe Standard Time</TimeZone>
|
||||
<UserAccounts>
|
||||
<AdministratorPassword>
|
||||
<PlainText>true</PlainText>
|
||||
<Value>password</Value>
|
||||
</AdministratorPassword>
|
||||
<LocalAccounts>
|
||||
<LocalAccount wcm:action="add">
|
||||
<Password>
|
||||
<PlainText>true</PlainText>
|
||||
<Value>password</Value>
|
||||
</Password>
|
||||
<Description>admin</Description>
|
||||
<Group>Administrators</Group>
|
||||
<Name>admin</Name>
|
||||
<DisplayName>admin</DisplayName>
|
||||
</LocalAccount>
|
||||
</LocalAccounts>
|
||||
|
||||
</UserAccounts>
|
||||
|
||||
<OOBE>
|
||||
<HideEULAPage>true</HideEULAPage>
|
||||
<ProtectYourPC>3</ProtectYourPC>
|
||||
<HideOnlineAccountScreens>true</HideOnlineAccountScreens>
|
||||
<HideLocalAccountScreen>true</HideLocalAccountScreen>
|
||||
<HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
|
||||
<SkipMachineOOBE>true</SkipMachineOOBE>
|
||||
<SkipUserOOBE>true</SkipUserOOBE>
|
||||
<NetworkLocation>Work</NetworkLocation>
|
||||
<HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
|
||||
</OOBE>
|
||||
|
||||
</component>
|
||||
<component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
|
||||
<InputLocale>0409:00000409</InputLocale>
|
||||
<SystemLocale>en-US</SystemLocale>
|
||||
<UILanguage>en-US</UILanguage>
|
||||
<UILanguageFallback>en-US</UILanguageFallback>
|
||||
<UserLocale>en-US</UserLocale>
|
||||
</component>
|
||||
|
||||
</settings>
|
||||
</unattend>
|
||||
Loading…
Reference in New Issue