search

crc-org / crc

CRC is a tool to help you run containers. It manages a local OpenShift 4.x cluster, Microshift or a Podman VM optimized for testing and development purposes
https://crc.dev
Apache License 2.0
1.25k stars 236 forks source link

Win10 Enterprise start problems when PowerShell runs in ConstrainedLanguage mode. #1010

Closed os-learner closed 4 years ago

os-learner commented 4 years ago

General information

CRC version

# Put the output of `crc version`

crc version: 1.5.0+e1c8fb8 OpenShift version: 4.2.14 (embedded in binary)

CRC status

# Put the output of `crc status`

crc status Machine 'crc' does not exist. Use 'crc start' to create it.

CRC config

# Put the output of `crc config view`

crc config view

Host Operating System

# Put the output of `cat /etc/os-release` in case of Linux
# put the output of `sw_vers` in case of Mac
# Put the output of `systeminfo` in case of Windows

systeminfo

Host Name: XXXXXXXXXXXXXX OS Name: Microsoft Windows 10 Enterprise OS Version: 10.0.17763 N/A Build 17763 OS Manufacturer: Microsoft Corporation OS Configuration: Member Workstation OS Build Type: Multiprocessor Free Registered Owner: Windows User Registered Organization: XXXXXXXXXXX Product ID: XXXXXXXXXXXXXXXXX Original Install Date: 12/19/2019, 5:24:07 PM System Boot Time: 2/12/2020, 8:17:50 AM System Manufacturer: LENOVO System Model: XXXXXXXXXXXX System Type: x64-based PC Processor(s): 1 Processor(s) Installed. 01: Intel64 Family 6 Model 142 Stepping 10 GenuineIntel ~1696 Mhz BIOS Version: LENOVO N25ET51W (1.37 ), 10/30/2019 Windows Directory: C:\windows System Directory: C:\windows\system32 Boot Device: \Device\HarddiskVolume1 System Locale: en-us;English (United States) Input Locale: en-us;English (United States) Time Zone: (UTC-05:00) Eastern Time (US & Canada) Total Physical Memory: 16,218 MB Available Physical Memory: 7,597 MB Virtual Memory: Max Size: 19,802 MB Virtual Memory: Available: 9,693 MB Virtual Memory: In Use: 10,109 MB Page File Location(s): C:\pagefile.sys Domain: XXXXXXXXXXXXX Logon Server: XXXXXXXXXXXXXXXX Hotfix(s): 7 Hotfix(s) Installed.

                       [02]: KB4465065
                       [03]: KB4470788
                       [04]: KB4489907
                       [05]: KB4516115
                       [06]: KB4523204
                       [07]: KB4534273

Network Card(s): 8 NIC(s) Installed. 01: Intel(R) Ethernet Connection (4) I219-LM Connection Name: Ethernet Status: Media disconnected [02]: Intel(R) Dual Band Wireless-AC 8265 Connection Name: Wi-Fi Status: Media disconnected [03]: Bluetooth Device (Personal Area Network) Connection Name: Bluetooth Network Connection Status: Media disconnected [04]: ThinkPad USB-C Dock Gen2 Ethernet Connection Name: Ethernet 3 DHCP Enabled: No IP address(es) [05]: Fortinet Virtual Ethernet Adapter (NDIS 6.30) Connection Name: Ethernet 4 Status: Media disconnected [06]: Fortinet SSL VPN Virtual Ethernet Adapter Connection Name: Ethernet 5 DHCP Enabled: No IP address(es)

                       [07]: Hyper-V Virtual Ethernet Adapter
                             Connection Name: vEthernet (Default Switch)
                             Status:          Media disconnected
                       [08]: Hyper-V Virtual Ethernet Adapter
                             Connection Name: vEthernet (Default Switch) 2
                             DHCP Enabled:    No
                             IP address(es)

Hyper-V Requirements: A hypervisor has been detected. Features required for Hyper-V will not be displayed.

Steps to reproduce

  1. crc start --log-level debug

Expected

Successful install of CRC.

Actual

ERRO Error creating host: Error creating the VM: Error with pre-create check: "exit status 1"

Logs

You can start crc with crc start --log-level debug to collect logs. Please consider posting this on http://gist.github.com/ and post the link in the issue. https://gist.github.com/os-learner/2f16efe13bd82d2cbe1c60b661ca8ebe#file-crcstart-log

os-learner commented 4 years ago

Installing Code Ready containers on Windows is not working. In our organization, normal users have GPO enforced not to install any programs on their PC's. Only admin user have access. When I run crc setup as a normal user, it was throwing error messages. I used the config switch to skip check-hyperv-switch and check-user-in-hyperv-group. Setup finished with warnings. When I try to install, I get the message in debug mode, MethodInvocationNotSupportedInConstarainedLangauge.

It seems when I open powershell as normal user and check execution context using the following command, $ExecutionContext.SessionState.LanguageMode, output shows ConstrainedLanguage and if I execute the same command using administrator, I get FullLanguage.

I don't think I can change temporarily LanguageMode to "FullLanguage" as it is enforced by GPO. Any ideas to setup Code Ready containers in an organization where normal user is locked out or constrained. Thanks in Advance.

istyf commented 4 years ago

I have had the same issue in a constrained environment and therefore assume that your environment is protected by AppLocker, that has a policy to only allow certain PowerShell scripts. If that is the case, the issue is that PS tries to determine AppLocker lockdown mode by creating and attempting to run scripts in appdata\local\temp. You will have to ask the admins to allow those specific scripts to be run, to make the problem go away.

See details here: https://deploymentresearch.com/psscriptpolicytest-script-gets-blocked-by-applocker-in-the-event-log-why-and-what-are-those-files/

gbraad commented 4 years ago

we do not support ConstrainedLanguage mode at this moment. This likely needs to be checked for and/or added to the Known Issues

os-learner commented 4 years ago

What is the work around for me to install Code Ready containers?

gbraad commented 4 years ago

Workaround has been provided by the previous poster; Ask your administrator to remove the constraint and allow FullLanguage mode

On Fri, Feb 14, 2020 at 10:12 PM os-learner notifications@github.com wrote:

Gerard, Thanks for the reply. What is the work around for me to install Code Ready containers? Chandra

From: Gerard Braad notifications@github.com Sent: Thursday, February 13, 2020 11:39 PM To: code-ready/crc crc@noreply.github.com Cc: Oruganty, Chandrasekhar oruganty@isc.upenn.edu; Author < author@noreply.github.com> Subject: Re: [code-ready/crc] Win10 Enterprise start problems when PowerShell runs in ConstrainedLanguage mode. (#1010)

we do not support ConstrainedLanguage mode at this moment. This likely needs to be checked for and/or added to the Known Issues

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub< https://github.com/code-ready/crc/issues/1010?email_source=notifications&email_token=AORQHCZUOX7GTLU6AGUEL5LRCYN77A5CNFSM4KUTLSNKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOELXRQDQ#issuecomment-586094606>, or unsubscribe< https://github.com/notifications/unsubscribe-auth/AORQHC6J3JGIWICIUIVUJL3RCYN77ANCNFSM4KUTLSNA>.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/code-ready/crc/issues/1010?email_source=notifications&email_token=AAAAOZW4L7Q3JOLSSWZINNLRC2RGLA5CNFSM4KUTLSNKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOELZE3GA#issuecomment-586304920, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAAAOZQ6UBRIBNFNYMO4DUTRC2RGLANCNFSM4KUTLSNA .

--

Gerard Braad | http://gbraad.nl [ Doing Open Source Matters ]

stale[bot] commented 4 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.