windows-ci.yml

name: Windows test
on: [push]

jobs:
  build:
    name: Let's see what needs to be installed
    runs-on: windows-latest

    steps:
      - uses: actions/checkout@v1
      - name: Install and cache PowerShell modules
        uses: potatoqualitee/psmodulecache@v5.0
        with:
          modules-to-cache: PSFramework, PSSQLite
          shell: powershell, pwsh

      - name: Starting services and disabling WinRM
        shell: powershell
        run: |
          Write-Output "Starting services"
          Set-Service wuauserv -StartupType Automatic
          Start-Service wuauserv

          Write-Output "Disabling WinRM"
          Set-Service WinRM -StartupType Disabled
          Get-Service WinRM | Stop-Service -ErrorAction Continue
          #Disable-PSRemoting -Force -ErrorAction Ignore
          #winrm delete winrm/config/Listener?Address=*+Transport=HTTP
          #winrm quickconfig -quiet

      - name: Run Test-WSMan
        shell: powershell
        run: |
          Test-WSMan -ErrorAction Continue

      - name: Downloading kbupdate-library and scanfile
        shell: powershell
        run: |
          Write-Output "Downloading freshest library"
          Install-Module kbupdate-library -Confirm:$false -Force
          Import-Module ./kbupdate.psd1 -ErrorAction Stop
          Save-KbScanFile -Path C:\temp -ErrorAction Stop
      - name: Getting needed updates
        shell: powershell
        run: |
          Write-Output "Importing kbupdate module"
          Import-Module ./kbupdate.psd1 -ErrorAction Stop
          Write-Output "Getting needed updates"
          Get-KbNeededUpdate -ScanFilePath C:\temp\wsusscn2.cab -ErrorAction Stop -EnableException -OutVariable saveit
          $needed = $saveit
          $null = mkdir C:\temp\xml

          Write-Output "Found $($needed.Count) needed updates"
          Write-Output "Will try to install $($saveit.Count) update"
          $saveit | Export-CliXml -Path C:\temp\xml\results.xml
          $saveit.Title
          $saveit.Link
          $null = $saveit | Save-KbUpdate -Path C:\temp

      - name: Clean defender so that KB2267602 installs
        shell: powershell
        run: |
          Set-Location "$env:ProgramFiles\Windows Defender"
          Start-Process -FilePath "$env:ProgramFiles\Windows Defender\MpCmdRun.exe" -ArgumentList "-removedefinitions -dynamicsignatures" -Wait -NoNewWindow -ErrorAction Ignore
          Start-Process -FilePath "$env:ProgramFiles\Windows Defender\MpCmdRun.exe" -ArgumentList "-SignatureUpdate" -Wait -NoNewWindow -ErrorAction Ignore

      - name: Installing updates
        shell: powershell
        run: |
          Import-Module ./kbupdate.psd1 -ErrorAction Stop
          $saveit = Import-CliXml -Path C:\temp\xml\results.xml
          Write-Output "Installing needed updates"
          try {
            $saveit | Install-KbUpdate -RepositoryPath C:\temp -Verbose -EnableException
            if ($($saveit.Count) -gt 0) {
              Get-KbInstalledSoftware -Pattern $needed.KBUpdate
            }
          } catch {
            $error[0] | select *
            if ("$PSItem" -notmatch "reboot") {
              write-warning "$PSItem"
            } else {
              write-warning "Oh oops: $PSItem"
            }
          }


  second:
    name: Let's try another VM
    runs-on: windows-latest

    steps:
      - uses: actions/checkout@v1
      - name: Install and cache PowerShell modules
        uses: potatoqualitee/psmodulecache@v5.0
        with:
          modules-to-cache: PSFramework, PSSQLite
          shell: powershell, pwsh

      - name: Starting services and disabling WinRM
        shell: powershell
        run: |
          Write-Output "Starting services"
          Set-Service wuauserv -StartupType Automatic
          Start-Service wuauserv

          Write-Output "Disabling WinRM"
          Set-Service WinRM -StartupType Disabled
          Get-Service WinRM | Stop-Service -ErrorAction Continue
          #Disable-PSRemoting -Force -ErrorAction Ignore
          #winrm delete winrm/config/Listener?Address=*+Transport=HTTP
          #winrm quickconfig -quiet

      - name: Run Test-WSMan
        shell: powershell
        run: |
          Test-WSMan -ErrorAction Continue

      - name: Downloading kbupdate-library and scanfile
        shell: powershell
        run: |
          Write-Output "Downloading freshest library"
          Install-Module kbupdate-library -Confirm:$false -Force
          Import-Module ./kbupdate.psd1 -ErrorAction Stop
          Save-KbScanFile -Path C:\temp -ErrorAction Stop

      - name: Clean defender so that KB2267602 installs
        shell: powershell
        run: |
          Set-Location "$env:ProgramFiles\Windows Defender"
          Start-Process -FilePath "$env:ProgramFiles\Windows Defender\MpCmdRun.exe" -ArgumentList "-removedefinitions -dynamicsignatures" -Wait -NoNewWindow -ErrorAction Ignore
          Start-Process -FilePath "$env:ProgramFiles\Windows Defender\MpCmdRun.exe" -ArgumentList "-SignatureUpdate" -Wait -NoNewWindow -ErrorAction Ignore

      - name: Getting needed updates
        shell: powershell
        run: |
          Write-Output "Importing kbupdate module"
          Import-Module ./kbupdate.psd1 -ErrorAction Stop
          Write-Output "Getting needed updates"
          Get-KbNeededUpdate -ScanFilePath C:\temp\wsusscn2.cab -ErrorAction Stop -EnableException -OutVariable saveit
          $needed = $saveit
          $null = mkdir C:\temp\xml

          Write-Output "Found $($needed.Count) needed updates"
          Write-Output "Will try to install $($saveit.Count) update"
          $saveit | Export-CliXml -Path C:\temp\xml\results.xml
          $saveit.Title
          $saveit.Link
          $null = $saveit | Save-KbUpdate -Path C:\temp

      - name: Show all files in C:\temp
        shell: powershell
        run: Get-ChildItem C:\temp

      - name: Installing updates
        shell: powershell
        run: |
          Import-Module ./kbupdate.psd1 -ErrorAction Stop
          $saveit = Import-CliXml -Path C:\temp\xml\results.xml
          Write-Output "Installing needed updates"
          try {
            $saveit | Install-KbUpdate -RepositoryPath C:\temp -Verbose -EnableException
            if ($($saveit.Count) -gt 0) {
              Get-KbInstalledSoftware -Pattern $needed.KBUpdate
            }
          } catch {
            $error[0] | select *
            throw $PSItem
          }