1027785 - Bare Metal Provisioning 2008 Puppet: Registry manifest

Status: RESOLVED FIXED

(Infrastructure & Operations :: RelOps: Puppet, task)

Comment 1

[Mark Cornmesser [:markco] OOO 2024/04/15]

::: modules/registry/manifests/2008/disablejit.pp has been changed to the following:
 
class tweaks::disablejit {
    case $env_os_version {
        2008: {
            registry_value { 'HKLM\SOFTWARE\Microsoft\.NETFramework\DbgManagedDebugger':
                ensure => absent,
            }
            registry_value { 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug\Debugger':
                ensure => absent,
            }
            registry_value { 'HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Debugger':
                ensure => absent,
            }
            registry_value { 'HKLM\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting'
                ensure => absent,
            }
        }
        default: {
        }
    }
}

This manifest now uses the registry modules instead of an exec commands. Also the nv_os_version variable has been created to have a distiguishing fact for Windows OS versions.

Comment 2

[Mark Cornmesser [:markco] OOO 2024/04/15]

class registry::2008::disable_moz_svc_cert has been removed it is not needed due the cert is not being installed.

Comment 3

[Mark Cornmesser [:markco] OOO 2024/04/15]

> If the registry module comes from the puppetforge, it should be included
> verbatim.  Anything Mozilla-specific should be in another module.  Some of
> these can, I think, be used from other existing modules, but most will
> probably fit well into the 'tweaks' module.

Created the remote desktop module and moved enablerdp.pp to that module. 

Lesswinnag.pp removed. It was not having the intended effect. 

Mempage.pp moved to the tweaks modules. Also added a create to exec command, so it may only run once. 

Nouac.pp moved to tweaks module. 

Ntfsopt.pp moved to tweaks modules. 

Windefend.pp moved to tweaks modules.

disableddns.pp moved to disableservices module. 

disableupdates.pp  moved to disableservices module.