Wsus-client Cookbook

Configures WSUS clients to retrieve approved updates.

Testing

The PowerShell script will always fail if run via the winrm vagrant provider
as the IUpdateSession::CreateUpdateDownloader is not available remotely.

Logs

The Microsoft.Update.Session object keeps a log in: C:\Windows\WindowsUpdate.log

Requirements

This cookbook requires Chef 11.12.0+ because it leverages the guard_interpreter feature for powershell scripts.

Platforms

• Windows XP
• Windows Vista
• Windows Server 2003 R2
• Windows 7
• Windows Server 2008 (R1, R2)
• Windows 8 and 8.1
• Windows Server 2012 (R1, R2)

Usage

Using this cookbook is quite easy; add the desired recipes to the run list of a node, or role.
Adjust any attributes as desired. For example, to configure a windows server role that connects to your WSUS server:
```ruby
$ cat roles/updated_windows_server.rb
name 'updated_windows_server'
description 'Setup a windows server to keep up-to-date'

run_list(
'wsus-client::default'
)

default_attributes(
wsus_client: {
wsus_server: 'http://wsus-server.my-corporation.com:8530',
update_group: 'updated_server2015',
# allow 3h timeout to synchronize updates
timeout: 10_800,
},
)
```

Recipes

wsus-client::default

Convenience recipe that configures WSUS client and performs a synchronous update.
It basically includes wsus-client::configure and wsus-client::update

wsus-client::configure

This recipe modifies the Windows registry to configure WSUS update settings.

Attributes

The following attributes are used to configure the wsus-client::configure recipe, accessible via node['wsus_client'][attribute].

* automatic_update_behavior values are:
```ruby

:disabled = Disables automatic updates

:detect = Only notify users of new updates

:download = Download updates, but let users install them

:install = Download and install updates

:manual = Lets the users configure the behavior

`**` schedule_install_day possible values are: `:every_day`, `:sunday`, `:monday`, `:tuesday`, `:wednesday`, `:thursday`, `:friday`, `:saturday`

## wsus-client::update
This recipe performs a synchronous detection and install of available Windows updates.

### Attributes
The following attributes are used to configure the `wsus-client::update` recipe, accessible via `node['wsus_client'][attribute]`.

Attribute      | Description                                                          | Type   | Default
---------------|----------------------------------------------------------------------|--------|--------
update_timeout | The maximum amount of time the synchronous update is allowed to run. | FixNum | `7200`

> **Note:** mixlib-shellout < 2.0.1 does not terminating the process after the allowed timeout. Chef 12.0.4 includes the new version.

Contributing
------------
1. Fork the [repository on Github][repository]
2. Create a named feature branch (like `add_component_x`)
3. Write your change
4. Write tests for your change (if applicable)
5. Run the tests, ensuring they all pass
6. Submit a Pull Request using Github

License and Authors
-------------------
Authors: [Baptiste Courtois][author] ()

```text
Copyright 2014-2015, Criteo.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.