diff --git a/README.md b/README.md
index b198779..9c72751 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,7 @@
This repository contains a set of supporting scripts used for the Chocolatey for Business (C4B) Quick-Start Guide (QSG).
-These scripts can be used to assist in setup of a brand new Windows Server as a C4B Server.
+These scripts can be used to assist in the setup of a brand-new Windows Server as a C4B Server.
Below is the Quick Start Guide as it exists currently on the [Chocolatey Docs](https://docs.chocolatey.org/en-us/guides/organizations/quick-start-guide/chocolatey-for-business-quick-start-guide).
@@ -34,14 +34,14 @@ As illustrated in the diagram above, there are four main components to a Chocola
1. **C4B Licensed components**: A licensed version of Chocolatey includes:
- Installation of the Chocolatey OSS client package itself (`chocolatey`)
- - Chocolatey license file (`chocolatey.license.xml`) installed in the correct directory (`ProgramData\chocolatey\license`)
+ - The Chocolatey license file (`chocolatey.license.xml`) is installed in the correct directory (`ProgramData\chocolatey\license`)
- Installation of the Chocolatey Licensed extension (`chocolatey.extension`), giving you access to features like Package Builder, Package Internalizer, etc. (full list [here](https://docs.chocolatey.org/en-us/features/)).
-1. **NuGet V3 Repository Server App (Nexus)**: Chocolatey works best with a NuGet V3 repository. This application hosts and manages versioning of your Chocolatey package artifacts, in their enhanced NuGet package (.nupkg) file format. The quick start guide helps you setup [Sonatype Nexus Repository Manager (OSS)](https://www.sonatype.com/products/nexus-repository).
+1. **NuGet V3 Repository Server App (Nexus)**: Chocolatey works best with a NuGet V3 repository. This application hosts and manages the versioning of your Chocolatey package artifacts, in their enhanced NuGet package (.nupkg) file format. The quick start guide helps you set up [Sonatype Nexus Repository Manager (OSS)](https://www.sonatype.com/products/nexus-repository).
-1. **Chocolatey Central Management (CCM)**: CCM is the Web UI portal for your entire Chocolatey environment. Your endpoints check-in to CCM to report their package status. This includes the Chocolatey packages they have installed, and whether any of these packages are outdated. And now, with CCM Deployments, you can also deploy packages or package updates to groups of endpoints, as well as ad-hoc PowerShell commands. CCM is backed by an MS SQL Database. This guide will set up MS SQL Express for you.
+1. **Chocolatey Central Management (CCM)**: CCM is the Web UI portal for your entire Chocolatey environment. Your endpoints check in to CCM to report their package status. This includes the Chocolatey packages they have installed, and whether any of these packages are outdated. And now, with CCM Deployments, you can also deploy packages or package updates to groups of endpoints, as well as ad-hoc PowerShell commands. CCM is backed by an MS SQL Database. This guide will set up MS SQL Express for you.
-1. **Automation Pipeline (Jenkins)**: A pipeline tool will help you automate repetitive tasks, such checking for updates to a set of Chocolatey Packages from the Chocolatey Community Repository (CCR). If updates exist, the pipeline task will auto-internalize your list of packages, and push them into your NuGet repository for you. This guide will help you set up Jenkins as your automation pipeline.
+1. **Automation Pipeline (Jenkins)**: A pipeline tool will help you automate repetitive tasks, such as checking for updates to a set of Chocolatey Packages from the Chocolatey Community Repository (CCR). If updates exist, the pipeline task will auto-internalize your list of packages, and push them into your NuGet repository for you. This guide will help you set up Jenkins as your automation pipeline.
## Requirements
@@ -62,7 +62,7 @@ Below are the minimum requirements for setting up your C4B server via this guide
1. Install all Windows Updates.
-1. If you plan on joining this server to your Active Directory domain, do so now before beginning setup below.
+1. If you plan on joining this server to your Active Directory domain, do so now before beginning the setup below.
1. If you plan to use a Purchased/Acquired or Domain SSL certificate, please ensure the CN/Subject value matches the DNS-resolvable Fully Qualified Domain Name (FQDN) of your C4B Server. Place this certificate in the `Local Machine > Personal` certificate store, and ensure that the private key is exportable.
@@ -120,9 +120,11 @@ Below are the minimum requirements for setting up your C4B server via this guide
>
> - Installs Sonatype Nexus Repository Manager OSS instance
> - Cleans up all demo repositories on Nexus
+ > - Creates a "ChocolateyCore" NuGet repository
> - Creates a "ChocolateyInternal" NuGet repository
> - Creates a "ChocolateyTest" NuGet repository
> - Creates a "choco-install" raw repository
+ > - Sets up "ChocolateyCore" on C4B Server as source, with API key
> - Sets up "ChocolateyInternal" on C4B Server as source, with API key
> - Adds firewall rule for repository access
> - Installs MS Edge, and disables first-run experience
@@ -177,7 +179,7 @@ Below are the minimum requirements for setting up your C4B server via this guide
.\Set-SslSecurity.ps1
```
- **ALTERNATIVE 1 : Custom SSL Certificate** - If you have your own custom SSL certificate (purchased/acquired, or from your Domain CA), you can paste and run the following script with the `Thumbprint` value of your SSL certificate specified:
+ **ALTERNATIVE 1: Custom SSL Certificate** - If you have your own custom SSL certificate (purchased/acquired, or from your Domain CA), you can paste and run the following script with the `Thumbprint` value of your SSL certificate specified:
```powershell
Set-Location "$env:SystemDrive\choco-setup\files"
@@ -189,7 +191,7 @@ Below are the minimum requirements for setting up your C4B server via this guide
> :memo: **NOTE**
> You may have noticed the `-Hardened` parameter we've added above. When using a custom SSL certificate, this parameter will further secure access to your C4B Server. A Role and User credential will be configured to limit access to your Nexus repositories. As well, CCM Client and Service Salts are configured to further encrypt your connection between CCM and your endpoint clients. These additional settings are also incorporated into your `Register-C4bEndpoint.ps1` script for onboarding endpoints. We do require you to enable this option if your C4B Server will be Internet-facing, with a FQDN that resolves to a public IP.
- **ALTERNATIVE 2 : Wildcard SSL Certificate** - If you have a wildcard certificate, you will also need to provide a DNS name you wish to use for that certificate:
+ **ALTERNATIVE 2: Wildcard SSL Certificate** - If you have a wildcard certificate, you will also need to provide a DNS name you wish to use for that certificate:
```powershell
Set-Location "$env:SystemDrive\choco-setup\files"
@@ -272,9 +274,3 @@ Below are the minimum requirements for setting up your C4B server via this guide
Congratulations! If you followed all the steps detailed above, you should now have a fully functioning Chocolatey for Business implementation deployed in your environment.
It is worth mentioning that some customers may have a more bespoke environment, with the presence of proxies and additional configuration management applications. Chocolatey is engineered to be quite flexible, specifically to account for these scenarios. Please refer to the many options for installation referenced on the [Installation page](https://docs.chocolatey.org/en-us/licensed-extension/setup#more-install-options). Again, If you have any questions or would like to discuss more involved implementations, please feel free to reach out to your Chocolatey representative.
-
-### See it in Action
-
-If you'd prefer to watch and follow along, here is a recording of our Chocolatey Team going through this guide live on our Twitch stream:
-
-[YouTube Video](https://www.youtube.com/embed/qbIclPMEgig)
diff --git a/Set-SslSecurity.ps1 b/Set-SslSecurity.ps1
index 7a0afbc..12355c8 100644
--- a/Set-SslSecurity.ps1
+++ b/Set-SslSecurity.ps1
@@ -139,7 +139,10 @@ process {
Write-Host "Nexus is ready!"
choco source remove --name="'ChocolateyInternal'"
- $RepositoryUrl = "https://${SubjectWithoutCn}:8443/repository/ChocolateyInternal/index.json"
+ $InternalRepositoryUrl = "https://${SubjectWithoutCn}:8443/repository/ChocolateyInternal/index.json"
+
+ choco source remove --name="'ChocolateyCore'"
+ $CoreRepositoryUrl = "https://${SubjectWithoutCn}:8443/repository/ChocolateyCore/index.json"
# Build Credential Object, Connect to Nexus
$securePw = (Get-Content 'C:\programdata\sonatype-work\nexus3\admin.password') | ConvertTo-SecureString -AsPlainText -Force
@@ -187,12 +190,23 @@ process {
'source',
'add',
"--name='ChocolateyInternal'",
- "--source='$RepositoryUrl'",
+ "--source='$InternalRepositoryUrl'",
'--priority=1',
"--user='chocouser'",
"--password='$NexusPw'"
)
& choco @ChocoArgs
+
+ $ChocoArgs = @(
+ 'source',
+ 'add',
+ "--name='ChocolateyCore'",
+ "--source='$CoreRepositoryUrl'",
+ '--priority=0',
+ "--user='chocouser'",
+ "--password='$NexusPw'"
+ )
+ & choco @ChocoArgs
}
@@ -201,14 +215,26 @@ process {
'source',
'add',
"--name='ChocolateyInternal'",
- "--source='$RepositoryUrl'",
+ "--source='$InternalRepositoryUrl'",
'--priority=1'
)
& choco @ChocoArgs
+
+ $ChocoArgs = @(
+ 'source',
+ 'add',
+ "--name='ChocolateyCore'",
+ "--source='$CoreRepositoryUrl'",
+ '--priority=0'
+ )
+ & choco @ChocoArgs
}
# Update Repository API key
- $chocoArgs = @('apikey', "--source='$RepositoryUrl'", "--api-key='$NuGetApiKey'")
+ $chocoArgs = @('apikey', "--source='$InternalRepositoryUrl'", "--api-key='$NuGetApiKey'")
+ & choco @chocoArgs
+
+ $chocoArgs = @('apikey', "--source='$CoreRepositoryUrl'", "--api-key='$NuGetApiKey'")
& choco @chocoArgs
# Reset the NuGet v3 cache, such that it doesn't capture localhost as the FQDN
@@ -216,7 +242,7 @@ process {
Update-JsonFile -Path "$env:SystemDrive\choco-setup\logs\nexus.json" -Properties @{
NexusUri = "https://$($SubjectWithoutCn):8443"
- NexusRepo = $RepositoryUrl
+ NexusRepo = $CoreRepositoryUrl
ChocoUserPassword = $NexusPw
}
@@ -271,7 +297,7 @@ process {
# Touch NOTHING below this line
`$User = 'chocouser'
`$SecurePassword = `$NexusUserPW | ConvertTo-SecureString -AsPlainText -Force
-`$RepositoryUrl = "https://`$(`$fqdn):8443/repository/ChocolateyInternal/index.json"
+`$RepositoryUrl = "https://`$(`$fqdn):8443/repository/ChocolateyCore/index.json"
`$credential = [pscredential]::new(`$user, `$securePassword)
diff --git a/Start-C4bNexusSetup.ps1 b/Start-C4bNexusSetup.ps1
index 21297ac..e8bc63c 100644
--- a/Start-C4bNexusSetup.ps1
+++ b/Start-C4bNexusSetup.ps1
@@ -57,6 +57,7 @@ process {
Enable-NexusRealm -Realm 'NuGet API-Key Realm'
#Create Chocolatey repositories
+ New-NexusNugetHostedRepository -Name ChocolateyCore -DeploymentPolicy Allow
New-NexusNugetHostedRepository -Name ChocolateyInternal -DeploymentPolicy Allow
New-NexusNugetHostedRepository -Name ChocolateyTest -DeploymentPolicy Allow
New-NexusRawHostedRepository -Name choco-install -DeploymentPolicy Allow -ContentDisposition Attachment
@@ -66,11 +67,11 @@ process {
# Push all packages from previous steps to NuGet repo
Get-ChildItem -Path "$env:SystemDrive\choco-setup\files\packages" -Filter *.nupkg | ForEach-Object {
- choco push $_.FullName --source "$((Get-NexusRepository -Name 'ChocolateyInternal').url)/index.json" --apikey $NugetApiKey --force
+ choco push $_.FullName --source "$((Get-NexusRepository -Name 'ChocolateyCore').url)/index.json" --apikey $NugetApiKey --force
}
# Temporary workaround to reset the NuGet v3 cache, such that it doesn't capture localhost as the FQDN
- Remove-NexusRepositoryFolder -RepositoryName ChocolateyInternal -Name v3
+ Remove-NexusRepositoryFolder -RepositoryName ChocolateyCore -Name v3
# Push latest ChocolateyInstall.ps1 to raw repo
$ScriptDir = "$env:SystemDrive\choco-setup\files\scripts"
@@ -91,6 +92,9 @@ process {
# Add ChocolateyInternal as a source repository
choco source add -n 'ChocolateyInternal' -s "$((Get-NexusRepository -Name 'ChocolateyInternal').url)/index.json" --priority 1
+ # Add ChocolateyCore as a source repository
+ choco source add -n 'ChocolateyCore' -s "$((Get-NexusRepository -Name 'ChocolateyCore').url)/index.json" --priority 0 --admin-only
+
# Install a non-IE browser for browsing the Nexus web portal.
if (-not (Test-Path 'C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe')) {
Write-Host "Installing Microsoft Edge, to allow viewing the Nexus site"
diff --git a/jenkins/Update ChocolateyCore Repository/builds/legacyIds b/jenkins/Update ChocolateyCore Repository/builds/legacyIds
new file mode 100644
index 0000000..e69de29
diff --git a/jenkins/Update ChocolateyCore Repository/builds/permalinks b/jenkins/Update ChocolateyCore Repository/builds/permalinks
new file mode 100644
index 0000000..d7703c1
--- /dev/null
+++ b/jenkins/Update ChocolateyCore Repository/builds/permalinks
@@ -0,0 +1,2 @@
+lastFailedBuild -1
+lastSuccessfulBuild -1
diff --git a/jenkins/Update ChocolateyCore Repository/config.xml b/jenkins/Update ChocolateyCore Repository/config.xml
new file mode 100644
index 0000000..5055fa2
--- /dev/null
+++ b/jenkins/Update ChocolateyCore Repository/config.xml
@@ -0,0 +1,43 @@
+
+
+ Automatically update any out of date packages in the ChocolateyCore repository from the Licensed and Community Repositories
+ false
+
+
+
+
+
+ P_LOCAL_REPO_URL
+ Internal core repository.
+ https://{{hostname}}:8443/repository/ChocolateyCore/index.json
+ true
+
+
+ P_REMOTE_REPO_URL
+ Remote repositories containing updated package versions.
+ https://licensedpackages.chocolatey.org/api/v2/;https://community.chocolatey.org/api/v2/
+ true
+
+
+ P_LOCAL_REPO_API_KEY
+ API key for the internal core repository where updated packages will be pushed.
+ {{NugetApiKey}}
+
+
+
+
+
+
+ true
+
+
+ false
+
diff --git a/jenkins/Update ChocolateyCore Repository/nextBuildNumber b/jenkins/Update ChocolateyCore Repository/nextBuildNumber
new file mode 100644
index 0000000..d00491f
--- /dev/null
+++ b/jenkins/Update ChocolateyCore Repository/nextBuildNumber
@@ -0,0 +1 @@
+1
diff --git a/jenkins/Update production repository/config.xml b/jenkins/Update production repository/config.xml
index a9d0f31..bc4e7b6 100644
--- a/jenkins/Update production repository/config.xml
+++ b/jenkins/Update production repository/config.xml
@@ -25,20 +25,6 @@
-
-
-
-
- Internalize packages from the Community Repository, Update test repository from Chocolatey Community Repository,
-
- SUCCESS
- 0
- BLUE
- true
-
-
-
-