jemrobinson
commented
4 years ago Closed jemrobinson closed 3 years ago
jemrobinson
commented
4 years ago 
martintoreilly
commented
4 years ago martintoreilly
commented
4 years ago The VMs in both SREs were running very slowly, while under very little load.
👉 TL;DR: If the DSVM is being slow, stop (de-allocate) and start the RDS App session host. 👈
martintoreilly
commented
4 years ago inboundAccessFrom in SRE configs).
martintoreilly
commented
4 years ago Applies fix from PR #766 for issue #623, addressing the only non-low severity issue identified during the 13th July penetration test of this deployment by removing support for TLS 1.0 and 1.1, plus a related low severity issue by removing support for weak TLS cipher suites.
Temporarily allow connections to SRE RDS Gateways from SSL Labs IP ranges
Full SSL Labs report for SRE1
Full SSL Labs report for SRE2
Remove access to SRE RDS Gateways from SSL Labs IP range
martintoreilly
commented
4 years ago Addresses CVE-2020-1350 by applying KB4558998.
martintoreilly
commented
4 years ago 
martintoreilly
commented
4 years ago 
martintoreilly
commented
4 years ago 
SHM 'decovid' deployment
Code version
```pwsh Already up to date. On branch master Your branch is up to date with 'origin/master'. nothing to commit, working tree clean At commit 5f3ee4fa (5f3ee4fa6711003c80acdad19b3b80e21e6cb079) ```Setup_SHM_DNS_Zone
```pwsh 2020-07-10 10:19:52 [ INFO]: Ensuring that resource group 'RG_SHM_DNS_DECOVID' exists... 2020-07-10 10:19:53 [SUCCESS]: [✔] Resource group 'RG_SHM_DNS_DECOVID' already exists 2020-07-10 10:19:53 [ INFO]: Ensuring that DNS Zone exists... 2020-07-10 10:19:53 [ INFO]: Ensuring the DNS zone 'decovid.turingsafehaven.ac.uk' exists... 2020-07-10 10:19:54 [SUCCESS]: [✔] DNS Zone 'decovid.turingsafehaven.ac.uk' already exists 2020-07-10 10:19:54 [ INFO]: Get NS records from the new DNS Zone... 2020-07-10 10:19:54 [ INFO]: Reading NS records '@' for DNS Zone 'decovid.turingsafehaven.ac.uk'... 2020-07-10 10:19:55 [ INFO]: No existing DNS Zone was found for 'turingsafehaven.ac.uk' in resource group 'RG_SHM_DNS_DECOVID'. 2020-07-10 10:19:55 [ INFO]: You need to add the following NS records to the parent DNS system for 'turingsafehaven.ac.uk': 'ns1-06.azure-dns.com. ns2-06.azure-dns.net. ns3-06.azure-dns.org. ns4-06.azure-dns.info.' ```Setup_SHM_AAD_Domain
```pwsh WARNING: /Users/jrobinson/.local/share/powershell/Modules/AzureAD.Standard.Preview/0.1.599.7 WARNING: AzureAD.Standard.Preview WARNING: /Users/jrobinson/.local/share/powershell/Modules/AzureAD.Standard.Preview/0.1.599.7/net471 WARNING: Loading module in coreclr folder: 'netstandard2.0' ... Connecting to Azure AD 'bd57aa52-957e-4fc3-bfcc-104507f2c9d3'... WARNING: To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code DTS7Y7T9J to authenticate. 2020-07-10 10:21:13 [ INFO]: Adding SHM domain to AAD... 2020-07-10 10:21:14 [SUCCESS]: [✔] 'decovid.turingsafehaven.ac.uk' added as custom domain on SHM AAD. 2020-07-10 10:21:14 [ INFO]: Verifying domain on SHM AAD... 2020-07-10 10:21:17 [SUCCESS]: [✔] Verification TXT record added to 'decovid.turingsafehaven.ac.uk' DNS zone. 2020-07-10 10:21:17 [ INFO]: Checking domain verification status on SHM AAD (attempt 1 of 10)... 2020-07-10 10:21:18 [SUCCESS]: [✔] Domain 'decovid.turingsafehaven.ac.uk' is verified on SHM AAD. 2020-07-10 10:21:18 [ INFO]: Ensuring 'decovid.turingsafehaven.ac.uk' is primary domain on SHM AAD. 2020-07-10 10:21:18 [SUCCESS]: [✔] Set 'decovid.turingsafehaven.ac.uk' as primary domain on SHM AAD. ```Setup_SHM_KeyVault_And_Emergency_Admin
```pwsh WARNING: /Users/jrobinson/.local/share/powershell/Modules/AzureAD.Standard.Preview/0.1.599.7 WARNING: AzureAD.Standard.Preview WARNING: /Users/jrobinson/.local/share/powershell/Modules/AzureAD.Standard.Preview/0.1.599.7/net471 WARNING: Loading module in coreclr folder: 'netstandard2.0' ... Connecting to Azure AD 'bd57aa52-957e-4fc3-bfcc-104507f2c9d3'... WARNING: To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code DWJ2QF37R to authenticate. 2020-07-10 10:23:49 [ INFO]: Ensuring that resource group 'RG_SHM_DECOVID_SECRETS' exists... 2020-07-10 10:23:50 [ INFO]: [ ] Creating resource group 'RG_SHM_DECOVID_SECRETS' 2020-07-10 10:23:50 [SUCCESS]: [✔] Created resource group 'RG_SHM_DECOVID_SECRETS' 2020-07-10 10:23:50 [ INFO]: Ensuring that key vault 'kv-shm-decovid' exists... 2020-07-10 10:23:51 [ INFO]: [ ] Creating key vault 'kv-shm-decovid' 2020-07-10 10:24:36 [SUCCESS]: [✔] Created key vault 'kv-shm-decovid' 2020-07-10 10:24:36 [ INFO]: Giving group 'Safe Haven Test Admins' access to key vault 'kv-shm-decovid'... 2020-07-10 10:24:40 [SUCCESS]: [✔] Set correct access policies for key vault 'kv-shm-decovid' 2020-07-10 10:24:40 [ INFO]: Ensuring that secrets exist in key vault 'kv-shm-decovid'... 2020-07-10 10:24:42 [SUCCESS]: [✔] AAD emergency administrator account username exists 2020-07-10 10:24:44 [SUCCESS]: [✔] AAD emergency administrator account password exists 2020-07-10 10:24:50 [SUCCESS]: [✔] Ensured that SHM admin usernames exist 2020-07-10 10:25:10 [SUCCESS]: [✔] Ensured that SHM VM admin passwords exist 2020-07-10 10:25:19 [SUCCESS]: [✔] Ensured that domain joining passwords exist 2020-07-10 10:25:20 [SUCCESS]: [✔] Ensured that service account passwords exist 2020-07-10 10:25:22 [ INFO]: Ensuring AAD emergency administrator account exists... 2020-07-10 10:25:22 [SUCCESS]: [✔] AAD emergency administrator account created. 2020-07-10 10:25:22 [ INFO]: Ensuring that self-signed CA certificate exists in the 'kv-shm-decovid' KeyVault... 2020-07-10 10:25:23 [ INFO]: Creating new self-signed CA certificate... 2020-07-10 10:25:24 [ INFO]: [ ] Generating self-signed certificate locally Generating a 2048 bit RSA private key ....................+++ ..................................................................................................................................................................+++ writing new private key to '/var/folders/q7/nl3w6z854711jwsdy0hj7sxhwypcgh/T/tmpeGWrkK.tmp.certificates/SHM-DECOVID-P2S-CA.key' ----- 2020-07-10 10:25:26 [SUCCESS]: [✔] Generating self-signed certificate succeeded 2020-07-10 10:25:26 [ INFO]: [ ] Uploading CA private key + certificate bundle as certificate shm-decovid-vpn-ca-cert (includes private key) 2020-07-10 10:25:27 [SUCCESS]: [✔] Uploading the full CA certificate succeeded 2020-07-10 10:25:27 [ INFO]: [ ] Uploading the plain CA certificate as secret shm-decovid-vpn-ca-cert-plain (without private key) 2020-07-10 10:25:29 [SUCCESS]: [✔] Uploading the plain CA certificate succeeded 2020-07-10 10:25:29 [ INFO]: Ensuring that client certificate exists in the 'kv-shm-decovid' KeyVault... 2020-07-10 10:25:30 [ INFO]: Creating new client certificate... 2020-07-10 10:25:30 [ INFO]: [ ] Loading CA private key from key vault... MAC verified OK 2020-07-10 10:25:31 [SUCCESS]: [✔] Loading CA private key succeeded 2020-07-10 10:25:31 [ INFO]: [ ] Retrieving CA plain certificate... 2020-07-10 10:25:32 [SUCCESS]: [✔] Validated CA certificate retrieval using MD5 2020-07-10 10:25:32 [ INFO]: [ ] Creating new certificate signing request to be signed by the CA certificate... 2020-07-10 10:25:34 [SUCCESS]: [✔] CSR creation succeeded 2020-07-10 10:25:34 [ INFO]: [ ] Signing the CSR and merging into the 'shm-decovid-vpn-client-cert' certificate... Signature ok subject=/CN=SHM-DECOVID-P2S-CLIENT Getting CA Private Key 2020-07-10 10:25:37 [SUCCESS]: [✔] Importing the signed client certificate succeeded ```Setup_SHM_DC
```pwsh 2020-07-10 10:49:45 [ INFO]: Ensuring that resource group 'RG_SHM_DECOVID_ARTIFACTS' exists... 2020-07-10 10:49:46 [ INFO]: [ ] Creating resource group 'RG_SHM_DECOVID_ARTIFACTS' 2020-07-10 10:49:47 [SUCCESS]: [✔] Created resource group 'RG_SHM_DECOVID_ARTIFACTS' 2020-07-10 10:49:47 [ INFO]: Ensuring that storage account 'shmdecovidbootdiagsoceuy' exists in 'RG_SHM_DECOVID_ARTIFACTS'... 2020-07-10 10:49:48 [ INFO]: [ ] Creating storage account 'shmdecovidbootdiagsoceuy' 2020-07-10 10:50:17 [SUCCESS]: [✔] Created storage account 'shmdecovidbootdiagsoceuy' 2020-07-10 10:50:17 [ INFO]: Ensuring that resource group 'RG_SHM_DECOVID_ARTIFACTS' exists... 2020-07-10 10:50:18 [SUCCESS]: [✔] Resource group 'RG_SHM_DECOVID_ARTIFACTS' already exists 2020-07-10 10:50:18 [ INFO]: Ensuring that storage account 'shmdecovidartifactsoceuy' exists in 'RG_SHM_DECOVID_ARTIFACTS'... 2020-07-10 10:50:19 [ INFO]: [ ] Creating storage account 'shmdecovidartifactsoceuy' 2020-07-10 10:50:38 [SUCCESS]: [✔] Created storage account 'shmdecovidartifactsoceuy' 2020-07-10 10:50:38 [ INFO]: Ensuring that blob storage containers exist... 2020-07-10 10:50:38 [ INFO]: Ensuring that storage container 'shm-dsc-dc' exists... 2020-07-10 10:50:39 [ INFO]: [ ] Creating storage container 'shm-dsc-dc' in storage account 'shmdecovidartifactsoceuy' 2020-07-10 10:50:39 [SUCCESS]: [✔] Created storage container 2020-07-10 10:50:39 [ INFO]: Ensuring that storage container 'shm-configuration-dc' exists... 2020-07-10 10:50:39 [ INFO]: [ ] Creating storage container 'shm-configuration-dc' in storage account 'shmdecovidartifactsoceuy' 2020-07-10 10:50:39 [SUCCESS]: [✔] Created storage container 2020-07-10 10:50:39 [ INFO]: Ensuring that storage container 'sre-rds-sh-packages' exists... 2020-07-10 10:50:39 [ INFO]: [ ] Creating storage container 'sre-rds-sh-packages' in storage account 'shmdecovidartifactsoceuy' 2020-07-10 10:50:39 [SUCCESS]: [✔] Created storage container 2020-07-10 10:50:39 [ INFO]: Uploading artifacts to storage account 'shmdecovidartifactsoceuy'... 2020-07-10 10:50:39 [ INFO]: [ ] Uploading desired state configuration (DSC) files to blob storage 2020-07-10 10:50:39 [SUCCESS]: [✔] Uploaded desired state configuration (DSC) files 2020-07-10 10:50:39 [ INFO]: [ ] Uploading domain controller (DC) configuration files to blob storage 2020-07-10 10:50:40 [SUCCESS]: [✔] Uploaded domain controller (DC) configuration files 2020-07-10 10:50:40 [ INFO]: [ ] Uploading Windows package installers to blob storage Container Uri: https://shmdecovidartifactsoceuy.blob.core.windows.net/sre-rds-sh-packages Name BlobType Length ContentType LastModified AccessTier SnapshotTime IsDeleted ---- -------- ------ ----------- ------------ ---------- ------------ --------- GoogleChrome_x64.msi BlockBlob -1 2020-07-10 09:50:40Z False PuTTY_x64.msi BlockBlob -1 2020-07-10 09:50:40Z False WinSCP_x32.exe BlockBlob -1 2020-07-10 09:50:42Z False 2020-07-10 10:50:42 [SUCCESS]: [✔] Uploaded Windows package installers 2020-07-10 10:50:42 [ INFO]: Ensuring that resource group 'RG_SHM_DECOVID_NETWORKING' exists... 2020-07-10 10:50:42 [ INFO]: [ ] Creating resource group 'RG_SHM_DECOVID_NETWORKING' 2020-07-10 10:50:43 [SUCCESS]: [✔] Created resource group 'RG_SHM_DECOVID_NETWORKING' 2020-07-10 10:50:43 [ INFO]: Deploying VNet gateway from template... VERBOSE: Performing the operation "Creating Deployment" on target "RG_SHM_DECOVID_NETWORKING". WARNING: The DeploymentDebug setting has been enabled. This can potentially log secrets like passwords used in resource property or listKeys operations when you retrieve the deployment operations through Get-AzResourceGroupDeploymentOperation VERBOSE: 10:50:45 - Template is valid. VERBOSE: 10:50:45 - Create template deployment 'shm-vnet-template' VERBOSE: 10:50:45 - Checking deployment status in 5 seconds VERBOSE: 10:50:50 - Checking deployment status in 5 seconds VERBOSE: 10:50:55 - Checking deployment status in 5 seconds VERBOSE: 10:51:00 - Checking deployment status in 5 seconds VERBOSE: 10:51:05 - Checking deployment status in 5 seconds VERBOSE: 10:51:10 - Checking deployment status in 5 seconds VERBOSE: 10:51:15 - Checking deployment status in 5 seconds VERBOSE: 10:51:20 - Checking deployment status in 5 seconds VERBOSE: 10:51:25 - Checking deployment status in 5 seconds VERBOSE: 10:51:31 - Checking deployment status in 5 seconds VERBOSE: 10:51:36 - Checking deployment status in 5 seconds VERBOSE: 10:51:41 - Checking deployment status in 5 seconds VERBOSE: 10:51:46 - Checking deployment status in 5 seconds VERBOSE: 10:51:51 - Resource Microsoft.Network/virtualNetworkGateways 'VNET_SHM_DECOVID_GW' provisioning status is running VERBOSE: 10:51:51 - Resource Microsoft.Network/virtualNetworks/subnets 'VNET_SHM_DECOVID/GatewaySubnet' provisioning status is succeeded VERBOSE: 10:51:51 - Resource Microsoft.Network/virtualNetworks/subnets 'VNET_SHM_DECOVID/IdentitySubnet' provisioning status is running VERBOSE: 10:51:51 - Resource Microsoft.Network/virtualNetworks/subnets 'VNET_SHM_DECOVID/WebSubnet' provisioning status is succeeded VERBOSE: 10:51:51 - Resource Microsoft.Network/virtualNetworks 'VNET_SHM_DECOVID' provisioning status is succeeded VERBOSE: 10:51:51 - Resource Microsoft.Network/publicIPAddresses 'VNET_SHM_DECOVID_GW_PIP' provisioning status is succeeded VERBOSE: 10:51:51 - Resource Microsoft.Network/networkSecurityGroups 'NSG_SHM_DECOVID_SUBNET_IDENTITY' provisioning status is succeeded VERBOSE: 10:51:51 - Checking deployment status in 16 seconds VERBOSE: 10:52:07 - Resource Microsoft.Network/virtualNetworks/subnets 'VNET_SHM_DECOVID/IdentitySubnet' provisioning status is succeeded VERBOSE: 10:52:07 - Checking deployment status in 5 seconds VERBOSE: 10:52:12 - Checking deployment status in 5 seconds VERBOSE: 10:52:17 - Checking deployment status in 5 seconds VERBOSE: 10:52:22 - Checking deployment status in 5 seconds VERBOSE: 10:52:27 - Checking deployment status in 5 seconds VERBOSE: 10:52:32 - Checking deployment status in 5 seconds VERBOSE: 10:52:38 - Checking deployment status in 5 seconds VERBOSE: 10:52:43 - Checking deployment status in 5 seconds VERBOSE: 10:52:48 - Checking deployment status in 5 seconds VERBOSE: 10:52:53 - Checking deployment status in 5 seconds VERBOSE: 10:52:58 - Checking deployment status in 5 seconds VERBOSE: 10:53:03 - Checking deployment status in 5 seconds VERBOSE: 10:53:08 - Checking deployment status in 5 seconds VERBOSE: 10:53:13 - Checking deployment status in 5 seconds VERBOSE: 10:53:18 - Checking deployment status in 5 seconds VERBOSE: 10:53:23 - Checking deployment status in 5 seconds VERBOSE: 10:53:29 - Checking deployment status in 5 seconds VERBOSE: 10:53:34 - Checking deployment status in 5 seconds VERBOSE: 10:53:39 - Checking deployment status in 5 seconds VERBOSE: 10:53:44 - Checking deployment status in 5 seconds VERBOSE: 10:53:49 - Checking deployment status in 5 seconds VERBOSE: 10:53:54 - Checking deployment status in 13 seconds VERBOSE: 10:54:07 - Checking deployment status in 5 seconds VERBOSE: 10:54:12 - Checking deployment status in 5 seconds VERBOSE: 10:54:17 - Checking deployment status in 5 seconds VERBOSE: 10:54:22 - Checking deployment status in 5 seconds VERBOSE: 10:54:28 - Checking deployment status in 5 seconds VERBOSE: 10:54:33 - Checking deployment status in 5 seconds VERBOSE: 10:54:38 - Checking deployment status in 5 seconds VERBOSE: 10:54:43 - Checking deployment status in 5 seconds VERBOSE: 10:54:48 - Checking deployment status in 5 seconds VERBOSE: 10:54:53 - Checking deployment status in 5 seconds VERBOSE: 10:54:58 - Checking deployment status in 5 seconds VERBOSE: 10:55:03 - Checking deployment status in 5 seconds VERBOSE: 10:55:08 - Checking deployment status in 5 seconds VERBOSE: 10:55:14 - Checking deployment status in 5 seconds VERBOSE: 10:55:19 - Checking deployment status in 5 seconds VERBOSE: 10:55:24 - Checking deployment status in 5 seconds VERBOSE: 10:55:29 - Checking deployment status in 5 seconds VERBOSE: 10:55:34 - Checking deployment status in 5 seconds VERBOSE: 10:55:39 - Checking deployment status in 5 seconds VERBOSE: 10:55:44 - Checking deployment status in 5 seconds VERBOSE: 10:55:49 - Checking deployment status in 5 seconds VERBOSE: 10:55:54 - Checking deployment status in 13 seconds VERBOSE: 10:56:08 - Checking deployment status in 5 seconds VERBOSE: 10:56:13 - Checking deployment status in 5 seconds VERBOSE: 10:56:18 - Checking deployment status in 5 seconds VERBOSE: 10:56:23 - Checking deployment status in 5 seconds VERBOSE: 10:56:28 - Checking deployment status in 5 seconds VERBOSE: 10:56:33 - Checking deployment status in 5 seconds VERBOSE: 10:56:38 - Checking deployment status in 5 seconds VERBOSE: 10:56:43 - Checking deployment status in 5 seconds VERBOSE: 10:56:48 - Checking deployment status in 5 seconds VERBOSE: 10:56:53 - Checking deployment status in 5 seconds VERBOSE: 10:56:59 - Checking deployment status in 5 seconds VERBOSE: 10:57:04 - Checking deployment status in 5 seconds VERBOSE: 10:57:09 - Checking deployment status in 5 seconds VERBOSE: 10:57:14 - Checking deployment status in 5 seconds VERBOSE: 10:57:19 - Checking deployment status in 5 seconds VERBOSE: 10:57:24 - Checking deployment status in 5 seconds VERBOSE: 10:57:29 - Checking deployment status in 5 seconds VERBOSE: 10:57:34 - Checking deployment status in 5 seconds VERBOSE: 10:57:39 - Checking deployment status in 5 seconds VERBOSE: 10:57:45 - Checking deployment status in 5 seconds VERBOSE: 10:57:50 - Checking deployment status in 5 seconds VERBOSE: 10:57:55 - Checking deployment status in 14 seconds VERBOSE: 10:58:09 - Checking deployment status in 5 seconds VERBOSE: 10:58:14 - Checking deployment status in 5 seconds VERBOSE: 10:58:19 - Checking deployment status in 5 seconds VERBOSE: 10:58:24 - Checking deployment status in 5 seconds VERBOSE: 10:58:29 - Checking deployment status in 5 seconds VERBOSE: 10:58:34 - Checking deployment status in 5 seconds VERBOSE: 10:58:40 - Checking deployment status in 5 seconds VERBOSE: 10:58:45 - Checking deployment status in 5 seconds VERBOSE: 10:58:50 - Checking deployment status in 5 seconds VERBOSE: 10:58:55 - Checking deployment status in 5 seconds VERBOSE: 10:59:00 - Checking deployment status in 5 seconds VERBOSE: 10:59:05 - Checking deployment status in 5 seconds VERBOSE: 10:59:10 - Checking deployment status in 5 seconds VERBOSE: 10:59:15 - Checking deployment status in 5 seconds VERBOSE: 10:59:20 - Checking deployment status in 5 seconds VERBOSE: 10:59:26 - Checking deployment status in 5 seconds VERBOSE: 10:59:31 - Checking deployment status in 5 seconds VERBOSE: 10:59:36 - Checking deployment status in 5 seconds VERBOSE: 10:59:41 - Checking deployment status in 5 seconds VERBOSE: 10:59:46 - Checking deployment status in 5 seconds VERBOSE: 10:59:51 - Checking deployment status in 5 seconds VERBOSE: 10:59:56 - Checking deployment status in 12 seconds VERBOSE: 11:00:08 - Checking deployment status in 5 seconds VERBOSE: 11:00:13 - Checking deployment status in 5 seconds VERBOSE: 11:00:18 - Checking deployment status in 5 seconds VERBOSE: 11:00:24 - Checking deployment status in 5 seconds VERBOSE: 11:00:29 - Checking deployment status in 5 seconds VERBOSE: 11:00:34 - Checking deployment status in 5 seconds VERBOSE: 11:00:39 - Checking deployment status in 5 seconds VERBOSE: 11:00:44 - Checking deployment status in 5 seconds VERBOSE: 11:00:49 - Checking deployment status in 5 seconds VERBOSE: 11:00:54 - Checking deployment status in 5 seconds VERBOSE: 11:00:59 - Checking deployment status in 5 seconds VERBOSE: 11:01:04 - Checking deployment status in 5 seconds VERBOSE: 11:01:09 - Checking deployment status in 5 seconds VERBOSE: 11:01:15 - Checking deployment status in 5 seconds VERBOSE: 11:01:20 - Checking deployment status in 5 seconds VERBOSE: 11:01:25 - Checking deployment status in 5 seconds VERBOSE: 11:01:30 - Checking deployment status in 5 seconds VERBOSE: 11:01:35 - Checking deployment status in 5 seconds VERBOSE: 11:01:40 - Checking deployment status in 5 seconds VERBOSE: 11:01:45 - Checking deployment status in 5 seconds VERBOSE: 11:01:50 - Checking deployment status in 5 seconds VERBOSE: 11:01:55 - Checking deployment status in 13 seconds VERBOSE: 11:02:09 - Checking deployment status in 5 seconds VERBOSE: 11:02:14 - Checking deployment status in 5 seconds VERBOSE: 11:02:19 - Checking deployment status in 5 seconds VERBOSE: 11:02:24 - Checking deployment status in 5 seconds VERBOSE: 11:02:29 - Checking deployment status in 5 seconds VERBOSE: 11:02:34 - Checking deployment status in 5 seconds VERBOSE: 11:02:39 - Checking deployment status in 5 seconds VERBOSE: 11:02:44 - Checking deployment status in 5 seconds VERBOSE: 11:02:50 - Checking deployment status in 5 seconds VERBOSE: 11:02:55 - Checking deployment status in 5 seconds VERBOSE: 11:03:00 - Checking deployment status in 5 seconds VERBOSE: 11:03:05 - Checking deployment status in 5 seconds VERBOSE: 11:03:10 - Checking deployment status in 5 seconds VERBOSE: 11:03:15 - Checking deployment status in 5 seconds VERBOSE: 11:03:20 - Checking deployment status in 5 seconds VERBOSE: 11:03:26 - Checking deployment status in 5 seconds VERBOSE: 11:03:31 - Checking deployment status in 5 seconds VERBOSE: 11:03:36 - Checking deployment status in 5 seconds VERBOSE: 11:03:41 - Checking deployment status in 5 seconds VERBOSE: 11:03:46 - Checking deployment status in 5 seconds VERBOSE: 11:03:51 - Checking deployment status in 5 seconds VERBOSE: 11:03:56 - Checking deployment status in 15 seconds VERBOSE: 11:04:11 - Checking deployment status in 5 seconds VERBOSE: 11:04:16 - Checking deployment status in 5 seconds VERBOSE: 11:04:22 - Checking deployment status in 5 seconds VERBOSE: 11:04:27 - Checking deployment status in 5 seconds VERBOSE: 11:04:32 - Checking deployment status in 5 seconds VERBOSE: 11:04:37 - Checking deployment status in 5 seconds VERBOSE: 11:04:42 - Checking deployment status in 5 seconds VERBOSE: 11:04:47 - Checking deployment status in 5 seconds VERBOSE: 11:04:52 - Checking deployment status in 5 seconds VERBOSE: 11:04:57 - Checking deployment status in 5 seconds VERBOSE: 11:05:03 - Checking deployment status in 5 seconds VERBOSE: 11:05:08 - Checking deployment status in 5 seconds VERBOSE: 11:05:13 - Checking deployment status in 5 seconds VERBOSE: 11:05:18 - Checking deployment status in 5 seconds VERBOSE: 11:05:23 - Checking deployment status in 5 seconds VERBOSE: 11:05:28 - Checking deployment status in 5 seconds VERBOSE: 11:05:33 - Checking deployment status in 5 seconds VERBOSE: 11:05:38 - Checking deployment status in 5 seconds VERBOSE: 11:05:44 - Checking deployment status in 5 seconds VERBOSE: 11:05:49 - Checking deployment status in 5 seconds VERBOSE: 11:05:54 - Checking deployment status in 5 seconds VERBOSE: 11:05:59 - Checking deployment status in 14 seconds VERBOSE: 11:06:13 - Checking deployment status in 5 seconds VERBOSE: 11:06:18 - Checking deployment status in 5 seconds VERBOSE: 11:06:23 - Checking deployment status in 5 seconds VERBOSE: 11:06:28 - Checking deployment status in 5 seconds VERBOSE: 11:06:33 - Checking deployment status in 5 seconds VERBOSE: 11:06:38 - Checking deployment status in 5 seconds VERBOSE: 11:06:43 - Checking deployment status in 5 seconds VERBOSE: 11:06:49 - Checking deployment status in 5 seconds VERBOSE: 11:06:54 - Checking deployment status in 5 seconds VERBOSE: 11:06:59 - Checking deployment status in 5 seconds VERBOSE: 11:07:04 - Checking deployment status in 5 seconds VERBOSE: 11:07:09 - Checking deployment status in 5 seconds VERBOSE: 11:07:14 - Checking deployment status in 5 seconds VERBOSE: 11:07:19 - Checking deployment status in 5 seconds VERBOSE: 11:07:24 - Checking deployment status in 5 seconds VERBOSE: 11:07:29 - Checking deployment status in 5 seconds VERBOSE: 11:07:34 - Checking deployment status in 5 seconds VERBOSE: 11:07:40 - Checking deployment status in 5 seconds VERBOSE: 11:07:45 - Checking deployment status in 5 seconds VERBOSE: 11:07:50 - Checking deployment status in 5 seconds VERBOSE: 11:07:55 - Checking deployment status in 5 seconds VERBOSE: 11:08:00 - Checking deployment status in 13 seconds VERBOSE: 11:08:13 - Checking deployment status in 5 seconds VERBOSE: 11:08:18 - Checking deployment status in 5 seconds VERBOSE: 11:08:23 - Checking deployment status in 5 seconds VERBOSE: 11:08:28 - Checking deployment status in 5 seconds VERBOSE: 11:08:33 - Checking deployment status in 5 seconds VERBOSE: 11:08:39 - Checking deployment status in 5 seconds VERBOSE: 11:08:44 - Checking deployment status in 5 seconds VERBOSE: 11:08:49 - Checking deployment status in 5 seconds VERBOSE: 11:08:54 - Checking deployment status in 5 seconds VERBOSE: 11:08:59 - Checking deployment status in 5 seconds VERBOSE: 11:09:04 - Checking deployment status in 5 seconds VERBOSE: 11:09:09 - Checking deployment status in 5 seconds VERBOSE: 11:09:14 - Checking deployment status in 5 seconds VERBOSE: 11:09:19 - Checking deployment status in 5 seconds VERBOSE: 11:09:24 - Checking deployment status in 5 seconds VERBOSE: 11:09:30 - Checking deployment status in 5 seconds VERBOSE: 11:09:35 - Checking deployment status in 5 seconds VERBOSE: 11:09:40 - Checking deployment status in 5 seconds VERBOSE: 11:09:45 - Checking deployment status in 5 seconds VERBOSE: 11:09:50 - Checking deployment status in 5 seconds VERBOSE: 11:09:55 - Checking deployment status in 5 seconds VERBOSE: 11:10:00 - Checking deployment status in 14 seconds VERBOSE: 11:10:14 - Checking deployment status in 5 seconds VERBOSE: 11:10:19 - Checking deployment status in 5 seconds VERBOSE: 11:10:24 - Checking deployment status in 5 seconds VERBOSE: 11:10:30 - Checking deployment status in 5 seconds VERBOSE: 11:10:35 - Checking deployment status in 5 seconds VERBOSE: 11:10:40 - Checking deployment status in 5 seconds VERBOSE: 11:10:45 - Resource Microsoft.Network/virtualNetworkGateways 'VNET_SHM_DECOVID_GW' provisioning status is succeeded ResourceGroupName : RG_SHM_DECOVID_NETWORKING OnErrorDeployment : DeploymentName : shm-vnet-template CorrelationId : 39f27f62-5908-4d69-a7e1-f620c98523e5 ProvisioningState : Succeeded Timestamp : 10/07/2020 10:10:43 Mode : Incremental TemplateLink : TemplateLinkString : DeploymentDebugLogLevel : ResponseContent Parameters : {[p2S_VPN_Certificate, Microsoft.Azure.Commands.ResourceManager.Cmdlets.SdkModels.DeploymentVariable], [shm_Id, Microsoft.Azure.Commands.ResourceManager.Cmdlets.SdkModels.DeploymentVariable], [subnet_Identity_Name, Microsoft.Azure.Commands.ResourceManager.Cmdlets.SdkModels.DeploymentVariable], [subnet_Identity_CIDR, Microsoft.Azure.Commands.ResourceManager.Cmdlets.SdkModels.DeploymentVariable]…} ParametersString : Name Type Value ====================== ========================= ========== p2S_VPN_Certificate String MIICtjCCAZ4CCQCoxboKVDmwMzANBgkqhkiG9w0BAQsFADAdMRswGQYDVQQDDBJT SE0tREVDT1ZJRC1QMlMtQ0EwHhcNMjAwNzEwMDkyNTI2WhcNMjIxMDEzMDkyNTI2 WjAdMRswGQYDVQQDDBJTSE0tREVDT1ZJRC1QMlMtQ0EwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQC0sq2dZm17MV3jMNhPKlwJbHB0t8+Uj2LBCNwdlJwc i6tgeaAEr1FRPnWTxFsmLGUJbd8yos70/Arlp982Bc5oi48ppMpG40jGVL/i6j+7 lEsfYxFKJfmtuRCKJtfED128LH1g7q1bZSSHP/+zgT4RrpxTl/21nNGsXZpLRoof ragiUR5wdXR0R/8lAmaxJYnkQxO2odp4N1JmfiND4YvFGs4yEynMcUt66vpPWmJc 4tnRdMnGxkMSOsBV8ktAe81UA8Jghxet9ZhCfrRnAvD12Po4BJibh6ppGWGg7a24 CBZSv/M6wlKfolaujy70VXYBWjJGiouPmjsoZ+2qXiAFAgMBAAEwDQYJKoZIhvcN AQELBQADggEBAJjlA65CA5CD14KdxwElF1b/DQ/Rz9waLKbLxzQxxWmuA4W5b5uy AXeY7C62qnkLgrMiRkM7JwSs3VvtBYdETxZ+3BdberwHbCCu5I69sIeA4yg6A2N2 46R3ADuY8Rlxp0KCPqyZy3NuFGBUK8dv+UFRApw/8a3svOglFUrbegmz+ezRkdnD gE9c9jwDNyvT+5WywFU0KZp4vW4Gp8pW40H2uk+9cynMOyw4t1fo/k3VJw5hzNhs wRDAY+SOmPcOaK5Cc4QZHrAlDWV4TWFnKnfd5PDI0hy0O6HHxM5DoSDbV7TNxvIO TQFe5qgyQq8BpVcnNnUVaTQ/R0y9rJy0ZUQ= shm_Id String decovid subnet_Identity_Name String IdentitySubnet subnet_Identity_CIDR String 10.0.0.0/24 subnet_Web_Name String WebSubnet subnet_Web_CIDR String 10.0.1.0/24 subnet_Gateway_Name String GatewaySubnet subnet_Gateway_CIDR String 10.0.7.0/24 virtual_Network_Name String VNET_SHM_DECOVID vneT_CIDR String 10.0.0.0/21 vneT_DNS_DC1 String 10.0.0.4 vneT_DNS_DC2 String 10.0.0.5 vpN_CIDR String 172.16.201.0/24 Outputs : OutputsString : 2020-07-10 11:10:47 [SUCCESS]: [✔] Template deployment 'shm-vnet-template' succeeded 2020-07-10 11:10:47 [ INFO]: Ensuring that resource group 'RG_SHM_DECOVID_DC' exists... 2020-07-10 11:10:47 [ INFO]: [ ] Creating resource group 'RG_SHM_DECOVID_DC' 2020-07-10 11:10:48 [SUCCESS]: [✔] Created resource group 'RG_SHM_DECOVID_DC' 2020-07-10 11:10:48 [ INFO]: Creating/retrieving secrets from key vault 'kv-shm-decovid'... 2020-07-10 11:10:54 [ INFO]: Deploying domain controller (DC) from template... VERBOSE: Performing the operation "Creating Deployment" on target "RG_SHM_DECOVID_DC". WARNING: The DeploymentDebug setting has been enabled. This can potentially log secrets like passwords used in resource property or listKeys operations when you retrieve the deployment operations through Get-AzResourceGroupDeploymentOperation VERBOSE: 11:11:00 - Template is valid. VERBOSE: 11:11:00 - Create template deployment 'shm-dc-template' VERBOSE: 11:11:00 - Checking deployment status in 5 seconds VERBOSE: 11:11:05 - Resource Microsoft.Network/networkInterfaces 'DC2-SHM-DECOVID-NIC' provisioning status is succeeded VERBOSE: 11:11:05 - Resource Microsoft.Network/networkInterfaces 'DC1-SHM-DECOVID-NIC' provisioning status is succeeded VERBOSE: 11:11:05 - Checking deployment status in 5 seconds VERBOSE: 11:11:10 - Checking deployment status in 5 seconds VERBOSE: 11:11:16 - Checking deployment status in 5 seconds VERBOSE: 11:11:21 - Checking deployment status in 5 seconds VERBOSE: 11:11:26 - Checking deployment status in 5 seconds VERBOSE: 11:11:31 - Checking deployment status in 5 seconds VERBOSE: 11:11:36 - Checking deployment status in 5 seconds VERBOSE: 11:11:41 - Checking deployment status in 5 seconds VERBOSE: 11:11:46 - Checking deployment status in 5 seconds VERBOSE: 11:11:51 - Checking deployment status in 5 seconds VERBOSE: 11:11:56 - Checking deployment status in 5 seconds VERBOSE: 11:12:01 - Checking deployment status in 5 seconds VERBOSE: 11:12:06 - Checking deployment status in 5 seconds VERBOSE: 11:12:11 - Resource Microsoft.Compute/virtualMachines 'DC2-SHM-DECOVID' provisioning status is running VERBOSE: 11:12:11 - Resource Microsoft.Compute/virtualMachines 'DC1-SHM-DECOVID' provisioning status is running VERBOSE: 11:12:11 - Resource Microsoft.Compute/availabilitySets 'AVSET-SHM-DECOVID-VM-DC' provisioning status is succeeded VERBOSE: 11:12:11 - Checking deployment status in 12 seconds VERBOSE: 11:12:24 - Checking deployment status in 5 seconds VERBOSE: 11:12:29 - Checking deployment status in 5 seconds VERBOSE: 11:12:34 - Checking deployment status in 5 seconds VERBOSE: 11:12:39 - Checking deployment status in 5 seconds VERBOSE: 11:12:44 - Checking deployment status in 5 seconds VERBOSE: 11:12:49 - Checking deployment status in 5 seconds VERBOSE: 11:12:54 - Checking deployment status in 5 seconds VERBOSE: 11:12:59 - Checking deployment status in 5 seconds VERBOSE: 11:13:04 - Checking deployment status in 5 seconds VERBOSE: 11:13:09 - Checking deployment status in 5 seconds VERBOSE: 11:13:14 - Checking deployment status in 5 seconds VERBOSE: 11:13:20 - Checking deployment status in 5 seconds VERBOSE: 11:13:25 - Checking deployment status in 5 seconds VERBOSE: 11:13:30 - Checking deployment status in 5 seconds VERBOSE: 11:13:35 - Checking deployment status in 5 seconds VERBOSE: 11:13:40 - Checking deployment status in 5 seconds VERBOSE: 11:13:45 - Checking deployment status in 5 seconds VERBOSE: 11:13:50 - Checking deployment status in 5 seconds VERBOSE: 11:13:55 - Checking deployment status in 5 seconds VERBOSE: 11:14:00 - Resource Microsoft.Compute/virtualMachines/extensions 'DC1-SHM-DECOVID/bginfo' provisioning status is running VERBOSE: 11:14:00 - Resource Microsoft.Compute/virtualMachines/extensions 'DC1-SHM-DECOVID/CreateADForest' provisioning status is running VERBOSE: 11:14:00 - Resource Microsoft.Compute/virtualMachines 'DC1-SHM-DECOVID' provisioning status is succeeded VERBOSE: 11:14:00 - Checking deployment status in 14 seconds VERBOSE: 11:14:14 - Checking deployment status in 10 seconds VERBOSE: 11:14:24 - Checking deployment status in 5 seconds VERBOSE: 11:14:30 - Checking deployment status in 5 seconds VERBOSE: 11:14:35 - Checking deployment status in 5 seconds VERBOSE: 11:14:40 - Checking deployment status in 5 seconds VERBOSE: 11:14:45 - Checking deployment status in 5 seconds VERBOSE: 11:14:50 - Checking deployment status in 5 seconds VERBOSE: 11:14:55 - Checking deployment status in 5 seconds VERBOSE: 11:15:00 - Checking deployment status in 5 seconds VERBOSE: 11:15:06 - Checking deployment status in 5 seconds VERBOSE: 11:15:11 - Checking deployment status in 5 seconds VERBOSE: 11:15:16 - Checking deployment status in 5 seconds VERBOSE: 11:15:21 - Checking deployment status in 5 seconds VERBOSE: 11:15:26 - Checking deployment status in 5 seconds VERBOSE: 11:15:31 - Checking deployment status in 5 seconds VERBOSE: 11:15:36 - Checking deployment status in 5 seconds VERBOSE: 11:15:41 - Checking deployment status in 5 seconds VERBOSE: 11:15:46 - Checking deployment status in 5 seconds VERBOSE: 11:15:51 - Checking deployment status in 5 seconds VERBOSE: 11:15:57 - Checking deployment status in 5 seconds VERBOSE: 11:16:02 - Checking deployment status in 14 seconds VERBOSE: 11:16:16 - Resource Microsoft.Compute/virtualMachines/extensions 'DC2-SHM-DECOVID/bginfo' provisioning status is running VERBOSE: 11:16:16 - Resource Microsoft.Compute/virtualMachines 'DC2-SHM-DECOVID' provisioning status is succeeded VERBOSE: 11:16:16 - Checking deployment status in 13 seconds VERBOSE: 11:16:29 - Checking deployment status in 5 seconds VERBOSE: 11:16:34 - Checking deployment status in 5 seconds VERBOSE: 11:16:39 - Checking deployment status in 5 seconds VERBOSE: 11:16:44 - Checking deployment status in 5 seconds VERBOSE: 11:16:49 - Checking deployment status in 5 seconds VERBOSE: 11:16:54 - Checking deployment status in 5 seconds VERBOSE: 11:16:59 - Checking deployment status in 5 seconds VERBOSE: 11:17:05 - Checking deployment status in 5 seconds VERBOSE: 11:17:10 - Checking deployment status in 5 seconds VERBOSE: 11:17:15 - Checking deployment status in 5 seconds VERBOSE: 11:17:20 - Checking deployment status in 5 seconds VERBOSE: 11:17:25 - Checking deployment status in 5 seconds VERBOSE: 11:17:30 - Checking deployment status in 5 seconds VERBOSE: 11:17:35 - Checking deployment status in 5 seconds VERBOSE: 11:17:40 - Checking deployment status in 5 seconds VERBOSE: 11:17:45 - Checking deployment status in 5 seconds VERBOSE: 11:17:50 - Checking deployment status in 5 seconds VERBOSE: 11:17:56 - Checking deployment status in 5 seconds VERBOSE: 11:18:01 - Checking deployment status in 15 seconds VERBOSE: 11:18:16 - Resource Microsoft.Compute/virtualMachines/extensions 'DC2-SHM-DECOVID/bginfo' provisioning status is succeeded VERBOSE: 11:18:16 - Checking deployment status in 5 seconds VERBOSE: 11:18:21 - Checking deployment status in 5 seconds VERBOSE: 11:18:26 - Checking deployment status in 5 seconds VERBOSE: 11:18:31 - Checking deployment status in 5 seconds VERBOSE: 11:18:36 - Checking deployment status in 5 seconds VERBOSE: 11:18:41 - Checking deployment status in 5 seconds VERBOSE: 11:18:47 - Checking deployment status in 5 seconds VERBOSE: 11:18:52 - Checking deployment status in 5 seconds VERBOSE: 11:18:57 - Checking deployment status in 5 seconds VERBOSE: 11:19:02 - Checking deployment status in 5 seconds VERBOSE: 11:19:07 - Checking deployment status in 5 seconds VERBOSE: 11:19:12 - Checking deployment status in 5 seconds VERBOSE: 11:19:17 - Checking deployment status in 5 seconds VERBOSE: 11:19:22 - Checking deployment status in 5 seconds VERBOSE: 11:19:27 - Checking deployment status in 5 seconds VERBOSE: 11:19:32 - Checking deployment status in 5 seconds VERBOSE: 11:19:38 - Checking deployment status in 5 seconds VERBOSE: 11:19:43 - Checking deployment status in 5 seconds VERBOSE: 11:19:48 - Checking deployment status in 5 seconds VERBOSE: 11:19:53 - Checking deployment status in 5 seconds VERBOSE: 11:19:58 - Checking deployment status in 5 seconds VERBOSE: 11:20:03 - Checking deployment status in 15 seconds VERBOSE: 11:20:18 - Checking deployment status in 5 seconds VERBOSE: 11:20:23 - Checking deployment status in 5 seconds VERBOSE: 11:20:28 - Checking deployment status in 5 seconds VERBOSE: 11:20:34 - Checking deployment status in 5 seconds VERBOSE: 11:20:39 - Checking deployment status in 5 seconds VERBOSE: 11:20:44 - Checking deployment status in 5 seconds VERBOSE: 11:20:49 - Checking deployment status in 5 seconds VERBOSE: 11:20:54 - Checking deployment status in 5 seconds VERBOSE: 11:20:59 - Checking deployment status in 5 seconds VERBOSE: 11:21:04 - Checking deployment status in 5 seconds VERBOSE: 11:21:09 - Checking deployment status in 5 seconds VERBOSE: 11:21:14 - Checking deployment status in 5 seconds VERBOSE: 11:21:20 - Checking deployment status in 5 seconds VERBOSE: 11:21:25 - Checking deployment status in 5 seconds VERBOSE: 11:21:30 - Checking deployment status in 5 seconds VERBOSE: 11:21:35 - Checking deployment status in 5 seconds VERBOSE: 11:21:40 - Checking deployment status in 5 seconds VERBOSE: 11:21:45 - Checking deployment status in 5 seconds VERBOSE: 11:21:50 - Checking deployment status in 5 seconds VERBOSE: 11:21:55 - Checking deployment status in 5 seconds VERBOSE: 11:22:00 - Checking deployment status in 5 seconds VERBOSE: 11:22:06 - Checking deployment status in 12 seconds VERBOSE: 11:22:18 - Checking deployment status in 5 seconds VERBOSE: 11:22:23 - Checking deployment status in 5 seconds VERBOSE: 11:22:28 - Checking deployment status in 5 seconds VERBOSE: 11:22:33 - Checking deployment status in 5 seconds VERBOSE: 11:22:38 - Checking deployment status in 5 seconds VERBOSE: 11:22:43 - Checking deployment status in 5 seconds VERBOSE: 11:22:48 - Checking deployment status in 5 seconds VERBOSE: 11:22:53 - Checking deployment status in 5 seconds VERBOSE: 11:22:59 - Checking deployment status in 5 seconds VERBOSE: 11:23:04 - Checking deployment status in 5 seconds VERBOSE: 11:23:09 - Checking deployment status in 5 seconds VERBOSE: 11:23:14 - Checking deployment status in 5 seconds VERBOSE: 11:23:19 - Checking deployment status in 5 seconds VERBOSE: 11:23:24 - Checking deployment status in 5 seconds VERBOSE: 11:23:29 - Checking deployment status in 5 seconds VERBOSE: 11:23:34 - Checking deployment status in 5 seconds VERBOSE: 11:23:39 - Checking deployment status in 5 seconds VERBOSE: 11:23:44 - Checking deployment status in 5 seconds VERBOSE: 11:23:50 - Checking deployment status in 5 seconds VERBOSE: 11:23:55 - Checking deployment status in 5 seconds VERBOSE: 11:24:00 - Checking deployment status in 5 seconds VERBOSE: 11:24:05 - Checking deployment status in 16 seconds VERBOSE: 11:24:21 - Checking deployment status in 5 seconds VERBOSE: 11:24:26 - Checking deployment status in 5 seconds VERBOSE: 11:24:31 - Checking deployment status in 5 seconds VERBOSE: 11:24:36 - Checking deployment status in 5 seconds VERBOSE: 11:24:41 - Checking deployment status in 5 seconds VERBOSE: 11:24:46 - Checking deployment status in 5 seconds VERBOSE: 11:24:52 - Checking deployment status in 5 seconds VERBOSE: 11:24:57 - Checking deployment status in 5 seconds VERBOSE: 11:25:02 - Checking deployment status in 5 seconds VERBOSE: 11:25:07 - Checking deployment status in 5 seconds VERBOSE: 11:25:12 - Checking deployment status in 5 seconds VERBOSE: 11:25:17 - Checking deployment status in 5 seconds VERBOSE: 11:25:22 - Checking deployment status in 5 seconds VERBOSE: 11:25:27 - Checking deployment status in 5 seconds VERBOSE: 11:25:32 - Checking deployment status in 5 seconds VERBOSE: 11:25:38 - Checking deployment status in 5 seconds VERBOSE: 11:25:43 - Checking deployment status in 5 seconds VERBOSE: 11:25:48 - Checking deployment status in 5 seconds VERBOSE: 11:25:53 - Checking deployment status in 5 seconds VERBOSE: 11:25:58 - Checking deployment status in 5 seconds VERBOSE: 11:26:03 - Checking deployment status in 14 seconds VERBOSE: 11:26:17 - Checking deployment status in 5 seconds VERBOSE: 11:26:22 - Checking deployment status in 5 seconds VERBOSE: 11:26:27 - Checking deployment status in 5 seconds VERBOSE: 11:26:32 - Checking deployment status in 5 seconds VERBOSE: 11:26:37 - Checking deployment status in 5 seconds VERBOSE: 11:26:43 - Checking deployment status in 5 seconds VERBOSE: 11:26:48 - Checking deployment status in 5 seconds VERBOSE: 11:26:53 - Checking deployment status in 5 seconds VERBOSE: 11:26:58 - Checking deployment status in 5 seconds VERBOSE: 11:27:03 - Checking deployment status in 5 seconds VERBOSE: 11:27:08 - Checking deployment status in 5 seconds VERBOSE: 11:27:13 - Checking deployment status in 5 seconds VERBOSE: 11:27:18 - Checking deployment status in 5 seconds VERBOSE: 11:27:23 - Checking deployment status in 5 seconds VERBOSE: 11:27:29 - Checking deployment status in 5 seconds VERBOSE: 11:27:34 - Checking deployment status in 5 seconds VERBOSE: 11:27:39 - Checking deployment status in 5 seconds VERBOSE: 11:27:44 - Checking deployment status in 5 seconds VERBOSE: 11:27:49 - Checking deployment status in 5 seconds VERBOSE: 11:27:54 - Checking deployment status in 5 seconds VERBOSE: 11:27:59 - Checking deployment status in 5 seconds VERBOSE: 11:28:04 - Checking deployment status in 14 seconds VERBOSE: 11:28:18 - Checking deployment status in 5 seconds VERBOSE: 11:28:23 - Checking deployment status in 5 seconds VERBOSE: 11:28:29 - Checking deployment status in 5 seconds VERBOSE: 11:28:34 - Checking deployment status in 5 seconds VERBOSE: 11:28:39 - Checking deployment status in 5 seconds VERBOSE: 11:28:44 - Checking deployment status in 5 seconds VERBOSE: 11:28:49 - Checking deployment status in 5 seconds VERBOSE: 11:28:54 - Checking deployment status in 5 seconds VERBOSE: 11:29:00 - Checking deployment status in 5 seconds VERBOSE: 11:29:05 - Checking deployment status in 5 seconds VERBOSE: 11:29:10 - Checking deployment status in 5 seconds VERBOSE: 11:29:15 - Checking deployment status in 5 seconds VERBOSE: 11:29:20 - Checking deployment status in 5 seconds VERBOSE: 11:29:25 - Checking deployment status in 5 seconds VERBOSE: 11:29:30 - Checking deployment status in 5 seconds VERBOSE: 11:29:35 - Checking deployment status in 5 seconds VERBOSE: 11:29:40 - Checking deployment status in 5 seconds VERBOSE: 11:29:45 - Checking deployment status in 5 seconds VERBOSE: 11:29:50 - Checking deployment status in 5 seconds VERBOSE: 11:29:56 - Checking deployment status in 5 seconds VERBOSE: 11:30:01 - Checking deployment status in 5 seconds VERBOSE: 11:30:06 - Resource Microsoft.Compute/virtualMachines/extensions 'DC2-SHM-DECOVID/CreateADBDC' provisioning status is running VERBOSE: 11:30:06 - Resource Microsoft.Compute/virtualMachines/extensions 'DC1-SHM-DECOVID/bginfo' provisioning status is succeeded VERBOSE: 11:30:06 - Resource Microsoft.Compute/virtualMachines/extensions 'DC1-SHM-DECOVID/CreateADForest' provisioning status is succeeded VERBOSE: 11:30:06 - Checking deployment status in 15 seconds VERBOSE: 11:30:21 - Checking deployment status in 5 seconds VERBOSE: 11:30:26 - Checking deployment status in 5 seconds VERBOSE: 11:30:31 - Checking deployment status in 5 seconds VERBOSE: 11:30:36 - Checking deployment status in 5 seconds VERBOSE: 11:30:41 - Checking deployment status in 5 seconds VERBOSE: 11:30:46 - Checking deployment status in 5 seconds VERBOSE: 11:30:51 - Checking deployment status in 5 seconds VERBOSE: 11:30:57 - Checking deployment status in 5 seconds VERBOSE: 11:31:02 - Checking deployment status in 5 seconds VERBOSE: 11:31:07 - Checking deployment status in 5 seconds VERBOSE: 11:31:12 - Checking deployment status in 5 seconds VERBOSE: 11:31:17 - Checking deployment status in 5 seconds VERBOSE: 11:31:22 - Checking deployment status in 5 seconds VERBOSE: 11:31:27 - Checking deployment status in 5 seconds VERBOSE: 11:31:32 - Checking deployment status in 5 seconds VERBOSE: 11:31:37 - Checking deployment status in 5 seconds VERBOSE: 11:31:42 - Checking deployment status in 5 seconds VERBOSE: 11:31:48 - Checking deployment status in 5 seconds VERBOSE: 11:31:53 - Checking deployment status in 5 seconds VERBOSE: 11:31:58 - Checking deployment status in 5 seconds VERBOSE: 11:32:03 - Checking deployment status in 5 seconds VERBOSE: 11:32:08 - Checking deployment status in 13 seconds VERBOSE: 11:32:21 - Checking deployment status in 5 seconds VERBOSE: 11:32:26 - Checking deployment status in 5 seconds VERBOSE: 11:32:31 - Checking deployment status in 5 seconds VERBOSE: 11:32:36 - Checking deployment status in 5 seconds VERBOSE: 11:32:42 - Checking deployment status in 5 seconds VERBOSE: 11:32:47 - Checking deployment status in 5 seconds VERBOSE: 11:32:52 - Checking deployment status in 5 seconds VERBOSE: 11:32:57 - Checking deployment status in 5 seconds VERBOSE: 11:33:02 - Checking deployment status in 5 seconds VERBOSE: 11:33:07 - Checking deployment status in 5 seconds VERBOSE: 11:33:12 - Checking deployment status in 5 seconds VERBOSE: 11:33:17 - Checking deployment status in 5 seconds VERBOSE: 11:33:22 - Checking deployment status in 5 seconds VERBOSE: 11:33:28 - Checking deployment status in 5 seconds VERBOSE: 11:33:33 - Checking deployment status in 5 seconds VERBOSE: 11:33:38 - Checking deployment status in 5 seconds VERBOSE: 11:33:43 - Checking deployment status in 5 seconds VERBOSE: 11:33:48 - Checking deployment status in 5 seconds VERBOSE: 11:33:53 - Checking deployment status in 5 seconds VERBOSE: 11:33:58 - Checking deployment status in 5 seconds VERBOSE: 11:34:03 - Checking deployment status in 5 seconds VERBOSE: 11:34:08 - Checking deployment status in 13 seconds VERBOSE: 11:34:22 - Checking deployment status in 5 seconds VERBOSE: 11:34:27 - Checking deployment status in 5 seconds VERBOSE: 11:34:32 - Checking deployment status in 5 seconds VERBOSE: 11:34:37 - Checking deployment status in 5 seconds VERBOSE: 11:34:42 - Checking deployment status in 5 seconds VERBOSE: 11:34:47 - Checking deployment status in 5 seconds VERBOSE: 11:34:52 - Checking deployment status in 5 seconds VERBOSE: 11:34:57 - Checking deployment status in 5 seconds VERBOSE: 11:35:02 - Checking deployment status in 5 seconds VERBOSE: 11:35:08 - Checking deployment status in 5 seconds VERBOSE: 11:35:13 - Checking deployment status in 5 seconds VERBOSE: 11:35:18 - Checking deployment status in 5 seconds VERBOSE: 11:35:23 - Checking deployment status in 5 seconds VERBOSE: 11:35:28 - Checking deployment status in 5 seconds VERBOSE: 11:35:33 - Checking deployment status in 5 seconds VERBOSE: 11:35:38 - Checking deployment status in 5 seconds VERBOSE: 11:35:43 - Checking deployment status in 5 seconds VERBOSE: 11:35:49 - Checking deployment status in 5 seconds VERBOSE: 11:35:54 - Checking deployment status in 5 seconds VERBOSE: 11:35:59 - Checking deployment status in 5 seconds VERBOSE: 11:36:04 - Checking deployment status in 5 seconds VERBOSE: 11:36:09 - Checking deployment status in 13 seconds VERBOSE: 11:36:22 - Checking deployment status in 5 seconds VERBOSE: 11:36:27 - Checking deployment status in 5 seconds VERBOSE: 11:36:32 - Checking deployment status in 5 seconds VERBOSE: 11:36:37 - Checking deployment status in 5 seconds VERBOSE: 11:36:42 - Checking deployment status in 5 seconds VERBOSE: 11:36:47 - Checking deployment status in 5 seconds VERBOSE: 11:36:53 - Checking deployment status in 5 seconds VERBOSE: 11:36:58 - Checking deployment status in 5 seconds VERBOSE: 11:37:03 - Checking deployment status in 5 seconds VERBOSE: 11:37:08 - Checking deployment status in 5 seconds VERBOSE: 11:37:13 - Checking deployment status in 5 seconds VERBOSE: 11:37:18 - Checking deployment status in 5 seconds VERBOSE: 11:37:23 - Checking deployment status in 5 seconds VERBOSE: 11:37:28 - Checking deployment status in 5 seconds VERBOSE: 11:37:33 - Checking deployment status in 5 seconds VERBOSE: 11:37:38 - Checking deployment status in 5 seconds VERBOSE: 11:37:44 - Checking deployment status in 5 seconds VERBOSE: 11:37:49 - Checking deployment status in 5 seconds VERBOSE: 11:37:54 - Checking deployment status in 5 seconds VERBOSE: 11:37:59 - Checking deployment status in 5 seconds VERBOSE: 11:38:04 - Checking deployment status in 5 seconds VERBOSE: 11:38:09 - Checking deployment status in 15 seconds VERBOSE: 11:38:24 - Checking deployment status in 5 seconds VERBOSE: 11:38:30 - Checking deployment status in 5 seconds VERBOSE: 11:38:35 - Checking deployment status in 5 seconds VERBOSE: 11:38:40 - Checking deployment status in 5 seconds VERBOSE: 11:38:45 - Checking deployment status in 5 seconds VERBOSE: 11:38:50 - Resource Microsoft.Compute/virtualMachines/extensions 'DC2-SHM-DECOVID/CreateADBDC' provisioning status is succeeded ResourceGroupName : RG_SHM_DECOVID_DC OnErrorDeployment : DeploymentName : shm-dc-template CorrelationId : a79724dc-0dcc-45a3-a2b5-0ca34880c7c5 ProvisioningState : Succeeded Timestamp : 10/07/2020 10:38:50 Mode : Incremental TemplateLink : TemplateLinkString : DeploymentDebugLogLevel : ResponseContent Parameters : {[administrator_Password, Microsoft.Azure.Commands.ResourceManager.Cmdlets.SdkModels.DeploymentVariable], [administrator_User, Microsoft.Azure.Commands.ResourceManager.Cmdlets.SdkModels.DeploymentVariable], [artifacts_Location, Microsoft.Azure.Commands.ResourceManager.Cmdlets.SdkModels.DeploymentVariable], [artifacts_Location_SAS_Token, Microsoft.Azure.Commands.ResourceManager.Cmdlets.SdkModels.DeploymentVariable]…} ParametersString : Name Type Value ================================ ========================= ========== administrator_Password SecureString administrator_User String domaindecovidadmin artifacts_Location String https://shmdecovidartifactsoceuy.blob.core.windows.net artifacts_Location_SAS_Token SecureString bootDiagnostics_Account_Name String shmdecovidbootdiagsoceuy dC1_Data_Disk_Size_GB Int 20 dC1_Data_Disk_Type String Standard_LRS dC1_Host_Name String DC1-SHM-DECOVID dC1_IP_Address String 10.0.0.4 dC1_Os_Disk_Size_GB Int 128 dC1_Os_Disk_Type String Standard_LRS dC1_VM_Name String DC1-SHM-DECOVID dC1_VM_Size String Standard_D2s_v3 dC2_Data_Disk_Size_GB Int 20 dC2_Data_Disk_Type String Standard_LRS dC2_Host_Name String DC2-SHM-DECOVID dC2_IP_Address String 10.0.0.5 dC2_Os_Disk_Size_GB Int 128 dC2_Os_Disk_Type String Standard_LRS dC2_VM_Name String DC2-SHM-DECOVID dC2_VM_Size String Standard_D2s_v3 domain_Name String decovid.turingsafehaven.ac.uk domain_NetBIOS_Name String DECOVID external_DNS_Resolver String 168.63.129.16 safeMode_Password SecureString shm_Id String decovid virtual_Network_Name String VNET_SHM_DECOVID virtual_Network_Resource_Group String RG_SHM_DECOVID_NETWORKING virtual_Network_Subnet String IdentitySubnet Outputs : OutputsString : 2020-07-10 11:38:53 [ INFO]: CreateADBDC: ProvisioningState/succeeded DSC configuration was applied successfully. 2020-07-10 11:38:53 [ INFO]: CreateADBDC: ComponentStatus/DscConfigurationLog/succeeded [2020-07-10 10:38:32Z] [WARNING] [DC2-SHM-DECOVID]: [[xPendingReboot]RebootAfterPromotion] Unable to query CCM_ClientUtilities: Invalid namespace [2020-07-10 10:38:32Z] [VERBOSE] [DC2-SHM-DECOVID]: [[xPendingReboot]RebootAfterPromotion] No pending reboots found. [2020-07-10 10:38:32Z] [VERBOSE] [DC2-SHM-DECOVID]: LCM: [ End Test ] [[xPendingReboot]RebootAfterPromotion] in 0.3120 seconds. [2020-07-10 10:38:32Z] [VERBOSE] [DC2-SHM-DECOVID]: LCM: [ Skip Set ] [[xPendingReboot]RebootAfterPromotion] [2020-07-10 10:38:32Z] [VERBOSE] [DC2-SHM-DECOVID]: LCM: [ End Resource ] [[xPendingReboot]RebootAfterPromotion] [2020-07-10 10:38:32Z] [VERBOSE] [DC2-SHM-DECOVID]: [] Consistency check completed. [2020-07-10 10:38:32Z] [VERBOSE] Operation 'Invoke CimMethod' complete. [2020-07-10 10:38:32Z] [VERBOSE] Time taken for configuration job to complete is 27.122 seconds [2020-07-10 10:38:37Z] [VERBOSE] Performing the operation "Start-DscConfiguration: SendMetaConfigurationApply" on target "MSFT_DSCLocalConfigurationManager". [2020-07-10 10:38:37Z] [VERBOSE] Perform operation 'Invoke CimMethod' with following parameters, ''methodName' = SendMetaConfigurationApply,'className' = MSFT_DSCLocalConfigurationManager,'namespaceName' = root/Microsoft/Windows/DesiredStateConfiguration'. [2020-07-10 10:38:37Z] [VERBOSE] An LCM method call arrived from computer DC2-SHM-DECOVID with user sid S-1-5-18. [2020-07-10 10:38:37Z] [VERBOSE] [DC2-SHM-DECOVID]: LCM: [ Start Set ] [2020-07-10 10:38:37Z] [VERBOSE] [DC2-SHM-DECOVID]: LCM: [ Start Resource ] [MSFT_DSCMetaConfiguration] [2020-07-10 10:38:37Z] [VERBOSE] [DC2-SHM-DECOVID]: LCM: [ Start Set ] [MSFT_DSCMetaConfiguration] [2020-07-10 10:38:37Z] [VERBOSE] [DC2-SHM-DECOVID]: LCM: [ End Set ] [MSFT_DSCMetaConfiguration] in 0.0310 seconds. [2020-07-10 10:38:37Z] [VERBOSE] [DC2-SHM-DECOVID]: LCM: [ End Resource ] [MSFT_DSCMetaConfiguration] [2020-07-10 10:38:37Z] [VERBOSE] [DC2-SHM-DECOVID]: LCM: [ End Set ] [2020-07-10 10:38:37Z] [VERBOSE] [DC2-SHM-DECOVID]: LCM: [ End Set ] in 0.0620 seconds. [2020-07-10 10:38:37Z] [VERBOSE] Operation 'Invoke CimMethod' complete. [2020-07-10 10:38:37Z] [VERBOSE] Set-DscLocalConfigurationManager finished in 0.179 seconds. 2020-07-10 11:38:53 [ INFO]: CreateADBDC: ComponentStatus/DscExtensionLog/succeeded [2020-07-10 10:37:57Z] Extension request for sequence number 0 attempting to create lock.0 mutex [2020-07-10 10:37:57Z] Attempting to grab mutex DscExtensionHandler_Lock for sequence number 0 [2020-07-10 10:37:57Z] Acquired lock for extension instance for sequence number 0 [2020-07-10 10:37:57Z] Attempting to acquire extension lock [2020-07-10 10:37:57Z] Attempting to grab mutex DscExtensionHandler_Lock [2020-07-10 10:37:57Z] Acquired lock for extension [2020-07-10 10:37:57Z] lock does not exist: begin processing [2020-07-10 10:37:57Z] Starting DSC Extension ... [2020-07-10 10:37:57Z] Getting handler execution status HKLM:\SOFTWARE\Microsoft\Azure\DSC\2.80.0.2\Status ... [2020-07-10 10:37:57Z] Getting handler execution status HKLM:\SOFTWARE\Microsoft\Azure\DSC\2.80.0.2\Status ... [2020-07-10 10:37:57Z] Reading handler settings from C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\RuntimeSettings\0.settings [2020-07-10 10:37:57Z] Found protected settings on Azure VM. Decrypting. [2020-07-10 10:38:00Z] Getting handler execution status HKLM:\SOFTWARE\Microsoft\Azure\DSC\2.80.0.2\Status ... [2020-07-10 10:38:00Z] Getting handler execution status HKLM:\SOFTWARE\Microsoft\Azure\DSC\2.80.0.2\Status ... [2020-07-10 10:38:00Z] Updating execution status (HKLM:\SOFTWARE\Microsoft\Azure\DSC\2.80.0.2\Status) [2020-07-10 10:38:00Z] Settings handler status to 'transitioning' (C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\Status\0.status) [2020-07-10 10:38:00Z] Will continue the existing configuration. Executing Start-DscConfiguration with -UseExisting option ... [2020-07-10 10:38:01Z] Settings handler status to 'transitioning' (C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\Status\0.status) [2020-07-10 10:38:33Z] Settings handler status to 'transitioning' (C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\Status\0.status) [2020-07-10 10:38:35Z] LCM state is Idle [2020-07-10 10:38:35Z] DSC configuration completed. [2020-07-10 10:38:35Z] Resetting metaconfiguration... [2020-07-10 10:38:35Z] Restoring C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\DSCWork\CreateADBDC.0\CreateADBDC\localhost.meta.mof.bk... [2020-07-10 10:38:35Z] Executing Set-DscLocalConfigurationManager... [2020-07-10 10:38:35Z] Settings handler status to 'transitioning' (C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\Status\0.status) [2020-07-10 10:38:38Z] Settings handler status to 'transitioning' (C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\Status\0.status) [2020-07-10 10:38:38Z] Get-DscLocalConfigurationManager: ActionAfterReboot : ContinueConfiguration AgentId : 75B069C0-C298-11EA-969F-0022483EEE02 AllowModuleOverWrite : False CertificateID : 03614A7E4684441BB92F84365051184E824F0320 ConfigurationDownloadManagers : {} ConfigurationID : ConfigurationMode : ApplyOnly ConfigurationModeFrequencyMins : 15 Credential : DebugMode : {NONE} DownloadManagerCustomData : DownloadManagerName : LCMCompatibleVersions : {1.0, 2.0} LCMState : Idle LCMStateDetail : LCMVersion : 2.0 StatusRetentionTimeInDays : 10 SignatureValidationPolicy : NONE SignatureValidations : {} MaximumDownloadSizeMB : 500 PartialConfigurations : RebootNodeIfNeeded : True RefreshFrequencyMins : 30 RefreshMode : PUSH ReportManagers : {} ResourceModuleManagers : {} PSComputerName : [2020-07-10 10:38:38Z] Settings handler status to 'success' (C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\Status\0.status) 2020-07-10 11:38:53 [ INFO]: CreateADBDC: ComponentStatus/Metadata/succeeded VMUUId=D1F78C5C-D45B-4918-BF3E-5E68227DD6CE;AgentId=75B069C0-C298-11EA-969F-0022483EEE02; 2020-07-10 11:38:53 [ INFO]: bginfo: ProvisioningState/succeeded Plugin enabled (handler name: Microsoft.Compute.bginfo, extension name: , version: 2.1). 2020-07-10 11:38:53 [ INFO]: bginfo: ProvisioningState/succeeded Plugin enabled (handler name: Microsoft.Compute.bginfo, extension name: , version: 2.1). 2020-07-10 11:38:53 [ INFO]: CreateADForest: ProvisioningState/succeeded DSC configuration was applied successfully. 2020-07-10 11:38:53 [ INFO]: CreateADForest: ComponentStatus/DscConfigurationLog/succeeded [2020-07-10 10:29:50Z] [WARNING] [DC1-SHM-DECOVID]: [[xPendingReboot]RebootAfterPromotion] Unable to query CCM_ClientUtilities: Invalid namespace [2020-07-10 10:29:50Z] [VERBOSE] [DC1-SHM-DECOVID]: [[xPendingReboot]RebootAfterPromotion] No pending reboots found. [2020-07-10 10:29:50Z] [VERBOSE] [DC1-SHM-DECOVID]: LCM: [ End Test ] [[xPendingReboot]RebootAfterPromotion] in 0.4770 seconds. [2020-07-10 10:29:50Z] [VERBOSE] [DC1-SHM-DECOVID]: LCM: [ Skip Set ] [[xPendingReboot]RebootAfterPromotion] [2020-07-10 10:29:50Z] [VERBOSE] [DC1-SHM-DECOVID]: LCM: [ End Resource ] [[xPendingReboot]RebootAfterPromotion] [2020-07-10 10:29:50Z] [VERBOSE] [DC1-SHM-DECOVID]: [] Consistency check completed. [2020-07-10 10:29:50Z] [VERBOSE] Operation 'Invoke CimMethod' complete. [2020-07-10 10:29:50Z] [VERBOSE] Time taken for configuration job to complete is 330.389 seconds [2020-07-10 10:29:54Z] [VERBOSE] Performing the operation "Start-DscConfiguration: SendMetaConfigurationApply" on target "MSFT_DSCLocalConfigurationManager". [2020-07-10 10:29:54Z] [VERBOSE] Perform operation 'Invoke CimMethod' with following parameters, ''methodName' = SendMetaConfigurationApply,'className' = MSFT_DSCLocalConfigurationManager,'namespaceName' = root/Microsoft/Windows/DesiredStateConfiguration'. [2020-07-10 10:29:54Z] [VERBOSE] An LCM method call arrived from computer DC1-SHM-DECOVID with user sid S-1-5-18. [2020-07-10 10:29:54Z] [VERBOSE] [DC1-SHM-DECOVID]: LCM: [ Start Set ] [2020-07-10 10:29:54Z] [VERBOSE] [DC1-SHM-DECOVID]: LCM: [ Start Resource ] [MSFT_DSCMetaConfiguration] [2020-07-10 10:29:54Z] [VERBOSE] [DC1-SHM-DECOVID]: LCM: [ Start Set ] [MSFT_DSCMetaConfiguration] [2020-07-10 10:29:54Z] [VERBOSE] [DC1-SHM-DECOVID]: LCM: [ End Set ] [MSFT_DSCMetaConfiguration] in 0.0310 seconds. [2020-07-10 10:29:54Z] [VERBOSE] [DC1-SHM-DECOVID]: LCM: [ End Resource ] [MSFT_DSCMetaConfiguration] [2020-07-10 10:29:54Z] [VERBOSE] [DC1-SHM-DECOVID]: LCM: [ End Set ] [2020-07-10 10:29:54Z] [VERBOSE] [DC1-SHM-DECOVID]: LCM: [ End Set ] in 0.0620 seconds. [2020-07-10 10:29:54Z] [VERBOSE] Operation 'Invoke CimMethod' complete. [2020-07-10 10:29:54Z] [VERBOSE] Set-DscLocalConfigurationManager finished in 0.191 seconds. 2020-07-10 11:38:53 [ INFO]: CreateADForest: ComponentStatus/DscExtensionLog/succeeded [2020-07-10 10:24:13Z] Extension request for sequence number 0 attempting to create lock.0 mutex [2020-07-10 10:24:13Z] Attempting to grab mutex DscExtensionHandler_Lock for sequence number 0 [2020-07-10 10:24:13Z] Acquired lock for extension instance for sequence number 0 [2020-07-10 10:24:13Z] Attempting to acquire extension lock [2020-07-10 10:24:13Z] Attempting to grab mutex DscExtensionHandler_Lock [2020-07-10 10:24:13Z] Acquired lock for extension [2020-07-10 10:24:13Z] lock does not exist: begin processing [2020-07-10 10:24:13Z] Starting DSC Extension ... [2020-07-10 10:24:13Z] Getting handler execution status HKLM:\SOFTWARE\Microsoft\Azure\DSC\2.80.0.2\Status ... [2020-07-10 10:24:13Z] Getting handler execution status HKLM:\SOFTWARE\Microsoft\Azure\DSC\2.80.0.2\Status ... [2020-07-10 10:24:13Z] Reading handler settings from C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\RuntimeSettings\0.settings [2020-07-10 10:24:13Z] Found protected settings on Azure VM. Decrypting. [2020-07-10 10:24:16Z] Getting handler execution status HKLM:\SOFTWARE\Microsoft\Azure\DSC\2.80.0.2\Status ... [2020-07-10 10:24:17Z] Getting handler execution status HKLM:\SOFTWARE\Microsoft\Azure\DSC\2.80.0.2\Status ... [2020-07-10 10:24:17Z] Updating execution status (HKLM:\SOFTWARE\Microsoft\Azure\DSC\2.80.0.2\Status) [2020-07-10 10:24:17Z] Settings handler status to 'transitioning' (C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\Status\0.status) [2020-07-10 10:24:17Z] Will continue the existing configuration. Executing Start-DscConfiguration with -UseExisting option ... [2020-07-10 10:24:17Z] Settings handler status to 'transitioning' (C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\Status\0.status) [2020-07-10 10:29:52Z] Settings handler status to 'transitioning' (C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\Status\0.status) [2020-07-10 10:29:52Z] LCM state is Idle [2020-07-10 10:29:52Z] DSC configuration completed. [2020-07-10 10:29:52Z] Resetting metaconfiguration... [2020-07-10 10:29:52Z] Restoring C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\DSCWork\CreateADPDC.0\CreateADPDC\localhost.meta.mof.bk... [2020-07-10 10:29:52Z] Executing Set-DscLocalConfigurationManager... [2020-07-10 10:29:52Z] Settings handler status to 'transitioning' (C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\Status\0.status) [2020-07-10 10:29:56Z] Settings handler status to 'transitioning' (C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\Status\0.status) [2020-07-10 10:29:56Z] Get-DscLocalConfigurationManager: ActionAfterReboot : ContinueConfiguration AgentId : 632DBCBE-C296-11EA-969F-0022483EEA42 AllowModuleOverWrite : False CertificateID : 5A946F8E5D1C68F1C790B6B60E0484585956E6ED ConfigurationDownloadManagers : {} ConfigurationID : ConfigurationMode : ApplyOnly ConfigurationModeFrequencyMins : 15 Credential : DebugMode : {NONE} DownloadManagerCustomData : DownloadManagerName : LCMCompatibleVersions : {1.0, 2.0} LCMState : Idle LCMStateDetail : LCMVersion : 2.0 StatusRetentionTimeInDays : 10 SignatureValidationPolicy : NONE SignatureValidations : {} MaximumDownloadSizeMB : 500 PartialConfigurations : RebootNodeIfNeeded : True RefreshFrequencyMins : 30 RefreshMode : PUSH ReportManagers : {} ResourceModuleManagers : {} PSComputerName : [2020-07-10 10:29:56Z] Settings handler status to 'success' (C:\Packages\Plugins\Microsoft.Powershell.DSC\2.80.0.2\Status\0.status) 2020-07-10 11:38:53 [ INFO]: CreateADForest: ComponentStatus/Metadata/succeeded VMUUId=99068AEE-01B4-4B5D-AA7F-37320103BB02;AgentId=632DBCBE-C296-11EA-969F-0022483EEA42; 2020-07-10 11:38:53 [SUCCESS]: [✔] Template deployment 'shm-dc-template' succeeded 2020-07-10 11:38:53 [ INFO]: Importing configuration artifacts for: DC1-SHM-DECOVID... 2020-07-10 11:41:05 [SUCCESS]: [✔] Remote script execution succeeded Code : ComponentStatus/StdOut/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Clearing all pre-existing files and folders from 'C:\Installation' Directory: C:\ Mode LastWriteTime Length Name ---- ------------- ------ ---- d----- 7/10/2020 10:39 AM Installation Downloading 7 files to 'C:\Installation'... Downloading AzureADConnect to 'C:\Installation'... [o] Completed Extracting zip files... [o] Completed Contents of 'C:\Installation' are: Directory: C:\Installation Mode LastWriteTime Length Name ---- ------------- ------ ---- d----- 7/10/2020 10:40 AM GPOs -a---- 7/10/2020 10:40 AM 101203968 AzureADConnect.msi -a---- 7/10/2020 10:39 AM 1949 CreateUsers.ps1 -a---- 7/10/2020 10:39 AM 1143 Disconnect_AD.ps1 -a---- 7/10/2020 10:39 AM 36260 GPOs.zip -a---- 7/10/2020 10:39 AM 286 Run_ADSync.ps1 -a---- 7/10/2020 10:39 AM 1746 StartMenuLayoutModification.xml -a---- 7/10/2020 10:39 AM 1919 UpdateAADSyncRule.ps1 -a---- 7/10/2020 10:39 AM 151 user_details_template.csv Time : Code : ComponentStatus/StdErr/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Time : 2020-07-10 11:41:15 [ INFO]: Configuring Active Directory for: DC1-SHM-DECOVID... 2020-07-10 11:42:26 [SUCCESS]: [✔] Remote script execution succeeded Code : ComponentStatus/StdOut/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : fc-758c74888661 DisplayName : All Servers - Windows Services Enabled : True Enforced : False Target : OU=Secure Research Environment Data Servers,DC=decovid,DC=turingsafehaven,DC=ac,DC=uk Order : 2 [o] Linking GPO 'All Servers - Windows Services' to 'Secure Research Environment Data Servers' succeeded GpoId : 92e8a6ee-9a0d-4057-bffc-758c74888661 DisplayName : All Servers - Windows Services Enabled : True Enforced : False Target : OU=Secure Research Environment RDS Session Servers,DC=decovid,DC=turingsafehaven,DC=ac,DC=uk Order : 2 [o] Linking GPO 'All Servers - Windows Services' to 'Secure Research Environment RDS Session Servers' succeeded GpoId : 92e8a6ee-9a0d-4057-bffc-758c74888661 DisplayName : All Servers - Windows Services Enabled : True Enforced : False Target : OU=Secure Research Environment RDS Gateway Servers,DC=decovid,DC=turingsafehaven,DC=ac,DC=uk Order : 2 [o] Linking GPO 'All Servers - Windows Services' to 'Secure Research Environment RDS Gateway Servers' succeeded GpoId : 0cb867e5-f504-4103-9682-33437c4ab458 DisplayName : All Servers - Windows Update Enabled : True Enforced : False Target : OU=Domain Controllers,DC=decovid,DC=turingsafehaven,DC=ac,DC=uk Order : 3 [o] Linking GPO 'All Servers - Windows Update' to 'Domain Controllers' succeeded GpoId : 0cb867e5-f504-4103-9682-33437c4ab458 DisplayName : All Servers - Windows Update Enabled : True Enforced : False Target : OU=Safe Haven Identity Servers,DC=decovid,DC=turingsafehaven,DC=ac,DC=uk Order : 3 [o] Linking GPO 'All Servers - Windows Update' to 'Safe Haven Identity Servers' succeeded GpoId : 0cb867e5-f504-4103-9682-33437c4ab458 DisplayName : All Servers - Windows Update Enabled : True Enforced : False Target : OU=Secure Research Environment Data Servers,DC=decovid,DC=turingsafehaven,DC=ac,DC=uk Order : 3 [o] Linking GPO 'All Servers - Windows Update' to 'Secure Research Environment Data Servers' succeeded GpoId : 0cb867e5-f504-4103-9682-33437c4ab458 DisplayName : All Servers - Windows Update Enabled : True Enforced : False Target : OU=Secure Research Environment RDS Session Servers,DC=decovid,DC=turingsafehaven,DC=ac,DC=uk Order : 3 [o] Linking GPO 'All Servers - Windows Update' to 'Secure Research Environment RDS Session Servers' succeeded GpoId : 0cb867e5-f504-4103-9682-33437c4ab458 DisplayName : All Servers - Windows Update Enabled : True Enforced : False Target : OU=Secure Research Environment RDS Gateway Servers,DC=decovid,DC=turingsafehaven,DC=ac,DC=uk Order : 3 [o] Linking GPO 'All Servers - Windows Update' to 'Secure Research Environment RDS Gateway Servers' succeeded GpoId : ea2f18e4-97e1-498e-ac78-0fc17edee9a0 DisplayName : Session Servers - Remote Desktop Control Enabled : True Enforced : False Target : OU=Secure Research Environment RDS Session Servers,DC=decovid,DC=turingsafehaven,DC=ac,DC=uk Order : 4 [o] Linking GPO 'Session Servers - Remote Desktop Control' to 'Secure Research Environment RDS Session Servers' succeeded Setting AAD sync permissions for AD Sync Service account (decovidlocaladsync)... [o] Successfully updated ACL permissions for AD Sync Service account 'decovidlocaladsync' Delegating Active Directory registration permissions to service users... [o] Successfully delegated permissions on the 'Safe Haven Identity Servers' container to 'DECOVID\decovididentitysrvrs' [o] Successfully delegated permissions on the 'Secure Research Environment Data Servers' container to 'DECOVID\decoviddatasrvrs' [o] Successfully delegated permissions on the 'Secure Research Environment Linux Servers' container to 'DECOVID\decovidlinuxsrvrs' [o] Successfully delegated permissions on the 'Secure Research Environment RDS Gateway Servers' container to 'DECOVID\decovidgatewaysrvrs' [o] Successfully delegated permissions on the 'Secure Research Environment RDS Session Servers' container to 'DECOVID\decovidsessionsrvrs' Time : Code : ComponentStatus/StdErr/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Time : 2020-07-10 11:42:36 [ INFO]: Configuring group policies for: DC1-SHM-DECOVID... 2020-07-10 11:43:07 [SUCCESS]: [✔] Remote script execution succeeded Code : ComponentStatus/StdOut/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Found the 'Local Administrators' group: S-1-5-32-544 Ensuring that members of 'SG Safe Haven Server Administrators' are local administrators [o] Successfully set group policies for 'Local Administrators' Setting the layout file for the Remote Desktop servers... [o] Succeeded Time : Code : ComponentStatus/StdErr/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Time : 2020-07-10 11:43:48 [SUCCESS]: [✔] Remote script execution succeeded Code : ComponentStatus/StdOut/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Forward external DNS requests to Microsoft Azure DNS server... UseRootHint : True Timeout(s) : 3 EnableReordering : True IPAddress : 168.63.129.16 ReorderedIPAddress : 168.63.129.16 [o] Successfully created/updated DNS forwarding Time : Code : ComponentStatus/StdErr/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Time : VirtualMachine : Microsoft.Azure.Commands.Network.Models.PSResourceId IpConfigurations : {ipconfig1} TapConfigurations : {} DnsSettings : Microsoft.Azure.Commands.Network.Models.PSNetworkInterfaceDnsSettings MacAddress : 00-22-48-3E-EA-42 Primary : True EnableAcceleratedNetworking : False EnableIPForwarding : False HostedWorkloads : {} NetworkSecurityGroup : PrivateEndpoint : ProvisioningState : Succeeded VirtualMachineText : { "Id": "/subscriptions/9c379675-84a2-4b6e-825d-fb54b26ba17e/resourceGroups/RG_SHM_DECOVID_DC/providers/Microsoft.Compute/virtualMachines/DC1-SHM-DECOVID" } IpConfigurationsText : [ { "Name": "ipconfig1", "Etag": "W/\"657a8025-7524-4b76-96a8-a20c03c1c53e\"", "Id": "/subscriptions/9c379675-84a2-4b6e-825d-fb54b26ba17e/resourceGroups/RG_SHM_DECOVID_DC/providers/Microsoft.Network/networkInterfaces/DC1-SHM-DECOVID-NIC/ipConfigurations/ipconfig1", "PrivateIpAddress": "10.0.0.4", "PrivateIpAllocationMethod": "Static", "Subnet": { "Id": "/subscriptions/9c379675-84a2-4b6e-825d-fb54b26ba17e/resourceGroups/RG_SHM_DECOVID_NETWORKING/providers/Microsoft.Network/virtualNetworks/VNET_SHM_DECOVID/subnets/IdentitySubnet" }, "ProvisioningState": "Succeeded", "PrivateIpAddressVersion": "IPv4", "LoadBalancerBackendAddressPools": [], "LoadBalancerInboundNatRules": [], "Primary": true, "ApplicationGatewayBackendAddressPools": [], "ApplicationSecurityGroups": [], "VirtualNetworkTaps": [] } ] TapConfigurationsText : [] DnsSettingsText : { "DnsServers": [], "AppliedDnsServers": [ "10.0.0.4", "10.0.0.5", "168.63.129.16" ], "InternalDomainNameSuffix": "fwobo5yyamgetmimerib1u0k1f.zx.internal.cloudapp.net" } NetworkSecurityGroupText : null PrivateEndpointText : null ResourceGroupName : RG_SHM_DECOVID_DC Location : uksouth ResourceGuid : f704d989-cc68-4af9-8bdc-47ed745841d3 Type : Microsoft.Network/networkInterfaces Tag : TagsTable : Name : DC1-SHM-DECOVID-NIC Etag : W/"657a8025-7524-4b76-96a8-a20c03c1c53e" Id : /subscriptions/9c379675-84a2-4b6e-825d-fb54b26ba17e/resourceGroups/RG_SHM_DECOVID_DC/providers/Microsoft.Network/networkInterfaces/DC1-SHM-DECOVID-NIC 2020-07-10 11:45:03 [ INFO]: Updating DC VM 'DC1-SHM-DECOVID'... 2020-07-10 11:45:03 [ INFO]: [ ] Installing core Powershell modules on 'DC1-SHM-DECOVID' 2020-07-10 11:48:06 [SUCCESS]: [✔] Remote script execution succeeded Code : ComponentStatus/StdOut/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Installing NuGet... [o] NuGet 2.8.5.208 is installed Installing PackageManagement... [o] PackageManagement 1.4.7 is installed Installing PowerShellGet... [o] PowerShellGet 2.2.4.1 is installed Installing PSWindowsUpdate... [o] PSWindowsUpdate 2.2.0.2 is installed Newly installed modules: ... PSWindowsUpdate Time : Code : ComponentStatus/StdErr/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Time : 2020-07-10 11:49:16 [ INFO]: [ ] Setting OS locale and installing updates on 'DC1-SHM-DECOVID' 2020-07-10 11:52:48 [SUCCESS]: [✔] Remote script execution succeeded Code : ComponentStatus/StdOut/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Setting locale and timezone... LanguageTag : en-GB Autonym : English (United Kingdom) EnglishName : English LocalizedName : English (United Kingdom) ScriptName : Latin InputMethodTips : {0809:00000809} Spellchecking : True Handwriting : False [o] Setting locale succeeded Installing 5 Windows updates: ... Update for Adobe Flash Player for Windows Server 2019 (1809) for x64-based Systems (KB4462930) ... Microsoft Silverlight (KB4481252) ... Windows Malicious Software Removal Tool x64 - v5.82 (KB890830) ... 2020-01 Update for Windows Server 2019 for x64-based Systems (KB4494174) ... 2020-06 Security Update for Adobe Flash Player for Windows Server 2019 for x64-based Systems (KB4561600) Reboot is required, but do it manually. [o] Installing Windows updates succeeded. Newly installed Windows updates: ... 2020-06 Security Update for Adobe Flash Player for Windows Server 2019 for x64-based Systems (KB4561600) ... Windows Malicious Software Removal Tool x64 - v5.82 (KB890830) ... Microsoft Silverlight (KB4481252) ... Update for Adobe Flash Player for Windows Server 2019 (1809) for x64-based Systems (KB4462930) Time : Code : ComponentStatus/StdErr/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Time : 2020-07-10 11:52:59 [ INFO]: [ ] (Re)starting VM 'DC1-SHM-DECOVID' [PowerState/running] 2020-07-10 11:53:30 [SUCCESS]: [✔] Successfully (re)started 'DC1-SHM-DECOVID' [PowerState/running] 2020-07-10 11:54:31 [SUCCESS]: [✔] Remote script execution succeeded Code : ComponentStatus/StdOut/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Forward external DNS requests to Microsoft Azure DNS server... UseRootHint : True Timeout(s) : 3 EnableReordering : True IPAddress : {168.63.129.16, 10.0.0.4} ReorderedIPAddress : {168.63.129.16, 10.0.0.4} [o] Successfully created/updated DNS forwarding Time : Code : ComponentStatus/StdErr/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Time : VirtualMachine : Microsoft.Azure.Commands.Network.Models.PSResourceId IpConfigurations : {ipconfig1} TapConfigurations : {} DnsSettings : Microsoft.Azure.Commands.Network.Models.PSNetworkInterfaceDnsSettings MacAddress : 00-22-48-3E-EE-02 Primary : True EnableAcceleratedNetworking : False EnableIPForwarding : False HostedWorkloads : {} NetworkSecurityGroup : PrivateEndpoint : ProvisioningState : Succeeded VirtualMachineText : { "Id": "/subscriptions/9c379675-84a2-4b6e-825d-fb54b26ba17e/resourceGroups/RG_SHM_DECOVID_DC/providers/Microsoft.Compute/virtualMachines/DC2-SHM-DECOVID" } IpConfigurationsText : [ { "Name": "ipconfig1", "Etag": "W/\"88b99086-8b6f-482c-a032-8f325f64882e\"", "Id": "/subscriptions/9c379675-84a2-4b6e-825d-fb54b26ba17e/resourceGroups/RG_SHM_DECOVID_DC/providers/Microsoft.Network/networkInterfaces/DC2-SHM-DECOVID-NIC/ipConfigurations/ipconfig1", "PrivateIpAddress": "10.0.0.5", "PrivateIpAllocationMethod": "Static", "Subnet": { "Id": "/subscriptions/9c379675-84a2-4b6e-825d-fb54b26ba17e/resourceGroups/RG_SHM_DECOVID_NETWORKING/providers/Microsoft.Network/virtualNetworks/VNET_SHM_DECOVID/subnets/IdentitySubnet" }, "ProvisioningState": "Succeeded", "PrivateIpAddressVersion": "IPv4", "LoadBalancerBackendAddressPools": [], "LoadBalancerInboundNatRules": [], "Primary": true, "ApplicationGatewayBackendAddressPools": [], "ApplicationSecurityGroups": [], "VirtualNetworkTaps": [] } ] TapConfigurationsText : [] DnsSettingsText : { "DnsServers": [], "AppliedDnsServers": [], "InternalDomainNameSuffix": "fwobo5yyamgetmimerib1u0k1f.zx.internal.cloudapp.net" } NetworkSecurityGroupText : null PrivateEndpointText : null ResourceGroupName : RG_SHM_DECOVID_DC Location : uksouth ResourceGuid : d84e612f-197e-4650-b1a2-50be59f6c2fe Type : Microsoft.Network/networkInterfaces Tag : TagsTable : Name : DC2-SHM-DECOVID-NIC Etag : W/"88b99086-8b6f-482c-a032-8f325f64882e" Id : /subscriptions/9c379675-84a2-4b6e-825d-fb54b26ba17e/resourceGroups/RG_SHM_DECOVID_DC/providers/Microsoft.Network/networkInterfaces/DC2-SHM-DECOVID-NIC 2020-07-10 11:55:35 [ INFO]: Updating DC VM 'DC2-SHM-DECOVID'... 2020-07-10 11:55:35 [ INFO]: [ ] Installing core Powershell modules on 'DC2-SHM-DECOVID' 2020-07-10 11:58:07 [SUCCESS]: [✔] Remote script execution succeeded Code : ComponentStatus/StdOut/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Installing NuGet... [o] NuGet 2.8.5.208 is installed Installing PackageManagement... [o] PackageManagement 1.4.7 is installed Installing PowerShellGet... [o] PowerShellGet 2.2.4.1 is installed Installing PSWindowsUpdate... [o] PSWindowsUpdate 2.2.0.2 is installed Newly installed modules: ... PSWindowsUpdate Time : Code : ComponentStatus/StdErr/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Time : 2020-07-10 11:59:17 [ INFO]: [ ] Setting OS locale and installing updates on 'DC2-SHM-DECOVID' 2020-07-10 12:02:49 [SUCCESS]: [✔] Remote script execution succeeded Code : ComponentStatus/StdOut/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Setting locale and timezone... LanguageTag : en-GB Autonym : English (United Kingdom) EnglishName : English LocalizedName : English (United Kingdom) ScriptName : Latin InputMethodTips : {0809:00000809} Spellchecking : True Handwriting : False [o] Setting locale succeeded Installing 5 Windows updates: ... Update for Adobe Flash Player for Windows Server 2019 (1809) for x64-based Systems (KB4462930) ... Microsoft Silverlight (KB4481252) ... Windows Malicious Software Removal Tool x64 - v5.82 (KB890830) ... 2020-01 Update for Windows Server 2019 for x64-based Systems (KB4494174) ... 2020-06 Security Update for Adobe Flash Player for Windows Server 2019 for x64-based Systems (KB4561600) Reboot is required, but do it manually. [o] Installing Windows updates succeeded. Newly installed Windows updates: ... 2020-06 Security Update for Adobe Flash Player for Windows Server 2019 for x64-based Systems (KB4561600) ... Windows Malicious Software Removal Tool x64 - v5.82 (KB890830) ... Microsoft Silverlight (KB4481252) ... Update for Adobe Flash Player for Windows Server 2019 (1809) for x64-based Systems (KB4462930) Time : Code : ComponentStatus/StdErr/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Time : 2020-07-10 12:03:00 [ INFO]: [ ] (Re)starting VM 'DC2-SHM-DECOVID' [PowerState/running] 2020-07-10 12:03:31 [SUCCESS]: [✔] Successfully (re)started 'DC2-SHM-DECOVID' [PowerState/running] ```Setup_SHM_NPS
```pwsh 2020-07-10 12:23:48 [ INFO]: Ensuring that resource group 'RG_SHM_DECOVID_NPS' exists... 2020-07-10 12:23:49 [ INFO]: [ ] Creating resource group 'RG_SHM_DECOVID_NPS' 2020-07-10 12:23:49 [SUCCESS]: [✔] Created resource group 'RG_SHM_DECOVID_NPS' 2020-07-10 12:23:49 [ INFO]: Creating/retrieving secrets from key vault 'kv-shm-decovid'... 2020-07-10 12:23:53 [ INFO]: Ensuring that resource group 'RG_SHM_DECOVID_ARTIFACTS' exists... 2020-07-10 12:23:54 [SUCCESS]: [✔] Resource group 'RG_SHM_DECOVID_ARTIFACTS' already exists 2020-07-10 12:23:54 [ INFO]: Ensuring that storage account 'shmdecovidartifactsoceuy' exists in 'RG_SHM_DECOVID_ARTIFACTS'... 2020-07-10 12:23:55 [SUCCESS]: [✔] Storage account 'shmdecovidartifactsoceuy' already exists 2020-07-10 12:23:55 [ INFO]: Ensuring that storage container 'shm-configuration-nps' exists... 2020-07-10 12:23:56 [ INFO]: [ ] Creating storage container 'shm-configuration-nps' in storage account 'shmdecovidartifactsoceuy' 2020-07-10 12:23:56 [SUCCESS]: [✔] Created storage container 2020-07-10 12:23:56 [ INFO]: Uploading artifacts to storage account 'shmdecovidartifactsoceuy'... 2020-07-10 12:23:56 [ INFO]: [ ] Uploading network policy server (NPS) configuration files to blob storage 2020-07-10 12:23:56 [SUCCESS]: [✔] Uploaded NPS configuration files 2020-07-10 12:23:56 [ INFO]: Deploying network policy server (NPS) from template... VERBOSE: Performing the operation "Creating Deployment" on target "RG_SHM_DECOVID_NPS". WARNING: The DeploymentDebug setting has been enabled. This can potentially log secrets like passwords used in resource property or listKeys operations when you retrieve the deployment operations through Get-AzResourceGroupDeploymentOperation VERBOSE: 12:23:57 - Template is valid. VERBOSE: 12:23:57 - Create template deployment 'shm-nps-template' VERBOSE: 12:23:57 - Checking deployment status in 5 seconds VERBOSE: 12:24:02 - Resource Microsoft.Compute/virtualMachines 'NPS-SHM-DECOVID' provisioning status is running VERBOSE: 12:24:02 - Resource Microsoft.Network/networkInterfaces 'NPS-SHM-DECOVID-NIC' provisioning status is succeeded VERBOSE: 12:24:02 - Checking deployment status in 13 seconds VERBOSE: 12:24:15 - Checking deployment status in 5 seconds VERBOSE: 12:24:20 - Checking deployment status in 5 seconds VERBOSE: 12:24:26 - Checking deployment status in 5 seconds VERBOSE: 12:24:31 - Checking deployment status in 5 seconds VERBOSE: 12:24:36 - Checking deployment status in 5 seconds VERBOSE: 12:24:41 - Checking deployment status in 5 seconds VERBOSE: 12:24:46 - Checking deployment status in 5 seconds VERBOSE: 12:24:51 - Checking deployment status in 5 seconds VERBOSE: 12:24:56 - Checking deployment status in 5 seconds VERBOSE: 12:25:01 - Checking deployment status in 5 seconds VERBOSE: 12:25:06 - Checking deployment status in 5 seconds VERBOSE: 12:25:11 - Checking deployment status in 5 seconds VERBOSE: 12:25:16 - Checking deployment status in 5 seconds VERBOSE: 12:25:21 - Checking deployment status in 5 seconds VERBOSE: 12:25:26 - Resource Microsoft.Compute/virtualMachines/extensions 'NPS-SHM-DECOVID/bginfo' provisioning status is running VERBOSE: 12:25:26 - Resource Microsoft.Compute/virtualMachines 'NPS-SHM-DECOVID' provisioning status is succeeded VERBOSE: 12:25:26 - Checking deployment status in 15 seconds VERBOSE: 12:25:42 - Checking deployment status in 5 seconds VERBOSE: 12:25:47 - Checking deployment status in 5 seconds VERBOSE: 12:25:52 - Checking deployment status in 5 seconds VERBOSE: 12:25:57 - Checking deployment status in 5 seconds VERBOSE: 12:26:02 - Checking deployment status in 5 seconds VERBOSE: 12:26:07 - Checking deployment status in 5 seconds VERBOSE: 12:26:12 - Checking deployment status in 5 seconds VERBOSE: 12:26:17 - Checking deployment status in 5 seconds VERBOSE: 12:26:22 - Checking deployment status in 5 seconds VERBOSE: 12:26:27 - Checking deployment status in 5 seconds VERBOSE: 12:26:32 - Checking deployment status in 5 seconds VERBOSE: 12:26:37 - Checking deployment status in 5 seconds VERBOSE: 12:26:43 - Checking deployment status in 5 seconds VERBOSE: 12:26:48 - Checking deployment status in 5 seconds VERBOSE: 12:26:53 - Checking deployment status in 5 seconds VERBOSE: 12:26:58 - Checking deployment status in 5 seconds VERBOSE: 12:27:03 - Checking deployment status in 5 seconds VERBOSE: 12:27:08 - Checking deployment status in 5 seconds VERBOSE: 12:27:13 - Checking deployment status in 5 seconds VERBOSE: 12:27:18 - Resource Microsoft.Compute/virtualMachines/extensions 'NPS-SHM-DECOVID/joindomain' provisioning status is running VERBOSE: 12:27:18 - Resource Microsoft.Compute/virtualMachines/extensions 'NPS-SHM-DECOVID/bginfo' provisioning status is succeeded VERBOSE: 12:27:18 - Checking deployment status in 14 seconds VERBOSE: 12:27:32 - Checking deployment status in 5 seconds VERBOSE: 12:27:37 - Checking deployment status in 5 seconds VERBOSE: 12:27:42 - Checking deployment status in 5 seconds VERBOSE: 12:27:48 - Resource Microsoft.Compute/virtualMachines/extensions 'NPS-SHM-DECOVID/joindomain' provisioning status is succeeded DeploymentName : shm-nps-template ResourceGroupName : RG_SHM_DECOVID_NPS ProvisioningState : Succeeded Timestamp : 10/07/2020 11:27:47 Mode : Incremental TemplateLink : Parameters : Name Type Value ================================ ========================= ========== administrator_User String shmdecovidadmin administrator_Password SecureString bootDiagnostics_Account_Name String shmdecovidbootdiagsoceuy domain_Join_Password SecureString domain_Join_User String decovididentitysrvrs domain_Name String decovid.turingsafehaven.ac.uk npS_Data_Disk_Size_GB Int 20 npS_Data_Disk_Type String Standard_LRS npS_Host_Name String NPS-SHM-DECOVID npS_IP_Address String 10.0.0.6 npS_Os_Disk_Size_GB Int 128 npS_Os_Disk_Type String Standard_LRS npS_VM_Name String NPS-SHM-DECOVID npS_VM_Size String Standard_D2s_v3 oU_Path String OU=Safe Haven Identity Servers,DC=decovid,DC=turingsafehaven,DC=ac,DC=uk virtual_Network_Name String VNET_SHM_DECOVID virtual_Network_Resource_Group String RG_SHM_DECOVID_NETWORKING virtual_Network_Subnet String IdentitySubnet Outputs : DeploymentDebugLogLevel : ResponseContent 2020-07-10 12:27:51 [ INFO]: joindomain: ProvisioningState/succeeded Join completed for Domain 'decovid.turingsafehaven.ac.uk' 2020-07-10 12:27:51 [ INFO]: bginfo: ProvisioningState/succeeded Plugin enabled (handler name: Microsoft.Compute.bginfo, extension name: , version: 2.1). 2020-07-10 12:27:51 [SUCCESS]: [✔] Template deployment 'shm-nps-template' succeeded 2020-07-10 12:27:51 [ INFO]: Configuring NPS server 'NPS-SHM-DECOVID'... 2020-07-10 12:30:23 [SUCCESS]: [✔] Remote script execution succeeded Code : ComponentStatus/StdOut/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Clearing all pre-existing files and folders from 'C:\Installation' Installing NPAS feature... Success Restart Needed Exit Code Feature Result ------- -------------- --------- -------------- True No Success {Network Policy and Access Services, Remot... [o] Successfully installed NPAS Setting SQL Firewall rules... [o] Set inbound rule [o] Set outbound rule Formatting data drive... [o] Completed Downloading NPS extension to 'C:\Installation'... [o] Successfully downloaded NPS extension Installing NPS extension... [o] Successfully installed NPS extension Time : Code : ComponentStatus/StdErr/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Time : 2020-07-10 12:30:33 [ INFO]: Importing NPS configuration 'NPS-SHM-DECOVID'... 2020-07-10 12:31:12 [SUCCESS]: [✔] Remote script execution succeeded Code : ComponentStatus/StdOut/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Downloading 2 files to 'C:\Installation'... Importing NPS configuration for RDG_CAP policy... Time : Code : ComponentStatus/StdErr/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Time : 2020-07-10 12:31:22 [ INFO]: Updating NPS VM 'NPS-SHM-DECOVID'... 2020-07-10 12:31:22 [ INFO]: [ ] Installing core Powershell modules on 'NPS-SHM-DECOVID' 2020-07-10 12:33:53 [SUCCESS]: [✔] Remote script execution succeeded Code : ComponentStatus/StdOut/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Installing NuGet... [o] NuGet 2.8.5.208 is installed Installing PackageManagement... [o] PackageManagement 1.4.7 is installed Installing PowerShellGet... [o] PowerShellGet 2.2.4.1 is installed Installing PSWindowsUpdate... [o] PSWindowsUpdate 2.2.0.2 is installed Newly installed modules: ... PSWindowsUpdate Time : Code : ComponentStatus/StdErr/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Time : 2020-07-10 12:35:03 [ INFO]: [ ] Setting OS locale and installing updates on 'NPS-SHM-DECOVID' 2020-07-10 12:38:35 [SUCCESS]: [✔] Remote script execution succeeded Code : ComponentStatus/StdOut/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Setting locale and timezone... LanguageTag : en-GB Autonym : English (United Kingdom) EnglishName : English LocalizedName : English (United Kingdom) ScriptName : Latin InputMethodTips : {0809:00000809} Spellchecking : True Handwriting : False [o] Setting locale succeeded Installing 7 Windows updates: ... Update for Adobe Flash Player for Windows Server 2019 (1809) for x64-based Systems (KB4462930) ... Microsoft Silverlight (KB4481252) ... Update for Windows Defender Antivirus antimalware platform - KB4052623 (Version 4.18.2001.10) ... Windows Malicious Software Removal Tool x64 - v5.82 (KB890830) ... 2020-01 Update for Windows Server 2019 for x64-based Systems (KB4494174) ... 2020-06 Security Update for Adobe Flash Player for Windows Server 2019 for x64-based Systems (KB4561600) ... Update for Microsoft Defender Antivirus antimalware platform - KB4052623 (Version 4.18.2006.10) Reboot is required, but do it manually. [o] Installing Windows updates succeeded. Newly installed Windows updates: ... Update for Microsoft Defender Antivirus antimalware platform - KB4052623 (Version 4.18.2006.10) ... 2020-06 Security Update for Adobe Flash Player for Windows Server 2019 for x64-based Systems (KB4561600) ... Windows Malicious Software Removal Tool x64 - v5.82 (KB890830) ... Update for Windows Defender Antivirus antimalware platform - KB4052623 (Version 4.18.2001.10) ... Microsoft Silverlight (KB4481252) ... Update for Adobe Flash Player for Windows Server 2019 (1809) for x64-based Systems (KB4462930) Time : Code : ComponentStatus/StdErr/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Time : 2020-07-10 12:38:46 [ INFO]: [ ] (Re)starting VM 'NPS-SHM-DECOVID' [PowerState/running] 2020-07-10 12:39:18 [SUCCESS]: [✔] Successfully (re)started 'NPS-SHM-DECOVID' [PowerState/running] ```Setup_SHM_Firewall
```pwsh 2020-07-10 12:51:48 [ INFO]: Ensuring that subnet 'AzureFirewallSubnet' exists... 2020-07-10 12:51:48 [ INFO]: [ ] Creating subnet 'AzureFirewallSubnet' 2020-07-10 12:52:03 [SUCCESS]: [✔] Created subnet 'AzureFirewallSubnet' 2020-07-10 12:52:03 [ INFO]: Create the firewall with a public IP address 2020-07-10 12:52:03 [ INFO]: Ensuring that firewall 'FIREWALL-SHM-DECOVID' exists... 2020-07-10 12:52:04 [ INFO]: [ ] Creating firewall 'FIREWALL-SHM-DECOVID' 2020-07-10 12:52:04 [ INFO]: Ensuring that public IP address 'FIREWALL-SHM-DECOVID-PIP' exists... 2020-07-10 12:52:05 [ INFO]: [ ] Creating public IP address 'FIREWALL-SHM-DECOVID-PIP' 2020-07-10 12:52:07 [SUCCESS]: [✔] Created public IP address 'FIREWALL-SHM-DECOVID-PIP' 2020-07-10 12:55:20 [SUCCESS]: [✔] Created firewall 'FIREWALL-SHM-DECOVID' 2020-07-10 12:55:20 [ INFO]: Enable logging for this firewall 2020-07-10 12:55:20 [ INFO]: Ensuring that resource group 'RG_SHM_DECOVID_LOGGING' exists... 2020-07-10 12:55:21 [ INFO]: [ ] Creating resource group 'RG_SHM_DECOVID_LOGGING' 2020-07-10 12:55:22 [SUCCESS]: [✔] Created resource group 'RG_SHM_DECOVID_LOGGING' 2020-07-10 12:55:22 [ INFO]: Ensuring that log analytics workspace 'shmdecovidloganalytics' exists... 2020-07-10 12:55:22 [ INFO]: [ ] Creating log analytics workspace 'shmdecovidloganalytics' 2020-07-10 12:56:07 [SUCCESS]: [✔] Created log analytics workspace 'shmdecovidloganalytics' 2020-07-10 12:56:10 [ INFO]: [ ] Registering Microsoft.Insights provider in this subscription... 2020-07-10 12:56:13 [ INFO]: Waiting 5 minutes for this change to propagate... 2020-07-10 13:01:18 [SUCCESS]: [✔] Successfully registered Microsoft.Insights provider WARNING: 13:01:18 - *** The namespace for all the model classes will change from Microsoft.Azure.Management.Monitor.Management.Models to Microsoft.Azure.Management.Monitor.Models in future releases. WARNING: 13:01:18 - *** The namespace for output classes will be uniform for all classes in future releases to make it independent of modifications in the model classes. 2020-07-10 13:01:21 [SUCCESS]: [✔] Enabled logging to workspace 'shmdecovidloganalytics' 2020-07-10 13:01:21 [ INFO]: Ensuring that route table 'ROUTE-TABLE-SHM-DECOVID' exists... 2020-07-10 13:01:21 [ INFO]: [ ] Creating route table 'ROUTE-TABLE-SHM-DECOVID' 2020-07-10 13:01:32 [SUCCESS]: [✔] Created route table 'ROUTE-TABLE-SHM-DECOVID' 2020-07-10 13:01:33 [ INFO]: Setting firewall rules from template... 2020-07-10 13:01:34 [ INFO]: Ensuring that route 'ViaFirewall' exists... 2020-07-10 13:01:34 [ INFO]: [ ] Creating route 'ViaFirewall' 2020-07-10 13:01:46 [SUCCESS]: [✔] Created route 'ViaFirewall' 2020-07-10 13:01:47 [ INFO]: Ensuring that route 'ViaVpn' exists... 2020-07-10 13:01:47 [ INFO]: [ ] Creating route 'ViaVpn' 2020-07-10 13:01:59 [SUCCESS]: [✔] Created route 'ViaVpn' 2020-07-10 13:02:15 [ INFO]: Setting firewall application rules... 2020-07-10 13:02:15 [ INFO]: Setting firewall application rules... 2020-07-10 13:02:15 [ INFO]: Ensuring that 'Allow' rule for 'WindowsUpdate' is set on FIREWALL-SHM-DECOVID... 2020-07-10 13:02:16 [ INFO]: [ ] Creating application rule collection 'shm-decovid-allow' 2020-07-10 13:02:17 [SUCCESS]: [✔] Created application rule collection 'shm-decovid-allow' 2020-07-10 13:02:17 [SUCCESS]: [✔] Ensured that application rule 'AllowWindowsUpdate' exists on local firewall object only. 2020-07-10 13:02:17 [ INFO]: Ensuring that 'Allow' rule for 'ocsp.digicert.com crl3.digicert.com crl4.digicert.com crl.microsoft.com' is set on FIREWALL-SHM-DECOVID... 2020-07-10 13:02:17 [SUCCESS]: [✔] Application rule collection 'shm-decovid-allow' already exists 2020-07-10 13:02:17 [SUCCESS]: [✔] Ensured that application rule 'AllowCertificateStatusCheck' exists on local firewall object only. 2020-07-10 13:02:18 [ INFO]: Ensuring that 'Allow' rule for '11b396b6-d8f6-4d36-b714-cfab5d196e6a.ods.opinsights.azure.com 11b396b6-d8f6-4d36-b714-cfab5d196e6a.oms.opinsights.azure.com 11b396b6-d8f6-4d36-b714-cfab5d196e6a.blob.core.windows.net 11b396b6-d8f6-4d36-b714-cfab5d196e6a.azure-automation.net' is set on FIREWALL-SHM-DECOVID... 2020-07-10 13:02:18 [SUCCESS]: [✔] Application rule collection 'shm-decovid-allow' already exists 2020-07-10 13:02:18 [SUCCESS]: [✔] Ensured that application rule 'AllowLogAnalytics' exists on local firewall object only. 2020-07-10 13:02:18 [ INFO]: Ensuring that 'Allow' rule for 'login.microsoftonline.com secure.aadcdn.microsoftonline-p.com login.windows.net aadcdn.msftauth.net login.live.com' is set on FIREWALL-SHM-DECOVID... 2020-07-10 13:02:19 [SUCCESS]: [✔] Application rule collection 'shm-decovid-allow' already exists 2020-07-10 13:02:19 [SUCCESS]: [✔] Ensured that application rule 'AllowAzureADLogin' exists on local firewall object only. 2020-07-10 13:02:19 [ INFO]: Ensuring that 'Allow' rule for 'pfd.phonefactor.net pfd2.phonefactor.net css.phonefactor.net' is set on FIREWALL-SHM-DECOVID... 2020-07-10 13:02:20 [SUCCESS]: [✔] Application rule collection 'shm-decovid-allow' already exists 2020-07-10 13:02:20 [SUCCESS]: [✔] Ensured that application rule 'AllowAzureMFAConnectOperations' exists on local firewall object only. 2020-07-10 13:02:20 [ INFO]: Ensuring that 'Allow' rule for 'adminwebservice.microsoftonline.com passwordreset.microsoftonline.com adnotifications.windowsazure.com *.blob.core.windows.net *.servicebus.windows.net *.events.data.microsoft.com *.aadconnecthealth.azure.com *.adhybridhealth.azure.com' is set on FIREWALL-SHM-DECOVID... 2020-07-10 13:02:20 [SUCCESS]: [✔] Application rule collection 'shm-decovid-allow' already exists 2020-07-10 13:02:20 [SUCCESS]: [✔] Ensured that application rule 'AllowADConnectOperations' exists on local firewall object only. 2020-07-10 13:02:20 [ INFO]: Ensuring that 'Allow' rule for 'provisioningapi.microsoftonline.com' is set on FIREWALL-SHM-DECOVID... 2020-07-10 13:02:21 [SUCCESS]: [✔] Application rule collection 'shm-decovid-allow' already exists 2020-07-10 13:02:21 [SUCCESS]: [✔] Ensured that application rule 'AllowMSOnlinePSModule' exists on local firewall object only. 2020-07-10 13:02:21 [ INFO]: Ensuring that 'Allow' rule for 'management.azure.com *.adhybridhealth.azure.com www.office.com policykeyservice.dc.ad.msft.net' is set on FIREWALL-SHM-DECOVID... 2020-07-10 13:02:22 [SUCCESS]: [✔] Application rule collection 'shm-decovid-allow' already exists 2020-07-10 13:02:22 [SUCCESS]: [✔] Ensured that application rule 'AllowADConnectSetup' exists on local firewall object only. 2020-07-10 13:02:22 [ INFO]: Ensuring that 'Allow' rule for 'login.microsoftonline.com secure.aadcdn.microsoftonline-p.com login.windows.net aadcdn.msftauth.net login.live.com' is set on FIREWALL-SHM-DECOVID... 2020-07-10 13:02:23 [SUCCESS]: [✔] Application rule collection 'shm-decovid-allow' already exists 2020-07-10 13:02:23 [SUCCESS]: [✔] Ensured that application rule 'AllowAzureADLoginForADConnectAndMFAConnectSetup' exists on local firewall object only. 2020-07-10 13:02:23 [ INFO]: Ensuring that 'Deny' rule for 'settings-win.data.microsoft.com' is set on FIREWALL-SHM-DECOVID... 2020-07-10 13:02:23 [ INFO]: [ ] Creating application rule collection 'shm-decovid-deny' 2020-07-10 13:02:24 [SUCCESS]: [✔] Created application rule collection 'shm-decovid-deny' 2020-07-10 13:02:24 [SUCCESS]: [✔] Ensured that application rule 'DenyWindowsDiagnosticsToMicrosoft' exists on local firewall object only. 2020-07-10 13:02:24 [ INFO]: [ ] Updating remote firewall with rule changes... 2020-07-10 13:03:35 [SUCCESS]: [✔] Updated remote firewall with rule changes. 2020-07-10 13:03:35 [ INFO]: Setting firewall network rules... 2020-07-10 13:03:35 [ INFO]: [ ] Updating remote firewall with rule changes... 2020-07-10 13:03:36 [SUCCESS]: [✔] Updated remote firewall with rule changes. 2020-07-10 13:03:37 [ INFO]: [ ] (Re)starting VM 'DC1-SHM-DECOVID' [PowerState/running] 2020-07-10 13:04:08 [SUCCESS]: [✔] Successfully (re)started 'DC1-SHM-DECOVID' [PowerState/running] 2020-07-10 13:04:09 [ INFO]: [ ] (Re)starting VM 'DC2-SHM-DECOVID' [PowerState/running] 2020-07-10 13:04:40 [SUCCESS]: [✔] Successfully (re)started 'DC2-SHM-DECOVID' [PowerState/running] ```Setup_SHM_Logging
```pwsh 2020-07-10 13:07:59 [ INFO]: [ ] Ensuring extension 'MicrosoftMonitoringAgent' is installed on VM 'DC1-SHM-DECOVID'. 2020-07-10 13:09:31 [SUCCESS]: [✔] Installed extension 'MicrosoftMonitoringAgent' on VM 'DC1-SHM-DECOVID'. 2020-07-10 13:09:31 [ INFO]: [ ] Ensuring extension 'DependencyAgentWindows' is installed on VM 'DC1-SHM-DECOVID'. 2020-07-10 13:10:34 [SUCCESS]: [✔] Installed extension 'DependencyAgentWindows' on VM 'DC1-SHM-DECOVID'. 2020-07-10 13:10:34 [ INFO]: [ ] Ensuring extension 'MicrosoftMonitoringAgent' is installed on VM 'DC2-SHM-DECOVID'. 2020-07-10 13:12:06 [SUCCESS]: [✔] Installed extension 'MicrosoftMonitoringAgent' on VM 'DC2-SHM-DECOVID'. 2020-07-10 13:12:06 [ INFO]: [ ] Ensuring extension 'DependencyAgentWindows' is installed on VM 'DC2-SHM-DECOVID'. 2020-07-10 13:13:08 [SUCCESS]: [✔] Installed extension 'DependencyAgentWindows' on VM 'DC2-SHM-DECOVID'. 2020-07-10 13:13:09 [ INFO]: [ ] Ensuring extension 'MicrosoftMonitoringAgent' is installed on VM 'NPS-SHM-DECOVID'. 2020-07-10 13:14:41 [SUCCESS]: [✔] Installed extension 'MicrosoftMonitoringAgent' on VM 'NPS-SHM-DECOVID'. 2020-07-10 13:14:41 [ INFO]: [ ] Ensuring extension 'DependencyAgentWindows' is installed on VM 'NPS-SHM-DECOVID'. 2020-07-10 13:15:46 [SUCCESS]: [✔] Installed extension 'DependencyAgentWindows' on VM 'NPS-SHM-DECOVID'. 2020-07-10 13:15:47 [ INFO]: Ensuring required Windows event logs are being collected...' 2020-07-10 13:15:50 [SUCCESS]: [✔] Logging activated for 'Active Directory Web Services'. 2020-07-10 13:15:53 [SUCCESS]: [✔] Logging activated for 'Directory Service'. 2020-07-10 13:15:56 [SUCCESS]: [✔] Logging activated for 'DFS Replication'. 2020-07-10 13:15:59 [SUCCESS]: [✔] Logging activated for 'DNS Server'. 2020-07-10 13:16:01 [SUCCESS]: [✔] Logging activated for 'Microsoft-Windows-Security-Netlogon/Operational'. 2020-07-10 13:16:03 [SUCCESS]: [✔] Logging activated for 'Microsoft-Windows-Winlogon/Operational'. 2020-07-10 13:16:04 [SUCCESS]: [✔] Logging activated for 'System'. 2020-07-10 13:16:04 [ INFO]: Ensuring required Windows performance counters are being collected...' 2020-07-10 13:16:05 [SUCCESS]: [✔] Logging activated for 'LogicalDisk/Avg. Disk sec/Read'. 2020-07-10 13:16:07 [SUCCESS]: [✔] Logging activated for 'LogicalDisk/Avg. Disk sec/Write'. 2020-07-10 13:16:09 [SUCCESS]: [✔] Logging activated for 'LogicalDisk/Current Disk Queue Length'. 2020-07-10 13:16:10 [SUCCESS]: [✔] Logging activated for 'LogicalDisk/Disk Reads/sec'. 2020-07-10 13:16:12 [SUCCESS]: [✔] Logging activated for 'LogicalDisk/Disk Transfers/sec'. 2020-07-10 13:16:14 [SUCCESS]: [✔] Logging activated for 'LogicalDisk/Disk Writes/sec'. 2020-07-10 13:16:15 [SUCCESS]: [✔] Logging activated for 'LogicalDisk/Free Megabytes'. 2020-07-10 13:16:17 [SUCCESS]: [✔] Logging activated for 'Memory/Available MBytes'. 2020-07-10 13:16:18 [SUCCESS]: [✔] Logging activated for 'Memory/% Committed Bytes In Use'. 2020-07-10 13:16:20 [SUCCESS]: [✔] Logging activated for 'LogicalDisk/% Free Space'. 2020-07-10 13:16:22 [SUCCESS]: [✔] Logging activated for 'Processor/% Processor Time'. 2020-07-10 13:16:23 [SUCCESS]: [✔] Logging activated for 'System/Processor Queue Length'. 2020-07-10 13:16:23 [ INFO]: Ensuring required Log Analytics Intelligence Packs are enabled...' 2020-07-10 13:16:25 [SUCCESS]: [✔] 'AgentHealthAssessment' Intelligence Pack enabled. 2020-07-10 13:16:26 [SUCCESS]: [✔] 'AzureActivity' Intelligence Pack enabled. 2020-07-10 13:16:28 [SUCCESS]: [✔] 'AzureNetworking' Intelligence Pack enabled. 2020-07-10 13:16:29 [SUCCESS]: [✔] 'AntiMalware' Intelligence Pack enabled. 2020-07-10 13:16:31 [SUCCESS]: [✔] 'CapacityPerformance' Intelligence Pack enabled. 2020-07-10 13:16:32 [SUCCESS]: [✔] 'ChangeTracking' Intelligence Pack enabled. 2020-07-10 13:16:34 [SUCCESS]: [✔] 'DnsAnalytics' Intelligence Pack enabled. 2020-07-10 13:16:35 [SUCCESS]: [✔] 'InternalWindowsEvent' Intelligence Pack enabled. 2020-07-10 13:16:37 [SUCCESS]: [✔] 'NetFlow' Intelligence Pack enabled. 2020-07-10 13:16:38 [SUCCESS]: [✔] 'NetworkMonitoring' Intelligence Pack enabled. 2020-07-10 13:16:40 [SUCCESS]: [✔] 'ServiceMap' Intelligence Pack enabled. 2020-07-10 13:16:41 [SUCCESS]: [✔] 'Updates' Intelligence Pack enabled. 2020-07-10 13:16:43 [SUCCESS]: [✔] 'VMInsights' Intelligence Pack enabled. 2020-07-10 13:16:44 [SUCCESS]: [✔] 'WindowsDefenderATP' Intelligence Pack enabled. 2020-07-10 13:16:45 [SUCCESS]: [✔] 'WindowsFirewall' Intelligence Pack enabled. 2020-07-10 13:16:47 [SUCCESS]: [✔] 'WinLog' Intelligence Pack enabled. ```Setup_SHM_Package_Mirrors - tier 2
```pwsh 2020-07-10 13:08:37 [ INFO]: Ensuring that resource group 'RG_SHM_DECOVID_PKG_MIRRORS' exists... 2020-07-10 13:08:38 [ INFO]: [ ] Creating resource group 'RG_SHM_DECOVID_PKG_MIRRORS' 2020-07-10 13:08:38 [SUCCESS]: [✔] Created resource group 'RG_SHM_DECOVID_PKG_MIRRORS' 2020-07-10 13:08:38 [ INFO]: Ensuring that resource group 'RG_SHM_DECOVID_NETWORKING' exists... 2020-07-10 13:08:39 [SUCCESS]: [✔] Resource group 'RG_SHM_DECOVID_NETWORKING' already exists 2020-07-10 13:08:39 [ INFO]: Ensuring that virtual network 'VNET_SHM_DECOVID_PACKAGE_MIRRORS_TIER2' exists... 2020-07-10 13:08:39 [ INFO]: [ ] Creating virtual network 'VNET_SHM_DECOVID_PACKAGE_MIRRORS_TIER2' 2020-07-10 13:08:45 [SUCCESS]: [✔] Created virtual network 'VNET_SHM_DECOVID_PACKAGE_MIRRORS_TIER2' 2020-07-10 13:08:45 [ INFO]: Ensuring that subnet 'ExternalPackageMirrorsTier2Subnet' exists... 2020-07-10 13:08:46 [ INFO]: [ ] Creating subnet 'ExternalPackageMirrorsTier2Subnet' 2020-07-10 13:08:51 [SUCCESS]: [✔] Created subnet 'ExternalPackageMirrorsTier2Subnet' 2020-07-10 13:08:51 [ INFO]: Ensuring that subnet 'InternalPackageMirrorsTier2Subnet' exists... 2020-07-10 13:08:52 [ INFO]: [ ] Creating subnet 'InternalPackageMirrorsTier2Subnet' 2020-07-10 13:08:56 [SUCCESS]: [✔] Created subnet 'InternalPackageMirrorsTier2Subnet' 2020-07-10 13:08:57 [ INFO]: Ensuring that network security group 'NSG_SHM_DECOVID_EXTERNAL_PACKAGE_MIRRORS_TIER2' exists... 2020-07-10 13:08:58 [ INFO]: [ ] Creating network security group 'NSG_SHM_DECOVID_EXTERNAL_PACKAGE_MIRRORS_TIER2' 2020-07-10 13:09:02 [SUCCESS]: [✔] Created network security group 'NSG_SHM_DECOVID_EXTERNAL_PACKAGE_MIRRORS_TIER2' 2020-07-10 13:09:17 [ INFO]: Ensuring that NSG rule 'RsyncToInternal' exists on 'NSG_SHM_DECOVID_EXTERNAL_PACKAGE_MIRRORS_TIER2'... 2020-07-10 13:09:17 [ INFO]: [ ] Creating NSG rule 'RsyncToInternal' 2020-07-10 13:09:21 [SUCCESS]: [✔] Created NSG rule 'RsyncToInternal' 2020-07-10 13:09:21 [ INFO]: Ensuring that NSG 'NSG_SHM_DECOVID_EXTERNAL_PACKAGE_MIRRORS_TIER2' is attached to subnet 'ExternalPackageMirrorsTier2Subnet'... 2020-07-10 13:09:26 [SUCCESS]: [✔] Set network security group on 'ExternalPackageMirrorsTier2Subnet' 2020-07-10 13:09:26 [SUCCESS]: [✔] Configuring NSG 'NSG_SHM_DECOVID_EXTERNAL_PACKAGE_MIRRORS_TIER2' succeeded 2020-07-10 13:09:26 [ INFO]: Ensuring that network security group 'NSG_SHM_DECOVID_INTERNAL_PACKAGE_MIRRORS_TIER2' exists... 2020-07-10 13:09:27 [ INFO]: [ ] Creating network security group 'NSG_SHM_DECOVID_INTERNAL_PACKAGE_MIRRORS_TIER2' 2020-07-10 13:09:31 [SUCCESS]: [✔] Created network security group 'NSG_SHM_DECOVID_INTERNAL_PACKAGE_MIRRORS_TIER2' 2020-07-10 13:09:51 [ INFO]: Ensuring that NSG 'NSG_SHM_DECOVID_INTERNAL_PACKAGE_MIRRORS_TIER2' is attached to subnet 'InternalPackageMirrorsTier2Subnet'... 2020-07-10 13:09:57 [SUCCESS]: [✔] Set network security group on 'InternalPackageMirrorsTier2Subnet' 2020-07-10 13:09:57 [SUCCESS]: [✔] Configuring NSG 'NSG_SHM_DECOVID_INTERNAL_PACKAGE_MIRRORS_TIER2' succeeded 2020-07-10 13:09:57 [ INFO]: Ensuring that storage account 'shmdecovidbootdiagsoceuy' exists in 'RG_SHM_DECOVID_ARTIFACTS'... 2020-07-10 13:09:57 [SUCCESS]: [✔] Storage account 'shmdecovidbootdiagsoceuy' already exists 2020-07-10 13:10:00 [ INFO]: Ensuring that VM network card 'CRAN-EXTERNAL-MIRROR-TIER-2-NIC' exists... 2020-07-10 13:10:01 [ INFO]: [ ] Creating VM network card 'CRAN-EXTERNAL-MIRROR-TIER-2-NIC' 2020-07-10 13:10:03 [SUCCESS]: [✔] Created VM network card 'CRAN-EXTERNAL-MIRROR-TIER-2-NIC' 2020-07-10 13:10:03 [ INFO]: Ensuring that managed disk 'CRAN-EXTERNAL-MIRROR-TIER-2-DATA-DISK' exists... 2020-07-10 13:10:03 [ INFO]: [ ] Creating 127 GB managed disk 'CRAN-EXTERNAL-MIRROR-TIER-2-DATA-DISK' 2020-07-10 13:10:07 [SUCCESS]: [✔] Created managed disk 'CRAN-EXTERNAL-MIRROR-TIER-2-DATA-DISK' 2020-07-10 13:10:08 [ INFO]: Temporarily allowing outbound internet access from 10.20.2.5 on ports 80, 443 and 3128 2020-07-10 13:10:19 [ INFO]: Ensuring that virtual machine 'CRAN-EXTERNAL-MIRROR-TIER-2' exists... 2020-07-10 13:10:23 [ INFO]: [ ] Creating virtual machine 'CRAN-EXTERNAL-MIRROR-TIER-2' 2020-07-10 13:11:44 [SUCCESS]: [✔] Created virtual machine 'CRAN-EXTERNAL-MIRROR-TIER-2' 2020-07-10 13:12:14 [ INFO]: Waiting for cloud-init provisioning to finish for CRAN-EXTERNAL-MIRROR-TIER-2... 2020-07-10 13:13:19 [SUCCESS]: [✔] Cloud-init provisioning is finished for CRAN-EXTERNAL-MIRROR-TIER-2 2020-07-10 13:13:19 [ INFO]: Disabling outbound internet access from 10.20.2.5 and restarting VM: 'CRAN-EXTERNAL-MIRROR-TIER-2'... 2020-07-10 13:13:23 [SUCCESS]: [✔] Configuring VM 'CRAN-EXTERNAL-MIRROR-TIER-2' succeeded 2020-07-10 13:13:24 [ INFO]: [ ] (Re)starting VM 'CRAN-EXTERNAL-MIRROR-TIER-2' [PowerState/stopped] 2020-07-10 13:13:35 [SUCCESS]: [✔] Successfully (re)started 'CRAN-EXTERNAL-MIRROR-TIER-2' [PowerState/running] 2020-07-10 13:14:06 [SUCCESS]: [✔] Remote script execution succeeded 2020-07-10 13:14:16 [SUCCESS]: [✔] Fetching ssh key from external package mirror succeeded 2020-07-10 13:14:18 [ INFO]: Ensuring that VM network card 'CRAN-INTERNAL-MIRROR-TIER-2-NIC' exists... 2020-07-10 13:14:18 [ INFO]: [ ] Creating VM network card 'CRAN-INTERNAL-MIRROR-TIER-2-NIC' 2020-07-10 13:14:20 [SUCCESS]: [✔] Created VM network card 'CRAN-INTERNAL-MIRROR-TIER-2-NIC' 2020-07-10 13:14:20 [ INFO]: Ensuring that managed disk 'CRAN-INTERNAL-MIRROR-TIER-2-DATA-DISK' exists... 2020-07-10 13:14:21 [ INFO]: [ ] Creating 127 GB managed disk 'CRAN-INTERNAL-MIRROR-TIER-2-DATA-DISK' 2020-07-10 13:14:25 [SUCCESS]: [✔] Created managed disk 'CRAN-INTERNAL-MIRROR-TIER-2-DATA-DISK' 2020-07-10 13:14:25 [ INFO]: Temporarily allowing outbound internet access from 10.20.2.21 on ports 80, 443 and 3128 2020-07-10 13:14:37 [ INFO]: Ensuring that virtual machine 'CRAN-INTERNAL-MIRROR-TIER-2' exists... 2020-07-10 13:14:41 [ INFO]: [ ] Creating virtual machine 'CRAN-INTERNAL-MIRROR-TIER-2' 2020-07-10 13:16:03 [SUCCESS]: [✔] Created virtual machine 'CRAN-INTERNAL-MIRROR-TIER-2' 2020-07-10 13:16:33 [ INFO]: Waiting for cloud-init provisioning to finish for CRAN-INTERNAL-MIRROR-TIER-2... 2020-07-10 13:17:38 [SUCCESS]: [✔] Cloud-init provisioning is finished for CRAN-INTERNAL-MIRROR-TIER-2 2020-07-10 13:17:38 [ INFO]: Disabling outbound internet access from 10.20.2.21 and restarting VM: 'CRAN-INTERNAL-MIRROR-TIER-2'... 2020-07-10 13:17:44 [SUCCESS]: [✔] Configuring VM 'CRAN-INTERNAL-MIRROR-TIER-2' succeeded 2020-07-10 13:17:45 [ INFO]: [ ] (Re)starting VM 'CRAN-INTERNAL-MIRROR-TIER-2' [PowerState/stopped] 2020-07-10 13:17:56 [SUCCESS]: [✔] Successfully (re)started 'CRAN-INTERNAL-MIRROR-TIER-2' [PowerState/running] 2020-07-10 13:17:56 [ INFO]: Ensuring that 'CRAN-INTERNAL-MIRROR-TIER-2' can accept connections from the external mirror... 2020-07-10 13:17:56 [ INFO]: Retrieving public key for 'CRAN-INTERNAL-MIRROR-TIER-2'... 2020-07-10 13:18:27 [SUCCESS]: [✔] Remote script execution succeeded Code : ProvisioningState/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Enable succeeded: [stdout] 127.0.0.1 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqIFAesEhS6TK0imLiEQMG7Q+563FHpjPKC1opcL0Qj7M5jeBYUY+cUOitioTiakvPBQ16rPrf1dF9ewae0kuoZQv8WNI0TF6eP+/IrrlbYsf7bDf5UjMZBfx6CBsJb3EjSaa4XziamgSEXOlg4HnDs1hEuouAKrJbzIO8dGvgwa8kvYXRAghvcq+yEt+W+zhFw0o31qUvjQjuU0pICgCJEXYXR1kj3/8PBv5LRTJkIWaZfYeqSaves1CgTyu5Se+wTQygPnGIEMwH3riKzxHboU6V3fcKnSWTP8Vddeyjn8FhnBSPp46l8BN8wrdw91bi+8nB0flqDw1aodeM95w7 127.0.0.1 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBAgfoc0Zk0iC8/seHhCFS9aeiveFTk4YwXR7Nke9OpN/JhXnFoo1m9hiy7Xo8r5I4XxeMMtcYKYL6RVgUNRAcrY= 127.0.0.1 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILm4XE60hZtgarWurQA4kU0oUlN7G73PrmcDgMF1FPmm [stderr] Time : 2020-07-10 13:18:37 [ INFO]: Uploading 'CRAN-INTERNAL-MIRROR-TIER-2' public key to 'CRAN-EXTERNAL-MIRROR-TIER-2'... 2020-07-10 13:19:08 [SUCCESS]: [✔] Remote script execution succeeded Code : ProvisioningState/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Enable succeeded: [stdout] Update known hosts on the external server to allow connections to the internal server... WARNING: /home/mirrordaemon/.ssh/known_hosts.old contains unhashed entries Delete this file to ensure privacy of hostnames /home/mirrordaemon/.ssh/known_hosts updated. Original contents retained as /home/mirrordaemon/.ssh/known_hosts.old |1|NyEawmFBgfZzMBO+faCw40yQP8I=|91hWTbUwKJ1jV73d54AhyaslfYA= ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqIFAesEhS6TK0imLiEQMG7Q+563FHpjPKC1opcL0Qj7M5jeBYUY+cUOitioTiakvPBQ16rPrf1dF9ewae0kuoZQv8WNI0TF6eP+/IrrlbYsf7bDf5UjMZBfx6CBsJb3EjSaa4XziamgSEXOlg4HnDs1hEuouAKrJbzIO8dGvgwa8kvYXRAghvcq+yEt+W+zhFw0o31qUvjQjuU0pICgCJEXYXR1kj3/8PBv5LRTJkIWaZfYeqSaves1CgTyu5Se+wTQygPnGIEMwH3riKzxHboU6V3fcKnSWTP8Vddeyjn8FhnBSPp46l8BN8wrdw91bi+8nB0flqDw1aodeM95w7 10.20.2.21 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBAgfoc0Zk0iC8/seHhCFS9aeiveFTk4YwXR7Nke9OpN/JhXnFoo1m9hiy7Xo8r5I4XxeMMtcYKYL6RVgUNRAcrY= 10.20.2.21 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILm4XE60hZtgarWurQA4kU0oUlN7G73PrmcDgMF1FPmm total 20K drwxr-xr-x 2 mirrordaemon mirrordaemon 4.0K Jul 10 12:18 . drwxr-xr-x 3 mirrordaemon mirrordaemon 4.0K Jul 10 12:12 .. -rw------- 1 mirrordaemon mirrordaemon 1.7K Jul 10 12:12 id_rsa -rw-r--r-- 1 mirrordaemon mirrordaemon 422 Jul 10 12:12 id_rsa.pub -rw------- 1 mirrordaemon mirrordaemon 706 Jul 10 12:18 known_hosts Update known IP addresses on the external server to schedule pushing to the internal server... 10.20.2.21 total 32K drwxr-xr-x 3 mirrordaemon mirrordaemon 4.0K Jul 10 12:18 . drwxr-xr-x 4 root root 4.0K Jul 10 12:11 .. drwxr-xr-x 2 mirrordaemon mirrordaemon 4.0K Jul 10 12:18 .ssh -rw------- 1 mirrordaemon mirrordaemon 11 Jul 10 12:18 internal_mirror_ip_addresses.txt -rw------- 1 mirrordaemon mirrordaemon 20 Jul 10 12:11 package_whitelist.txt -rwx------ 1 mirrordaemon mirrordaemon 3.0K Jul 10 12:11 pull_from_internet.sh -rwx------ 1 mirrordaemon mirrordaemon 105 Jul 10 12:11 pull_then_push.sh -rwx------ 1 mirrordaemon mirrordaemon 1.2K Jul 10 12:11 push_to_internal_mirrors.sh [stderr] Time : 2020-07-10 13:19:20 [ INFO]: Ensuring that VM network card 'PYPI-EXTERNAL-MIRROR-TIER-2-NIC' exists... 2020-07-10 13:19:20 [ INFO]: [ ] Creating VM network card 'PYPI-EXTERNAL-MIRROR-TIER-2-NIC' 2020-07-10 13:19:22 [SUCCESS]: [✔] Created VM network card 'PYPI-EXTERNAL-MIRROR-TIER-2-NIC' 2020-07-10 13:19:22 [ INFO]: Ensuring that managed disk 'PYPI-EXTERNAL-MIRROR-TIER-2-DATA-DISK' exists... 2020-07-10 13:19:23 [ INFO]: [ ] Creating 8191 GB managed disk 'PYPI-EXTERNAL-MIRROR-TIER-2-DATA-DISK' 2020-07-10 13:19:26 [SUCCESS]: [✔] Created managed disk 'PYPI-EXTERNAL-MIRROR-TIER-2-DATA-DISK' 2020-07-10 13:19:27 [ INFO]: Temporarily allowing outbound internet access from 10.20.2.4 on ports 80, 443 and 3128 2020-07-10 13:19:38 [ INFO]: Ensuring that virtual machine 'PYPI-EXTERNAL-MIRROR-TIER-2' exists... 2020-07-10 13:19:43 [ INFO]: [ ] Creating virtual machine 'PYPI-EXTERNAL-MIRROR-TIER-2' 2020-07-10 13:21:05 [SUCCESS]: [✔] Created virtual machine 'PYPI-EXTERNAL-MIRROR-TIER-2' 2020-07-10 13:21:35 [ INFO]: Waiting for cloud-init provisioning to finish for PYPI-EXTERNAL-MIRROR-TIER-2... 2020-07-10 13:25:20 [SUCCESS]: [✔] Cloud-init provisioning is finished for PYPI-EXTERNAL-MIRROR-TIER-2 2020-07-10 13:25:20 [ INFO]: Disabling outbound internet access from 10.20.2.4 and restarting VM: 'PYPI-EXTERNAL-MIRROR-TIER-2'... 2020-07-10 13:25:25 [SUCCESS]: [✔] Configuring VM 'PYPI-EXTERNAL-MIRROR-TIER-2' succeeded 2020-07-10 13:25:26 [ INFO]: [ ] (Re)starting VM 'PYPI-EXTERNAL-MIRROR-TIER-2' [PowerState/stopped] 2020-07-10 13:25:38 [SUCCESS]: [✔] Successfully (re)started 'PYPI-EXTERNAL-MIRROR-TIER-2' [PowerState/running] 2020-07-10 13:26:09 [SUCCESS]: [✔] Remote script execution succeeded 2020-07-10 13:26:19 [SUCCESS]: [✔] Fetching ssh key from external package mirror succeeded 2020-07-10 13:26:21 [ INFO]: Ensuring that VM network card 'PYPI-INTERNAL-MIRROR-TIER-2-NIC' exists... 2020-07-10 13:26:21 [ INFO]: [ ] Creating VM network card 'PYPI-INTERNAL-MIRROR-TIER-2-NIC' 2020-07-10 13:26:22 [SUCCESS]: [✔] Created VM network card 'PYPI-INTERNAL-MIRROR-TIER-2-NIC' 2020-07-10 13:26:22 [ INFO]: Ensuring that managed disk 'PYPI-INTERNAL-MIRROR-TIER-2-DATA-DISK' exists... 2020-07-10 13:26:24 [ INFO]: [ ] Creating 8191 GB managed disk 'PYPI-INTERNAL-MIRROR-TIER-2-DATA-DISK' 2020-07-10 13:26:27 [SUCCESS]: [✔] Created managed disk 'PYPI-INTERNAL-MIRROR-TIER-2-DATA-DISK' 2020-07-10 13:26:28 [ INFO]: Temporarily allowing outbound internet access from 10.20.2.20 on ports 80, 443 and 3128 2020-07-10 13:26:39 [ INFO]: Ensuring that virtual machine 'PYPI-INTERNAL-MIRROR-TIER-2' exists... 2020-07-10 13:26:44 [ INFO]: [ ] Creating virtual machine 'PYPI-INTERNAL-MIRROR-TIER-2' 2020-07-10 13:28:06 [SUCCESS]: [✔] Created virtual machine 'PYPI-INTERNAL-MIRROR-TIER-2' 2020-07-10 13:28:36 [ INFO]: Waiting for cloud-init provisioning to finish for PYPI-INTERNAL-MIRROR-TIER-2... 2020-07-10 13:31:27 [SUCCESS]: [✔] Cloud-init provisioning is finished for PYPI-INTERNAL-MIRROR-TIER-2 2020-07-10 13:31:27 [ INFO]: Disabling outbound internet access from 10.20.2.20 and restarting VM: 'PYPI-INTERNAL-MIRROR-TIER-2'... 2020-07-10 13:31:32 [SUCCESS]: [✔] Configuring VM 'PYPI-INTERNAL-MIRROR-TIER-2' succeeded 2020-07-10 13:31:33 [ INFO]: [ ] (Re)starting VM 'PYPI-INTERNAL-MIRROR-TIER-2' [PowerState/stopped] 2020-07-10 13:31:45 [SUCCESS]: [✔] Successfully (re)started 'PYPI-INTERNAL-MIRROR-TIER-2' [PowerState/running] 2020-07-10 13:31:45 [ INFO]: Ensuring that 'PYPI-INTERNAL-MIRROR-TIER-2' can accept connections from the external mirror... 2020-07-10 13:31:45 [ INFO]: Retrieving public key for 'PYPI-INTERNAL-MIRROR-TIER-2'... 2020-07-10 13:32:16 [SUCCESS]: [✔] Remote script execution succeeded Code : ProvisioningState/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Enable succeeded: [stdout] 127.0.0.1 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF1HJEMHBy5W1KVe9ZH3ViY04Z+Lt3wKMSHRSCmtYWC6 127.0.0.1 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsOwWoCAjAK+UuZA0fHM0gykeoVeMJNweF87aoJDNr1NPAkzT/seOI76J4wsqZtBVtShjrCUFy90EH1luXO2rtjSAE6X0byewFiVRaSCnp+vYTVQRV6jcZpcm23fvmxuUrxD6pC2vkGQRGeyuiqdwTb8Sww7cpt7yRRb+Qlm3iJJSiXJGFSFnhrfYGwJMrkW41Yn+9dcwpLRNerACaILtlEV7DD0tmsLcFgPgyLzWH7ewbCytzq0+SdVEXNTDKszUoZ7o/WiBwBOBUiAuEAOrzrH8sBehEcp+M/ookns4nHUBY4ZZWvAAyNSno0Egb9ru5vuBgUBcCVYr1pDBGTFp3 127.0.0.1 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBJ/WSDJxzmxYCrtGLV44UkYeMqFVa3zwRlfRakxkh8ZYDnnDv5T1zSeDrnbDISzQphi3kMcRHTGoyLb9eXaVcUw= [stderr] Time : 2020-07-10 13:32:26 [ INFO]: Uploading 'PYPI-INTERNAL-MIRROR-TIER-2' public key to 'PYPI-EXTERNAL-MIRROR-TIER-2'... 2020-07-10 13:32:57 [SUCCESS]: [✔] Remote script execution succeeded Code : ProvisioningState/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Enable succeeded: [stdout] Update known hosts on the external server to allow connections to the internal server... WARNING: /home/mirrordaemon/.ssh/known_hosts.old contains unhashed entries Delete this file to ensure privacy of hostnames /home/mirrordaemon/.ssh/known_hosts updated. Original contents retained as /home/mirrordaemon/.ssh/known_hosts.old |1|0VtoXSS36X2R25DGxZ8XCGJAHjE=|rhlRoiyuSQE6x89Ah9X0i3kAnWs= ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF1HJEMHBy5W1KVe9ZH3ViY04Z+Lt3wKMSHRSCmtYWC6 10.20.2.20 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsOwWoCAjAK+UuZA0fHM0gykeoVeMJNweF87aoJDNr1NPAkzT/seOI76J4wsqZtBVtShjrCUFy90EH1luXO2rtjSAE6X0byewFiVRaSCnp+vYTVQRV6jcZpcm23fvmxuUrxD6pC2vkGQRGeyuiqdwTb8Sww7cpt7yRRb+Qlm3iJJSiXJGFSFnhrfYGwJMrkW41Yn+9dcwpLRNerACaILtlEV7DD0tmsLcFgPgyLzWH7ewbCytzq0+SdVEXNTDKszUoZ7o/WiBwBOBUiAuEAOrzrH8sBehEcp+M/ookns4nHUBY4ZZWvAAyNSno0Egb9ru5vuBgUBcCVYr1pDBGTFp3 10.20.2.20 ecdsa-sha2-nistp256AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBJ/WSDJxzmxYCrtGLV44UkYeMqFVa3zwRlfRakxkh8ZYDnnDv5T1zSeDrnbDISzQphi3kMcRHTGoyLb9eXaVcUw= total 20K drwxr-xr-x 2 mirrordaemon mirrordaemon 4.0K Jul 10 12:32 . drwxr-xr-x 3 mirrordaemon mirrordaemon 4.0K Jul 10 12:24 .. -rw------- 1 mirrordaemon mirrordaemon 1.7K Jul 10 12:24 id_rsa -rw-r--r-- 1 mirrordaemon mirrordaemon 422 Jul 10 12:24 id_rsa.pub -rw------- 1 mirrordaemon mirrordaemon 706 Jul 10 12:32 known_hosts Update known IP addresses on the external server to schedule pushing to the internal server... 10.20.2.20 total 36K drwxr-xr-x 3 mirrordaemon mirrordaemon 4.0K Jul 10 12:32 . drwxr-xr-x 4 root root 4.0K Jul 10 12:22 .. drwxr-xr-x 2 mirrordaemon mirrordaemon 4.0K Jul 10 12:32 .ssh -rw------- 1 mirrordaemon mirrordaemon 11 Jul 10 12:32 internal_mirror_ip_addresses.txt -rw------- 1 mirrordaemon mirrordaemon 20 Jul 10 12:21 package_whitelist.txt -rwx------ 1 mirrordaemon mirrordaemon 1.1K Jul 10 12:21 pull_from_internet.sh -rwx------ 1 mirrordaemon mirrordaemon 105 Jul 10 12:21 pull_then_push.sh -rwx------ 1 mirrordaemon mirrordaemon 1.2K Jul 10 12:21 push_to_internal_mirrors.sh -r-------- 1 mirrordaemon mirrordaemon 1.8K Jul 10 12:21 update_bandersnatch_config.py [stderr] Time : ```Setup_SHM_Package_Mirrors - tier 3
```pwsh 2020-07-10 13:34:55 [SUCCESS]: [✔] Resource group 'RG_SHM_DECOVID_NETWORKING' already exists 2020-07-10 13:34:55 [ INFO]: Ensuring that virtual network 'VNET_SHM_DECOVID_PACKAGE_MIRRORS_TIER3' exists... 2020-07-10 13:34:56 [ INFO]: [ ] Creating virtual network 'VNET_SHM_DECOVID_PACKAGE_MIRRORS_TIER3' 2020-07-10 13:35:00 [SUCCESS]: [✔] Created virtual network 'VNET_SHM_DECOVID_PACKAGE_MIRRORS_TIER3' 2020-07-10 13:35:00 [ INFO]: Ensuring that subnet 'ExternalPackageMirrorsTier3Subnet' exists... 2020-07-10 13:35:01 [ INFO]: [ ] Creating subnet 'ExternalPackageMirrorsTier3Subnet' 2020-07-10 13:35:05 [SUCCESS]: [✔] Created subnet 'ExternalPackageMirrorsTier3Subnet' 2020-07-10 13:35:06 [ INFO]: Ensuring that subnet 'InternalPackageMirrorsTier3Subnet' exists... 2020-07-10 13:35:07 [ INFO]: [ ] Creating subnet 'InternalPackageMirrorsTier3Subnet' 2020-07-10 13:35:11 [SUCCESS]: [✔] Created subnet 'InternalPackageMirrorsTier3Subnet' 2020-07-10 13:35:12 [ INFO]: Ensuring that network security group 'NSG_SHM_DECOVID_EXTERNAL_PACKAGE_MIRRORS_TIER3' exists... 2020-07-10 13:35:13 [ INFO]: [ ] Creating network security group 'NSG_SHM_DECOVID_EXTERNAL_PACKAGE_MIRRORS_TIER3' 2020-07-10 13:35:18 [SUCCESS]: [✔] Created network security group 'NSG_SHM_DECOVID_EXTERNAL_PACKAGE_MIRRORS_TIER3' 2020-07-10 13:35:33 [ INFO]: Ensuring that NSG rule 'RsyncToInternal' exists on 'NSG_SHM_DECOVID_EXTERNAL_PACKAGE_MIRRORS_TIER3'... 2020-07-10 13:35:33 [ INFO]: [ ] Creating NSG rule 'RsyncToInternal' 2020-07-10 13:35:38 [SUCCESS]: [✔] Created NSG rule 'RsyncToInternal' 2020-07-10 13:35:38 [ INFO]: Ensuring that NSG 'NSG_SHM_DECOVID_EXTERNAL_PACKAGE_MIRRORS_TIER3' is attached to subnet 'ExternalPackageMirrorsTier3Subnet'... 2020-07-10 13:35:43 [SUCCESS]: [✔] Set network security group on 'ExternalPackageMirrorsTier3Subnet' 2020-07-10 13:35:43 [SUCCESS]: [✔] Configuring NSG 'NSG_SHM_DECOVID_EXTERNAL_PACKAGE_MIRRORS_TIER3' succeeded 2020-07-10 13:35:43 [ INFO]: Ensuring that network security group 'NSG_SHM_DECOVID_INTERNAL_PACKAGE_MIRRORS_TIER3' exists... 2020-07-10 13:35:43 [ INFO]: [ ] Creating network security group 'NSG_SHM_DECOVID_INTERNAL_PACKAGE_MIRRORS_TIER3' 2020-07-10 13:35:48 [SUCCESS]: [✔] Created network security group 'NSG_SHM_DECOVID_INTERNAL_PACKAGE_MIRRORS_TIER3' 2020-07-10 13:36:08 [ INFO]: Ensuring that NSG 'NSG_SHM_DECOVID_INTERNAL_PACKAGE_MIRRORS_TIER3' is attached to subnet 'InternalPackageMirrorsTier3Subnet'... 2020-07-10 13:36:14 [SUCCESS]: [✔] Set network security group on 'InternalPackageMirrorsTier3Subnet' 2020-07-10 13:36:14 [SUCCESS]: [✔] Configuring NSG 'NSG_SHM_DECOVID_INTERNAL_PACKAGE_MIRRORS_TIER3' succeeded 2020-07-10 13:36:14 [ INFO]: Ensuring that storage account 'shmdecovidbootdiagsoceuy' exists in 'RG_SHM_DECOVID_ARTIFACTS'... 2020-07-10 13:36:15 [SUCCESS]: [✔] Storage account 'shmdecovidbootdiagsoceuy' already exists 2020-07-10 13:36:17 [ INFO]: Ensuring that VM network card 'CRAN-EXTERNAL-MIRROR-TIER-3-NIC' exists... 2020-07-10 13:36:17 [ INFO]: [ ] Creating VM network card 'CRAN-EXTERNAL-MIRROR-TIER-3-NIC' 2020-07-10 13:36:19 [SUCCESS]: [✔] Created VM network card 'CRAN-EXTERNAL-MIRROR-TIER-3-NIC' 2020-07-10 13:36:19 [ INFO]: Ensuring that managed disk 'CRAN-EXTERNAL-MIRROR-TIER-3-DATA-DISK' exists... 2020-07-10 13:36:20 [ INFO]: [ ] Creating 31 GB managed disk 'CRAN-EXTERNAL-MIRROR-TIER-3-DATA-DISK' 2020-07-10 13:36:23 [SUCCESS]: [✔] Created managed disk 'CRAN-EXTERNAL-MIRROR-TIER-3-DATA-DISK' 2020-07-10 13:36:23 [ INFO]: Temporarily allowing outbound internet access from 10.20.3.5 on ports 80, 443 and 3128 2020-07-10 13:36:36 [ INFO]: Ensuring that virtual machine 'CRAN-EXTERNAL-MIRROR-TIER-3' exists... 2020-07-10 13:36:41 [ INFO]: [ ] Creating virtual machine 'CRAN-EXTERNAL-MIRROR-TIER-3' 2020-07-10 13:38:03 [SUCCESS]: [✔] Created virtual machine 'CRAN-EXTERNAL-MIRROR-TIER-3' 2020-07-10 13:38:33 [ INFO]: Waiting for cloud-init provisioning to finish for CRAN-EXTERNAL-MIRROR-TIER-3... 2020-07-10 13:38:33 [SUCCESS]: [✔] Cloud-init provisioning is finished for CRAN-EXTERNAL-MIRROR-TIER-3 2020-07-10 13:38:33 [ INFO]: Disabling outbound internet access from 10.20.3.5 and restarting VM: 'CRAN-EXTERNAL-MIRROR-TIER-3'... 2020-07-10 13:38:38 [SUCCESS]: [✔] Configuring VM 'CRAN-EXTERNAL-MIRROR-TIER-3' succeeded 2020-07-10 13:38:39 [ INFO]: [ ] (Re)starting VM 'CRAN-EXTERNAL-MIRROR-TIER-3' [PowerState/stopped] 2020-07-10 13:38:50 [SUCCESS]: [✔] Successfully (re)started 'CRAN-EXTERNAL-MIRROR-TIER-3' [PowerState/running] 2020-07-10 13:39:21 [SUCCESS]: [✔] Remote script execution succeeded 2020-07-10 13:39:31 [SUCCESS]: [✔] Fetching ssh key from external package mirror succeeded 2020-07-10 13:39:32 [ INFO]: Ensuring that VM network card 'CRAN-INTERNAL-MIRROR-TIER-3-NIC' exists... 2020-07-10 13:39:33 [ INFO]: [ ] Creating VM network card 'CRAN-INTERNAL-MIRROR-TIER-3-NIC' 2020-07-10 13:39:34 [SUCCESS]: [✔] Created VM network card 'CRAN-INTERNAL-MIRROR-TIER-3-NIC' 2020-07-10 13:39:34 [ INFO]: Ensuring that managed disk 'CRAN-INTERNAL-MIRROR-TIER-3-DATA-DISK' exists... 2020-07-10 13:39:35 [ INFO]: [ ] Creating 31 GB managed disk 'CRAN-INTERNAL-MIRROR-TIER-3-DATA-DISK' 2020-07-10 13:39:39 [SUCCESS]: [✔] Created managed disk 'CRAN-INTERNAL-MIRROR-TIER-3-DATA-DISK' 2020-07-10 13:39:40 [ INFO]: Temporarily allowing outbound internet access from 10.20.3.21 on ports 80, 443 and 3128 2020-07-10 13:39:50 [ INFO]: Ensuring that virtual machine 'CRAN-INTERNAL-MIRROR-TIER-3' exists... 2020-07-10 13:39:55 [ INFO]: [ ] Creating virtual machine 'CRAN-INTERNAL-MIRROR-TIER-3' 2020-07-10 13:41:16 [SUCCESS]: [✔] Created virtual machine 'CRAN-INTERNAL-MIRROR-TIER-3' 2020-07-10 13:41:46 [ INFO]: Waiting for cloud-init provisioning to finish for CRAN-INTERNAL-MIRROR-TIER-3... 2020-07-10 13:43:38 [SUCCESS]: [✔] Remote script execution succeeded Code : ProvisioningState/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Enable succeeded: [stdout] 127.0.0.1 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsOk4WHXiJbEUKJUw+cUB1V328YmXDSyW2DWA5JiSeJhiw9hOMr4XB4BY415rZTCYX61kYfmi4ttFJlgXojt5DOgItwBgwJctVnW4wOBrRbdfcmRJV5UfD85IeMj6wz7gUAJrlUTjW9wAjOHXiBJJVhPKoggKdvW+pciHHqCjIaUhY6+R0m3lepa1pJx0UgMKbLWNHWxbvOWxaZzOP2w17SChZ15rDU+3xScKur0yiNHdDEHMMg+RzXfnLBU26JIANZmixplqM/1rguYT2jNnN7yux4p3ntGcwnrkH6awJbaZ6jI9Zps19J1E/QlXROf9LF7JnhpsnIRzh89WSsfC1 127.0.0.1 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPSiv+k7eTfkUbBKuQGeeQGygZlQ6bgbYBGffuSlFbDp 127.0.0.1 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBAtz7DMwXBrYhtExpUXiwTLVyIrex1/rKE0UyJJD7HWbv+eHEyM2bB1Unx38hkXrnJ53DJ9RKtRCahjRABPQBhU= [stderr] Time : 2020-07-10 13:43:49 [ INFO]: Uploading 'CRAN-INTERNAL-MIRROR-TIER-3' public key to 'CRAN-EXTERNAL-MIRROR-TIER-3'... 2020-07-10 13:44:20 [SUCCESS]: [✔] Remote script execution succeeded Code : ProvisioningState/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Enable succeeded: [stdout] Update known hosts on the external server to allow connections to the internal server... WARNING: /home/mirrordaemon/.ssh/known_hosts.old contains unhashed entries Delete this file to ensure privacy of hostnames /home/mirrordaemon/.ssh/known_hosts updated. Original contents retained as /home/mirrordaemon/.ssh/known_hosts.old |1|CegNEc7Vnldc3e8ao7FNAAyd5Qo=|/bSxsJSNhSJElt23oO1xgIjMWi4= ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsOk4WHXiJbEUKJUw+cUB1V328YmXDSyW2DWA5JiSeJhiw9hOMr4XB4BY415rZTCYX61kYfmi4ttFJlgXojt5DOgItwBgwJctVnW4wOBrRbdfcmRJV5UfD85IeMj6wz7gUAJrlUTjW9wAjOHXiBJJVhPKoggKdvW+pciHHqCjIaUhY6+R0m3lepa1pJx0UgMKbLWNHWxbvOWxaZzOP2w17SChZ15rDU+3xScKur0yiNHdDEHMMg+RzXfnLBU26JIANZmixplqM/1rguYT2jNnN7yux4p3ntGcwnrkH6awJbaZ6jI9Zps19J1E/QlXROf9LF7JnhpsnIRzh89WSsfC1 10.20.3.21 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPSiv+k7eTfkUbBKuQGeeQGygZlQ6bgbYBGffuSlFbDp 10.20.3.21 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBAtz7DMwXBrYhtExpUXiwTLVyIrex1/rKE0UyJJD7HWbv+eHEyM2bB1Unx38hkXrnJ53DJ9RKtRCahjRABPQBhU= total 20K drwxr-xr-x 2 mirrordaemon mirrordaemon 4.0K Jul 10 12:43 . drwxr-xr-x 3 mirrordaemon mirrordaemon 4.0K Jul 10 12:38 .. -rw------- 1 mirrordaemon mirrordaemon 1.7K Jul 10 12:38 id_rsa -rw-r--r-- 1 mirrordaemon mirrordaemon 422 Jul 10 12:38 id_rsa.pub -rw------- 1 mirrordaemon mirrordaemon 706 Jul 10 12:43 known_hosts Update known IP addresses on the external server to schedule pushing to the internal server... 10.20.3.21 total 40K drwxr-xr-x 3 mirrordaemon mirrordaemon 4.0K Jul 10 12:43 . drwxr-xr-x 4 root root 4.0K Jul 10 12:37 .. drwxr-xr-x 2 mirrordaemon mirrordaemon 4.0K Jul 10 12:43 .ssh -rw------- 1 mirrordaemon mirrordaemon 11 Jul 10 12:43 internal_mirror_ip_addresses.txt -rw------- 1 mirrordaemon mirrordaemon 12K Jul 10 12:37 package_whitelist.txt -rwx------ 1 mirrordaemon mirrordaemon 3.0K Jul 10 12:37 pull_from_internet.sh -rwx------ 1 mirrordaemon mirrordaemon 105 Jul 10 12:37 pull_then_push.sh -rwx------ 1 mirrordaemon mirrordaemon 1.2K Jul 10 12:37 push_to_internal_mirrors.sh [stderr] Time : 2020-07-10 13:44:31 [ INFO]: Ensuring that VM network card 'PYPI-EXTERNAL-MIRROR-TIER-3-NIC' exists... 2020-07-10 13:44:32 [ INFO]: [ ] Creating VM network card 'PYPI-EXTERNAL-MIRROR-TIER-3-NIC' 2020-07-10 13:44:33 [SUCCESS]: [✔] Created VM network card 'PYPI-EXTERNAL-MIRROR-TIER-3-NIC' 2020-07-10 13:44:33 [ INFO]: Ensuring that managed disk 'PYPI-EXTERNAL-MIRROR-TIER-3-DATA-DISK' exists... 2020-07-10 13:44:34 [ INFO]: [ ] Creating 511 GB managed disk 'PYPI-EXTERNAL-MIRROR-TIER-3-DATA-DISK' 2020-07-10 13:44:38 [SUCCESS]: [✔] Created managed disk 'PYPI-EXTERNAL-MIRROR-TIER-3-DATA-DISK' 2020-07-10 13:44:39 [ INFO]: Temporarily allowing outbound internet access from 10.20.3.4 on ports 80, 443 and 3128 2020-07-10 13:44:50 [ INFO]: Ensuring that virtual machine 'PYPI-EXTERNAL-MIRROR-TIER-3' exists... 2020-07-10 13:44:56 [ INFO]: [ ] Creating virtual machine 'PYPI-EXTERNAL-MIRROR-TIER-3' 2020-07-10 13:46:17 [SUCCESS]: [✔] Created virtual machine 'PYPI-EXTERNAL-MIRROR-TIER-3' 2020-07-10 13:46:47 [ INFO]: Waiting for cloud-init provisioning to finish for PYPI-EXTERNAL-MIRROR-TIER-3... 2020-07-10 13:48:47 [SUCCESS]: [✔] Cloud-init provisioning is finished for PYPI-EXTERNAL-MIRROR-TIER-3 2020-07-10 13:48:47 [ INFO]: Disabling outbound internet access from 10.20.3.4 and restarting VM: 'PYPI-EXTERNAL-MIRROR-TIER-3'... 2020-07-10 13:48:51 [SUCCESS]: [✔] Configuring VM 'PYPI-EXTERNAL-MIRROR-TIER-3' succeeded 2020-07-10 13:48:52 [ INFO]: [ ] (Re)starting VM 'PYPI-EXTERNAL-MIRROR-TIER-3' [PowerState/stopped] 2020-07-10 13:49:03 [SUCCESS]: [✔] Successfully (re)started 'PYPI-EXTERNAL-MIRROR-TIER-3' [PowerState/running] 2020-07-10 13:49:34 [SUCCESS]: [✔] Remote script execution succeeded 2020-07-10 13:49:44 [SUCCESS]: [✔] Fetching ssh key from external package mirror succeeded 2020-07-10 13:49:45 [ INFO]: Ensuring that VM network card 'PYPI-INTERNAL-MIRROR-TIER-3-NIC' exists... 2020-07-10 13:49:45 [ INFO]: [ ] Creating VM network card 'PYPI-INTERNAL-MIRROR-TIER-3-NIC' 2020-07-10 13:49:47 [SUCCESS]: [✔] Created VM network card 'PYPI-INTERNAL-MIRROR-TIER-3-NIC' 2020-07-10 13:49:47 [ INFO]: Ensuring that managed disk 'PYPI-INTERNAL-MIRROR-TIER-3-DATA-DISK' exists... 2020-07-10 13:49:48 [ INFO]: [ ] Creating 511 GB managed disk 'PYPI-INTERNAL-MIRROR-TIER-3-DATA-DISK' 2020-07-10 13:49:51 [SUCCESS]: [✔] Created managed disk 'PYPI-INTERNAL-MIRROR-TIER-3-DATA-DISK' 2020-07-10 13:49:52 [ INFO]: Temporarily allowing outbound internet access from 10.20.3.20 on ports 80, 443 and 3128 2020-07-10 13:50:03 [ INFO]: Ensuring that virtual machine 'PYPI-INTERNAL-MIRROR-TIER-3' exists... 2020-07-10 13:50:07 [ INFO]: [ ] Creating virtual machine 'PYPI-INTERNAL-MIRROR-TIER-3' 2020-07-10 13:51:29 [SUCCESS]: [✔] Created virtual machine 'PYPI-INTERNAL-MIRROR-TIER-3' 2020-07-10 13:51:59 [ INFO]: Waiting for cloud-init provisioning to finish for PYPI-INTERNAL-MIRROR-TIER-3... 2020-07-10 13:54:45 [SUCCESS]: [✔] Cloud-init provisioning is finished for PYPI-INTERNAL-MIRROR-TIER-3 2020-07-10 13:54:45 [ INFO]: Disabling outbound internet access from 10.20.3.20 and restarting VM: 'PYPI-INTERNAL-MIRROR-TIER-3'... 2020-07-10 13:54:50 [SUCCESS]: [✔] Configuring VM 'PYPI-INTERNAL-MIRROR-TIER-3' succeeded 2020-07-10 13:54:50 [ INFO]: [ ] (Re)starting VM 'PYPI-INTERNAL-MIRROR-TIER-3' [PowerState/stopped] 2020-07-10 13:55:02 [SUCCESS]: [✔] Successfully (re)started 'PYPI-INTERNAL-MIRROR-TIER-3' [PowerState/running] 2020-07-10 13:55:02 [ INFO]: Ensuring that 'PYPI-INTERNAL-MIRROR-TIER-3' can accept connections from the external mirror... 2020-07-10 13:55:02 [ INFO]: Retrieving public key for 'PYPI-INTERNAL-MIRROR-TIER-3'... 2020-07-10 13:55:32 [SUCCESS]: [✔] Remote script execution succeeded Code : ProvisioningState/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Enable succeeded: [stdout] 127.0.0.1 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCFzO/47bNQtPThU/xf59E5QGKNR3Y+3HQ+35cijlj8h/J7GuJZcZSY5dN2ISev2SyZRDa/O73UWGIK8TiZhY44= 127.0.0.1 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbjF+b3LyWTwlpI6ONf9IfK9f/owxuZ3ZnfaHUjFW6krrbmMGgAz3jWDK5Z8IhVHz2qxpA+DnERjjGTTHgTulq8krF5qeBiyvBZwm6SLEXX23JEiKsAoHrOaF24F9zwNV7ZD2o/SIXDo8c3XrDptjH3KRZDdsYVhucTqmz22QAGlkoiaBtWNgCWx1B4utrEmD8N8praf7bRAWF1rZT+eFaptkMS0vSt3nTBy5q9YiscZsozyXm89g0t7i60is5/2u55QQWsVFp1OuGso6hPdRTeoVrhP5yha1QliZB1tRQLxUeC7HcImIe9Gt1eTHe0vkCxAj3CRWWV9iiAN23aF7d 127.0.0.1 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINrvTufsc1OlwC6ST51Z7rHQxcuEFdkvoeL/YqH4lGaF [stderr] Time : 2020-07-10 13:55:42 [ INFO]: Uploading 'PYPI-INTERNAL-MIRROR-TIER-3' public key to 'PYPI-EXTERNAL-MIRROR-TIER-3'... 2020-07-10 13:56:13 [SUCCESS]: [✔] Remote script execution succeeded Code : ProvisioningState/succeeded Level : Info DisplayStatus : Provisioning succeeded Message : Enable succeeded: [stdout] Update known hosts on the external server to allow connections to the internal server... WARNING: /home/mirrordaemon/.ssh/known_hosts.old contains unhashed entries Delete this file to ensure privacy of hostnames /home/mirrordaemon/.ssh/known_hosts updated. Original contents retained as /home/mirrordaemon/.ssh/known_hosts.old |1|jIPttLzVI89RF219QJCVjOrjwOE=|Qhq93Bb25mB3CdjQ8LbNJlzUjMc= ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCFzO/47bNQtPThU/xf59E5QGKNR3Y+3HQ+35cijlj8h/J7GuJZcZSY5dN2ISev2SyZRDa/O73UWGIK8TiZhY44= 10.20.3.20 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbjF+b3LyWTwlpI6ONf9IfK9f/owxuZ3ZnfaHUjFW6krrbmMGgAz3jWDK5Z8IhVHz2qxpA+DnERjjGTTHgTulq8krF5qeBiyvBZwm6SLEXX23JEiKsAoHrOaF24F9zwNV7ZD2o/SIXDo8c3XrDptjH3KRZDdsYVhucTqmz22QAGlkoiaBtWNgCWx1B4utrEmD8N8praf7bRAWF1rZT+eFaptkMS0vSt3nTBy5q9YiscZsozyXm89g0t7i60is5/2u55QQWsVFp1OuGso6hPdRTeoVrhP5yha1QliZB1tRQLxUeC7HcImIe9Gt1eTHe0vkCxAj3CRWWV9iiAN23aF7d 10.20.3.20 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINrvTufsc1OlwC6ST51Z7rHQxcuEFdkvoeL/YqH4lGaF total 20K drwxr-xr-x 2 mirrordaemon mirrordaemon 4.0K Jul 10 12:55 . drwxr-xr-x 3 mirrordaemon mirrordaemon 4.0K Jul 10 12:48 .. -rw------- 1 mirrordaemon mirrordaemon 1.7K Jul 10 12:48 id_rsa -rw-r--r-- 1 mirrordaemon mirrordaemon 422 Jul 10 12:48 id_rsa.pub -rw------- 1 mirrordaemon mirrordaemon 706 Jul 10 12:55 known_hosts Update known IP addresses on the external server to schedule pushing to the internal server... 10.20.3.20 total 40K drwxr-xr-x 3 mirrordaemon mirrordaemon 4.0K Jul 10 12:55 . drwxr-xr-x 4 root root 4.0K Jul 10 12:46 .. drwxr-xr-x 2 mirrordaemon mirrordaemon 4.0K Jul 10 12:55 .ssh -rw------- 1 mirrordaemon mirrordaemon 11 Jul 10 12:55 internal_mirror_ip_addresses.txt -rw------- 1 mirrordaemon mirrordaemon 5.6K Jul 10 12:45 package_whitelist.txt -rwx------ 1 mirrordaemon mirrordaemon 1.1K Jul 10 12:45 pull_from_internet.sh -rwx------ 1 mirrordaemon mirrordaemon 105 Jul 10 12:45 pull_then_push.sh -rwx------ 1 mirrordaemon mirrordaemon 1.2K Jul 10 12:45 push_to_internal_mirrors.sh -r-------- 1 mirrordaemon mirrordaemon 1.8K Jul 10 12:45 update_bandersnatch_config.py [stderr] Time : ```