Windows/Powershell - Revision history

R00t at 22:24, 23 November 2024

2024-11-23T22:24:34Z

R00t at 14:31, 2 June 2020

2020-06-02T14:31:12Z

R00t: /* Trusted Hosts List */

2019-01-18T17:54:04Z

‎Trusted Hosts List

R00t: /* Enable Windows Remote Management (WinRM) */

2019-01-18T17:48:21Z

‎Enable Windows Remote Management (WinRM)

R00t at 17:48, 18 January 2019

2019-01-18T17:48:11Z

R00t at 17:44, 18 January 2019

2019-01-18T17:44:56Z

R00t at 17:22, 18 January 2019

2019-01-18T17:22:26Z

R00t at 15:49, 18 January 2019

2019-01-18T15:49:59Z

R00t: /* Client */

2019-01-18T15:44:08Z

‎Client

R00t at 15:43, 18 January 2019

2019-01-18T15:43:53Z

← Older revision		Revision as of 22:24, 23 November 2024
Line 98:		Line 98:
	Start-Process -FilePath "C:\Program Files\Git\cmd\git.exe" -ArgumentList "clone https://x-token-auth:$access_token@bitbucket.org/repo/project.git"		Start-Process -FilePath "C:\Program Files\Git\cmd\git.exe" -ArgumentList "clone https://x-token-auth:$access_token@bitbucket.org/repo/project.git"
	</nowiki>		</nowiki>
		+
		+	=Dockerfile WinRM & SSH=
		+	example of a dockerfile that uses the powershell core 7 public docker image to connect to host
		+	<nowiki>#Image contains all the tools necessary to connect via powershell (winrm) to pwsh 5.1 along with ssh
		+	#cannot build without the ssh private key being in the build directory
		+	#sudo docker build -t "pwshcore-wsman:Dockerfile" .
		+	#vpn connection needs to be running on the docker host if required for connectivity to computers
		+	#example connecting via ssh (22)
		+	# ssh -i id_ed25519 user@computer.tld
		+	#example connecting via winrm (5985)
		+	# pwsh
		+	# $username = "<username>"
		+	# $password = "<password>"
		+	# $computer = "<computer>"
		+	# $securePassword = ConvertTo-SecureString $password -AsPlainText -Force
		+	# $credentials = New-Object System.Management.Automation.PSCredential ($username, $securePassword)
		+	# Enter-PSSession -ComputerName $computer -Credential $credentials
		+
		+	FROM powershell7:latest
		+	LABEL maintainer="root"
		+
		+	SHELL ["/bin/bash", "-c"]
		+
		+	RUN DEBIAN_FRONTEND=noninteractive apt update -y
		+	RUN DEBIAN_FRONTEND=noninteractive apt upgrade -y
		+	RUN DEBIAN_FRONTEND=noninteractive apt install -y iputils-ping ansible telnet vim tcpdump git python-is-python3 python3-pip
		+	RUN DEBIAN_FRONTEND=noninteractive apt install -y wget apt-transport-https software-properties-common sshpass gss-ntlmssp netcat curl
		+	RUN sed -i '/\[provider_sect\]/a legacy = legacy_sect' /etc/ssl/openssl.cnf
		+	RUN sed -i '/\[default_sect\]/a [legacy_sect]\nactivate = 1' /etc/ssl/openssl.cnf
		+	RUN sed -i '/\[default_sect\]/a activate = 1' /etc/ssl/openssl.cnf
		+	RUN pwsh -Command 'Install-Module -Name PSWSMan -Scope AllUsers -AcceptLicense -Force -Confirm:$False; Install-WSMan -Verbose'
		+	COPY id_ed25519 /id_ed25519
		+	RUN chmod 0600 id_ed25519</nowiki>

← Older revision		Revision as of 14:31, 2 June 2020
Line 89:		Line 89:
	PS> Disconnect-PSSession (Get-PSSession)		PS> Disconnect-PSSession (Get-PSSession)
	PS> Remove-PSSession (Get-PSSession)</nowiki>		PS> Remove-PSSession (Get-PSSession)</nowiki>
		+
		+	=Code Reference=
		+	==Bitbucket ouath authentication and git clone==
		+	<nowiki> $Body = "grant_type=client_credentials"
		+	$creds = [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes('iuondfijondsjkofnsdofjnc:hdfiohnwdfjndsjofnjodsnfjodsnjofndsoj'))
		+	$access_token = $(Invoke-WebRequest -Uri "https://bitbucket.org/site/oauth2/access_token" -Body $Body -Method 'POST' -Headers @{ 'Authorization' = 'Basic ' + $creds } \| Select-Object -Expand Content \| ConvertFrom-Json \| select access_token -ExpandProperty access_token)
		+
		+	Start-Process -FilePath "C:\Program Files\Git\cmd\git.exe" -ArgumentList "clone https://x-token-auth:$access_token@bitbucket.org/repo/project.git"
		+	</nowiki>

@@ Line 33: / Line 33: @@
 ----            ----                           -------------   -----
 System.String   TrustedHosts                                   *  </nowiki>
 ===Test Connectivity===

@@ Line 12: / Line 12: @@
 # Verify start mode and state - it should be running
 PS> Get-WmiObject -Class win32_service | Where-Object {$_.name -like "WinRM"}
 # or verify it with this
 PS> Get-Service -Name "WinRM"

@@ Line 12: / Line 12: @@
 # Verify start mode and state - it should be running
 PS> Get-WmiObject -Class win32_service | Where-Object {$_.name -like "WinRM"}
 # Start/Stop service

@@ Line 37: / Line 37: @@
 ==Client==
 ===Trusted Hosts===
-From the Client you should only have to potentially add the server to the Trusted Hosts
+From the Client you need add the server to the Trusted Hosts. <br>
-  <nowiki>PS> Set-Item WSMan:\localhost\Client\TrustedHosts -Value "FQDN" -Force    #Adds an individual host.  Overwrites previous entry.
+'''NOTE:''' While you do NOT need WinRM to be running on the client, you do need to start it in order to manipulate the trusted host list.
 PS> Set-Item WSMan:\localhost\Client\TrustedHosts -Value "*" -Force      #Adds everything to the trusted host list.
@@ Line 48: / Line 51: @@
 Type            Name                           SourceOfValue   Value
 ----            ----                           -------------   -----
-System.String   TrustedHosts                                   *  </nowiki>
+System.String   TrustedHosts                                   *
 ===Test Connectivity===

← Older revision		Revision as of 17:22, 18 January 2019
Line 69:		Line 69:
	PS> Invoke-Command -Session (Get-PSSession) -ScriptBlock {Hostname}		PS> Invoke-Command -Session (Get-PSSession) -ScriptBlock {Hostname}
	WIN-45MO0EQVG4G</nowiki>		WIN-45MO0EQVG4G</nowiki>
		+
		+	===New/Disconnect/Remove===
		+	The process should be to Create a NEW session > DISCONNECT the session (but leaves in history) > REMOVE the session (removes from history).
		+	<nowiki>PS> New-PSSession -ComputerName win-45mo0eqvg4g -Credential win-45mo0eqvg4g\Administrator
		+	PS> Disconnect-PSSession (Get-PSSession)
		+	PS> Remove-PSSession (Get-PSSession)</nowiki>

← Older revision		Revision as of 15:49, 18 January 2019
Line 53:		Line 53:
	<nowiki>PS> Test-WSMan -ComputerName {ServerFQDN} -Credential {ServerFQDN/Domain}\{User} -Authentication Default		<nowiki>PS> Test-WSMan -ComputerName {ServerFQDN} -Credential {ServerFQDN/Domain}\{User} -Authentication Default
	ie. PS> Test-WSMan -ComputerName win-45mo0eqvg4g -Credential win-45mo0eqvg4g\Administrator -Authentication Default</nowiki>		ie. PS> Test-WSMan -ComputerName win-45mo0eqvg4g -Credential win-45mo0eqvg4g\Administrator -Authentication Default</nowiki>
		+
		+	==Sessions/Invoke Command==
		+	To run remote powershell commands, you'll need to either specify the computer name or create a session and specify that.
		+	<nowiki>#Without a Session, unique one-liner
		+	PS> Invoke-Command -ComputerName win-45mo0eqvg4g -Credential win-45mo0eqvg4g\Administrator -ScriptBlock {HostName}
		+	WIN-45MO0EQVG4G
		+
		+	#With a session
		+	PS> New-PSSession -ComputerName win-45mo0eqvg4g -Credential win-45mo0eqvg4g\Administrator
		+
		+	Id Name ComputerName ComputerType State ConfigurationName Availability
		+	-- ---- ------------ ------------ ----- ----------------- ------------
		+	6 WinRM6 win-45mo0eqvg4g RemoteMachine Opened Microsoft.PowerShell Available
		+
		+	PS> Invoke-Command -Session (Get-PSSession) -ScriptBlock {Hostname}
		+	WIN-45MO0EQVG4G</nowiki>