vhdbuilder/packer/windows/write-release-notes-windows.ps1

<#
    .SYNOPSIS
        Produces a release notes file for a Windows VHD

    .DESCRIPTION
        Produces a release notes file for a Windows VHD
#>

$ErrorActionPreference = "Stop"

$releaseNotesFilePath = "c:\release-notes.txt"

function Log($Message)
{
    # Write-Output $Message
    $Message | Tee-Object -FilePath $releaseNotesFilePath -Append
}

Log "Build Number: $env:BUILD_NUMBER"
Log "Build Id:     $env:BUILD_ID"
Log "Build Repo:   $env:BUILD_REPO"
Log "Build Branch: $env:BUILD_BRANCH"
Log "Commit:       $env:BUILD_COMMIT"
Log ""

$vhdId = Get-Content 'c:\vhd-id.txt'
Log ("VHD ID:      $vhdId")
Log ""

Log "System Info"
$systemInfo = Get-ItemProperty -Path 'HKLM:SOFTWARE\Microsoft\Windows NT\CurrentVersion'
Log ("`t{0,-14} : {1}" -f "OS Name", $systemInfo.ProductName)
Log ("`t{0,-14} : {1}" -f "OS Version", "$( $systemInfo.CurrentBuildNumber ).$( $systemInfo.UBR )")
Log ("`t{0,-14} : {1}" -f "OS InstallType", $systemInfo.InstallationType)
Log ""

$allowedSecurityProtocols = [System.Net.ServicePointManager]::SecurityProtocol
Log "Allowed security protocols: $allowedSecurityProtocols"
Log ""

Log "Installed Features"
if ($systemInfo.InstallationType -ne 'client')
{
    Log (Get-WindowsFeature | Where-Object Installed)
}
else
{
    Log "`t<Cannot enumerate installed features on client skus>"
}
Log ""


Log "Installed Packages"
$packages = Get-WindowsCapability -Online | Where-Object { $_.State -eq 'Installed' }
foreach ($package in $packages)
{
    Log ("`t{0}" -f $package.Name)
}
Log ""

Log "Installed QFEs"
$qfes = Get-HotFix
foreach ($qfe in $qfes)
{
    $link = "https://support.microsoft.com/kb/{0}" -f ($qfe.HotFixID.Replace("KB", ""))
    Log ("`t{0,-9} : {1, -15} : {2}" -f $qfe.HotFixID, $Qfe.Description, $link)
}
Log ""

Log "Installed Updates"
$updateSession = New-Object -ComObject Microsoft.Update.Session
$updateSearcher = $UpdateSession.CreateUpdateSearcher()
$updates = $updateSearcher.Search("IsInstalled=1").Updates
foreach ($update in $updates)
{
    Log ("`t{0}" -f $update.Title)
}
Log ""

. c:/k/windows-vhd-configuration.ps1

Log "Windows Update Registry Settings"
Log "`thttps://docs.microsoft.com/en-us/windows/deployment/update/waas-wu-settings"

$wuRegistryKeys = @(
    "HKLM:SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate",
    "HKLM:SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU"
)

$wuRegistryNames = @(
    "NoAutoUpdate",
    "EnableCompartmentNamespace",
    "HNSControlFlag",
    "HnsPolicyUpdateChange",
    "HnsNatAllowRuleUpdateChange",
    "HnsAclUpdateChange",
    "HNSFixExtensionUponRehydration",
    "HnsNpmRefresh",
    "HnsNodeToClusterIpv6",
    "HNSNpmIpsetLimitChange",
    "HNSLbNatDupRuleChange",
    "HNSUpdatePolicyForEndpointChange",
    "WcifsSOPCountDisabled"
)

foreach ($key in $wuRegistryKeys)
{
    # Windows 2019 does not have the Windows Containers key
    if ($( $systemInfo.CurrentBuildNumber ) -eq 17763 -and $key -eq "HKLM:\SYSTEM\CurrentControlSet\Control\Windows Containers")
    {
        continue
    }
    $regPath = (Get-Item -Path $key -ErrorAction Ignore)
    if ($regPath)
    {
        Log ("`t{0}" -f $key)
        Get-Item -Path $key |
                Select-Object -ExpandProperty property |
                ForEach-Object {
                    if ($wuRegistryNames -contains $_)
                    {
                        Log ("`t`t{0} : {1}" -f $_, (Get-ItemProperty -Path $key -Name $_).$_)
                    }
                }
    }
}

LogReleaseNotesForWindowsRegistryKeys $windowsSettingsJson | ForEach-Object { Log $_ }

Log ""

Log "ContainerD Info"
# starting containerd for printing containerD info, the same way as we pre-pull containerD images in configure-windows-vhd.ps1
Start-Job -Name containerd -ScriptBlock { containerd.exe }
$containerDVersion = (ctr.exe --version) | Out-String
Log ("Version: {0}" -f $containerDVersion)
Log "Images:"
Log (ctr.exe -n k8s.io image ls)
Stop-Job  -Name containerd
Remove-Job -Name containerd
Log ""

Log "Cached Files:"
$displayObjects = @()
foreach ($file in [IO.Directory]::GetFiles('c:\akse-cache', '*', [IO.SearchOption]::AllDirectories))
{
    $attributes = Get-Item $file
    $hash = Get-FileHash $file -Algorithm SHA256
    $displayObjects += New-Object psobject -property @{
        File = $file;
        SizeBytes = $attributes.Length;
        Sha256 = $hash.Hash
    }
}

Log ($displayObjects | Format-Table -Property File, Sha256, SizeBytes | Out-String -Width 4096)

# Ensure proper encoding is set for release notes file
[IO.File]::ReadAllText($releaseNotesFilePath) | Out-File -Encoding utf8 $releaseNotesFilePath