Skip to content

setupJenkinsAddingWindowsAgent.md

Latest commit

 

History

History
113 lines (68 loc) · 3.42 KB

setupJenkinsAddingWindowsAgent.md

File metadata and controls

113 lines (68 loc) · 3.42 KB
Raw

Set Up Jenkins Adding Windows Agent

Create a LOCAL new user

Get ssh set up

Install openssh with chocolatey

choco install openssh

Enable powershell scripts to run for this powershell session

Set-ExecutionPolicy RemoteSigned -Scope CurrentUser -Force

- or -

Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass

  • Duration: Bypass -Scope Process is temporary (session-only); RemoteSigned -Scope CurrentUser is persistent for the user profile. 

  • Security: Bypass offers no protection against malicious code; RemoteSigned maintains security by enforcing signatures on external scripts.

  • Permissions: Bypass -Scope Process works without admin rights; RemoteSigned -Scope CurrentUser also works without admin rights but modifies the user's registry settings permanently.

Key Effects of -Force

  • Non-Interactive Execution: Without -Force, PowerShell asks: "Are you sure you want to change the execution policy?" requiring a manual "Y" or "A" response. The -Force flag automatically confirms this, allowing the command to run silently.

  • Automation Friendly: It is essential for scripts, scheduled tasks, or remote commands (via Invoke-Command) where no user is present to answer the prompt. 

  • No Security Impact: The flag does not bypass security restrictions, Group Policy overrides, or change the scope of the policy.  It strictly affects the user interface interaction.

Install and Configure the SSHD Service

Install the sshd service for Windows

Start-Service sshd

Enable the sshd service across reboots

Set-Service -Name sshd -StartupType 'Automatic'

Open the firewall to port 22 for sshd

NOTE!! Need to fix to the right sshd server...

New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH SSH Server' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22 -Program "C:\Windows\System32\OpenSSH\sshd.exe"

Check that port22 is open

netstat -nao | findstr ":22"

Edit the %PROGRAMDATA%\ssh\sshd_config file and make sure the line PubkeyAuthentication yes is uncommented, and set to yes.

  • Handle Administrator Accounts: By default, Windows forces administrator accounts to use a special key file location.

    • Option A (Recommended for single-user): Comment out the last two lines of the file that look like this:

      #Match Group administrators
#       AuthorizedKeysFile __PROGRAMDATA__/ssh/administrators_authorized_keys

      This allows administrators to use the standard user key file location.

    • Option B (Strict Security): Leave those lines active. You must then place your key in C:\ProgramData\ssh\administrators_authorized_keys instead of your user folder.

New-ItemProperty -Path "HKLM:\SOFTWARE\OpenSSH" -Name DefaultShell -Value "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -PropertyType String -Force

Restart the sshd server:

Restart-Service sshd
Get-Service sshd

Install same version of jdk as on server

choco install microsoft-openjdk-21

Set the default shell to powershell

Get sudoers file set up properly