Here are the slides from Michael Smith's PuppetConf 2016 presentation called Building Nano Server Images with Puppet and DSC . Watch the videos at https://www.youtube.com/playlist?list=PLV86BgbREluVjwwt-9UL8u2Uy8xnzpIqa

1. Nano Server
Puppet + DSC
Michael Smith, Developer @ Puppet

2. Nano Server: Puppet + DSC 2
What is Nano Server?
Why would we use it?
Limitations
How to start
How does Puppet fit in

3. Nano Server: Puppet + DSC 3
What is Nano Server?

4. Nano Server: Puppet + DSC 4

5. Nano Server: Puppet + DSC 5
A lightweight Windows Server
Source: http://windowsitpro.com/windows-server-2016/install-options-windows-server-2016

6. Nano Server: Puppet + DSC 6
A much faster virtual server
Source: http://www.techradar.com/news/software/operating-systems/why-nano-server-is-the-most-vital-change-to-windows-server-since-windows-nt-3-5-1295803

7. Nano Server: Puppet + DSC 7
Why Do I Care?

8. 8

9. Nano Server: Puppet + DSC 9
Limitations

10. Nano Server: Puppet + DSC
No GUI, just PowerShell/cmd
64-bit only
No MSI, new Windows Server Apps (WSA)
Minimal configuration (no ADSI, no Group Policy)
.Net CoreCLR
Deprecated functions removed - https://goo.gl/48IZV6
Limited PowerShell support
10

11. Nano Server: Puppet + DSC 11
Getting Nano Server

12. Nano Server: Puppet + DSC 12
Hyper-V: Command-Line https://goo.gl/RDOUwA
$password = ConvertTo-SecureString -AsPlaintext -Force 'vagrant'
New-NanoServerImage
-MediaPath 'E:'
-Edition 'Datacenter'
-DeploymentType Guest
-AdministratorPassword 'vagrant'
-TargetPath 'C:NanoVM.vhd'
-MaxSize 8589934592
-SetupUI ('NanoServer.Containers', 'NanoServer.DSC')
-SetupCompleteCommand ('tzutil.exe /s "Pacific Standard Time"')
-LogPath 'C:TempNanoServerImageBuilderLogs2016-10-16 12-29'

13. Nano Server: Puppet + DSC 13
Nano Server Image Builder https://goo.gl/IEFU9d

14. Nano Server: Puppet + DSC 14
Server Feature Packages

15. Nano Server: Puppet + DSC 15
Configuration SimpleVM {
param (
[string[]]$NodeName = 'localhost',
[string]$VhdPath
)
Import-DscResource -ModuleName xHyper-V
Node $NodeName {
xVMSwitch internal {
Ensure = 'Present'
Name = 'internal'
Type = 'Internal'
}
xVMHyperV SimpleVM {
Ensure = 'Present'
Name = 'SimpleVM'
VhdPath = $VhdPath
SwitchName = 'internal'
State = 'Running'
Generation = 1
StartupMemory = 512MB
ProcessorCount = 1
DependsOn = '[xVMSwitch]internal'
}
}
}
SimpleVM -VhdPath 'C:/VM/NanoServerDataCenter.vhd'
Desired State Configuration (DSC)

16. Nano Server: Puppet + DSC 16
puppetlabs-dsc
dsc_xVMHyperV { 'SimpleVM':
dsc_ensure => present,
dsc_name => 'SimpleVM',
dsc_vhdpath => 'C:/VM/
NanoServerDataCenter.vhd',
dsc_switchname => 'internal',
dsc_state => 'running',
dsc_generation => 1,
dsc_startupmemory => 536870912,
dsc_processorcount => 1,
require => Dsc_XVMSwitch['internal'],
}
dsc_xVMSwitch { 'internal':
dsc_ensure => 'present',
dsc_name => 'internal',
dsc_type => 'Internal',
}

17. Nano Server: Puppet + DSC 17
Demos
GitHub:MikaelSmith/puppetconf2016

18. Nano Server: Puppet + DSC 18
Hyper-V Demo
https://github.com/MikaelSmith/puppetconf2016#hyper-v-demo

19. Nano Server: Puppet + DSC 19
Hacks upon Hacks
https://github.com/PowerShell/xStorage/pull/60
https://tickets.puppetlabs.com/browse/MODULES-3690
https://tickets.puppetlabs.com/browse/MODULES-3831
Everything’s broken
… but getting fixed.

20. Nano Server: Puppet + DSC 20
Vagrant/Virtualbox
Enable-PSRemoting -Force
Set-Item wsman:localhostclienttrustedhosts -Value localhost -Force
$pw = ConvertTo-SecureString -asPlainText -Force "vagrant"
$c = New-Object System.Management.Automation.PSCredential("vagrant", $pw)
Enter-PSSession -ComputerName localhost -Port 55985 -Credential $c
Vagrant Boxes: https://goo.gl/RSGdHN
PowerShell Remoting
rwinrm vagrant@127.0.0.1:55985
https://github.com/WinRb/WinRM
Demo: https://github.com/MikaelSmith/puppetconf2016#build-vagrant-box

21. Nano Server: Puppet + DSC 21
Vagrant Demo

22. Nano Server: Puppet + DSC 22
Docker https://goo.gl/Vp5CQB
Source: http://windowsitpro.com/windows-server-2016/differences-between-windows-containers-and-hyper-v-containers-windows-server-201

23. Nano Server: Puppet + DSC
FROM microsoft/nanoserver
SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop';"]
ENV NPM_CONFIG_LOGLEVEL info
ENV NODE_VERSION 4.6.1
ENV NODE_SHA256 f576f2dacc4262202ae21f7d64ab9a01b7e551795848dfa39ef39a2cd63fa42c
RUN Invoke-WebRequest $('https://nodejs.org/dist/v{0}/node-v{0}-win-x64.zip' -f $env:NODE_VERSION) -OutFile 'node.zip' -UseBasicParsing ;
[System.IO.Compression.ZipFile]::ExtractToDirectory('C:node.zip', 'C:') ;
Rename-Item -Path $('C:node-v{0}-win-x64' -f $env:NODE_VERSION) -NewName 'C:nodejs' ;
New-Item $($env:APPDATA + 'npm') ;
$env:PATH = 'C:nodejs;{0}npm;{1}' -f $env:APPDATA, $env:PATH ;
Set-ItemProperty -Path 'HKLM:SYSTEMCurrentControlSetControlSession ManagerEnvironment' -Name Path -Value $env:PATH ;
Remove-Item -Path node.zip
CMD [ "node.exe" ]
23
Dockerfiles https://goo.gl/kcTctx
Source: https://github.com/StefanScherer/dockerfiles-windows/blob/e7a938a9e32fe89e6d5aa232054971ad91e98ac7/node/4.6/nano/Dockerfile
Base Node Container

24. Nano Server: Puppet + DSC 24
FROM node:4.6.1-nano
RUN mkdir app
WORKDIR /app
ONBUILD COPY package.json package.json
ONBUILD RUN npm install
ONBUILD COPY . .
CMD [ "npm.cmd", "start" ]
Dockerfiles, Cont.
Source: https://github.com/StefanScherer/dockerfiles-windows/blob/e7a938a9e32fe89e6d5aa232054971ad91e98ac7/node/4.6/nano/onbuild/Dockerfile
FROM nano:4.6.1-nano-onbuild
Node Onbuild Template
Application Builder

25. Nano Server: Puppet + DSC 25
Docker Demo
https://github.com/MikaelSmith/puppetconf2016#docker-demo

26. Nano Server: Puppet + DSC
https://github.com/MikaelSmith/puppet-agent/tree/nano-hacks
https://github.com/MikaelSmith/puppetconf2016#docker-demo
Track 5: Modern Infrastructure
Running Puppet Software in Docker Containers - Gareth Rushgrove
Kubernetes: Add Windows Containers Support
https://github.com/kubernetes/kubernetes/issues/22623
26
Containers

27. Nano Server: Puppet + DSC 27
Adding Puppet

28. Nano Server: Puppet + DSC 28
Things that work
Core Resources
file, host, exec
Modules
- puppetlabs-reboot
- Puppetlabs-acl
Maybe
- puppetlabs-powershell (after MODULES-3690, 3990)
- puppetlabs-dsc (after MODULES-3831)

29. Nano Server: Puppet + DSC 29
Registry + DSC
dsc_registry { 'enable long paths':
dsc_ensure => present,
dsc_key => 'HKEY_LOCAL_MACHINESystemCurrentControlSetPolicies',
dsc_valuename => 'LongPathsEnabled',
dsc_valuedata => '1',
Dsc_valuetype => 'DWORD',
}
Source: http://winaero.com/blog/how-to-enable-ntfs-long-paths-in-windows-10/

30. Nano Server: Puppet + DSC
Core Resources
- user (requires ADSI)
- group (requires ADSI)
- package (no appx support yet)
- scheduled_task (requires mstask.dll)
Modules
- puppet-iis (based on PowerShell WebAdministration)
- many others
30
Things that don’t (yet)

31. Nano Server: Puppet + DSC 31
$username = 'vagrant'
$password = 'vagrant'
$groupname = 'puppet'
Users & Groups
exec { 'puppet group':
command => "New-LocalGroup -Name ${groupname}",
unless => "Get-LocalGroup -Name ${groupname}",
provider => powershell,
}

32. Nano Server: Puppet + DSC 32
exec { 'vagrant user in puppet group':
command => "Add-LocalGroupMember -Group ${groupname} -Member ${username}",
unless => "Get-LocalGroupMember -Group ${groupname} -Member ${username}",
provider => powershell,
require => [Exec['puppet group'], Exec['vagrant user']],
}
Users & Groups, Cont.
exec { 'vagrant user':
command => "New-LocalUser -Name ${username} -Password
(ConvertTo-SecureString -AsPlainText "${password}" -Force)",
unless => "Get-LocalUser -Name ${username}",
provider => powershell,
}

33. Nano Server: Puppet + DSC 33
Puppet Demo
https://github.com/MikaelSmith/puppetconf2016#puppet-demo

34. Nano Server: Puppet + DSC 34
Packaging
https://github.com/mikaelsmith/puppetconf2016#packaging-demo

35. Nano Server: Puppet + DSC 35
Debugging Problems
https://github.com/mikaelsmith/puppetconf2016#debugging-problems-demo

36. Nano Server: Puppet + DSC
Ways to get started
Hyper-V directly, Docker, Virtualbox/Vagrant
Tools to improve
PowerShell, DSC modules, Puppet modules, Puppet core
resources, applications, Vagrant, Packer, etc.
36

37. Nano Server: Puppet + DSC 37
http://www.hurryupandwait.io/
https://cloudbase.it/

38. Nano Server: Puppet + DSC 38
Thanks!
Questions?