-
Notifications
You must be signed in to change notification settings - Fork 8
/
Start-C4bNexusSetup.ps1
134 lines (111 loc) · 5.3 KB
/
Start-C4bNexusSetup.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
<#
.SYNOPSIS
C4B Quick-Start Guide Nexus setup script
.DESCRIPTION
- Performs the following Sonatype Nexus Repository setup
- Install of Sonatype Nexus Repository Manager OSS instance
- Edit configuration to allow running of scripts
- Cleanup of all demo source repositories
- Creates `ChocolateyInternal` NuGet repository
- Creates `ChocolateyTest` NuGet repository
- Creates `choco-install` raw repository, with a script for offline Chocolatey install
- Setup of `ChocolateyInternal` on C4B Server as source, with API key
- Setup of firewall rule for repository access
#>
[CmdletBinding()]
param(
# Choice of non-IE broswer for Nexus
[Parameter()]
[string]
$Browser = 'Edge'
)
begin {
if($host.name -ne 'ConsoleHost') {
Write-Warning "This script cannot be ran from within PowerShell ISE"
Write-Warning "Please launch powershell.exe as an administrator, and run this script again"
break
}
}
process {
$DefaultEap = $ErrorActionPreference
$ErrorActionPreference = 'Stop'
Start-Transcript -Path "$env:SystemDrive\choco-setup\logs\Start-C4bNexusSetup-$(Get-Date -Format 'yyyyMMdd-HHmmss').txt"
# Dot-source helper functions
. .\scripts\Get-Helpers.ps1
# Install base nexus-repository package
Write-Host "Installing Sonatype Nexus Repository"
$chocoArgs = @('install', 'nexus-repository', '-y' ,'--no-progress', "--package-parameters='/Fqdn:localhost'")
& choco @chocoArgs
#Build Credential Object, Connect to Nexus
Write-Host "Configuring Sonatype Nexus Repository"
$securePw = (Get-Content 'C:\programdata\sonatype-work\nexus3\admin.password') | ConvertTo-SecureString -AsPlainText -Force
$Credential = [System.Management.Automation.PSCredential]::new('admin',$securePw)
Connect-NexusServer -Hostname localhost -Credential $Credential
#Drain default repositories
$null = Get-NexusRepository | Where-Object Name -NotLike "choco*" | Remove-NexusRepository -Force
#Enable NuGet Auth Realm
Enable-NexusRealm -Realm 'NuGet API-Key Realm'
#Create Chocolatey repositories
New-NexusNugetHostedRepository -Name ChocolateyInternal -DeploymentPolicy Allow
New-NexusNugetHostedRepository -Name ChocolateyTest -DeploymentPolicy Allow
New-NexusRawHostedRepository -Name choco-install -DeploymentPolicy Allow -ContentDisposition Attachment
#Surface API Key
$NuGetApiKey = (Get-NexusNuGetApiKey -Credential $Credential).apikey
# Push all packages from previous steps to NuGet repo
Get-ChildItem -Path "$env:SystemDrive\choco-setup\files\files" -Filter *.nupkg | ForEach-Object {
choco push $_.FullName --source "$((Get-NexusRepository -Name 'ChocolateyInternal').url)/index.json" --apikey $NugetApiKey --force
}
# Temporary workaround to reset the NuGet v3 cache, such that it doesn't capture localhost as the FQDN
Remove-NexusRepositoryFolder -RepositoryName ChocolateyInternal -Name v3
# Push latest ChocolateyInstall.ps1 to raw repo
$ScriptDir = "$env:SystemDrive\choco-setup\files\scripts"
$ChocoInstallScript = "$ScriptDir\ChocolateyInstall.ps1"
if (-not (Test-Path $ChocoInstallScript)) {
Invoke-WebRequest -Uri 'https://chocolatey.org/install.ps1' -OutFile $ChocoInstallScript
}
$Signature = Get-AuthenticodeSignature -FilePath $ChocoInstallScript
if ($Signature.Status -eq 'Valid' -and $Signature.SignerCertificate.Subject -eq 'CN="Chocolatey Software, Inc", O="Chocolatey Software, Inc", L=Topeka, S=Kansas, C=US') {
New-NexusRawComponent -RepositoryName 'choco-install' -File $ChocoInstallScript
} else {
Write-Error "ChocolateyInstall.ps1 script signature is not valid. Please investigate."
}
# Add ChocolateyInternal as a source repository
choco source add -n 'ChocolateyInternal' -s "$((Get-NexusRepository -Name 'ChocolateyInternal').url)/index.json" --priority 1
# Install a non-IE browser for browsing the Nexus web portal.
if (-not (Test-Path 'C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe')) {
Write-Host "Installing Microsoft Edge, to allow viewing the Nexus site"
choco install microsoft-edge -y
if ($LASTEXITCODE -eq 0) {
if (Test-Path 'HKLM:\SOFTWARE\Microsoft\Edge') {
$RegArgs = @{
Path = 'HKLM:\SOFTWARE\Microsoft\Edge\'
Name = 'HideFirstRunExperience'
Type = 'Dword'
Value = 1
Force = $true
}
$null = Set-ItemProperty @RegArgs
}
}
}
# Add Nexus port 8081 access via firewall
$FwRuleParams = @{
DisplayName = 'Nexus Repository access on TCP 8081'
Direction = 'Inbound'
LocalPort = 8081
Protocol = 'TCP'
Action = 'Allow'
}
$null = New-NetFirewallRule @FwRuleParams
# Save useful params to JSON
$NexusJson = @{
NexusUri = "http://localhost:8081"
NexusUser = "admin"
NexusPw = "$($Credential.GetNetworkCredential().Password)"
NexusRepo = "$((Get-NexusRepository -Name 'ChocolateyInternal').url)/index.json"
NuGetApiKey = $NugetApiKey
}
$NexusJson | ConvertTo-Json | Out-File "$env:SystemDrive\choco-setup\logs\nexus.json"
$ErrorActionPreference = $DefaultEap
Stop-Transcript
}