PowerShell Package Management for the Enterprise Kirk Aleksandar m

Technical Product Manager *Px modules, pull requests, and more Almost 19 years working professionally with technology 8-Time PowerShell MVP World’s first self- proclaimed Poshoholic Shédiac, NB, Canada Kirk Munro

Freelance PowerShell and Azure trainer PowerShell Azure  A cup of tea Microsoft MVP Serbia Aleksandar Nikolić

DISCLAIMER PowerShell Package Management is still very, very new

Let’s talk about OneGetLet’s talk about OneGet

OneGet is… …a package management aggregator …an open source project on GitHubopen source project It consists of… …a core API for software discovery, installation and inventory (SDII) …a PowerShell module that wraps the core API …a collection of package managers OneGet

…is now called PackageManagement …because lawyers were asked if the name was ok …and of course they found a reason for it not to be …and MS Pac Man didn’t fly as an alternative

PackageManagement is… …a package manager aggregator (a meta- manager) …an open source project on GitHub (where it is still called OneGet)open source project …available natively in PSv5 and in preview for PSv3 and PSv4preview for PSv3 and PSv4 It consists of… …a core API for software discovery, installation and inventory (SDII) …a PowerShell module that wraps the core API …a collection of package managers PackageManagement

What Package Managers are available?

Included in OneGet MSI MSU Programs (Add/remove programs, remove only for now) BootStrap (not visible, for automation only) Also available NuGet (bootstrapped off the web) Chocolatey (included with NuGet) PSModule (installed with PowerShellGet) Gist Cygwin Package Managers (aka Package Providers)

Future Package Managers (ideas/wishlist) Windows Update (WSUS catalog, Windows Update and Microsoft Update) Windows Store Ruby Gems Node’s NPM Perl’s CPAN Python VSIX AppV WebPI SCCM Windows Features and many more…

Demo PackageManagement

What is PowerShellGet?What is PowerShellGet?

PowerShellGet PowerShellGet is a module that depends on (and ships with) PackageManagement It consists of a Package Manager (provider) and a PowerShell module that provides a provider-specific set of commands

Demo PowerShellGet

Strategies in PowerShell Package Management

Use code signing Use source control (git/GitHub work very, very well) Work with unsigned script files day-to-day Sign files only when you publish a release Place signed release versions on a separate branch in source control Build an automated publishing pipeline

Why PowerShell Package Management for the Enterprise?

Usability Control what modules are available Control where modules are made available from Set up an Enterprise repository that offers only approved/verified scripts and modules Security Control what scripts users can run Leverage features like AppLocker and/or Device Guard to provide security over scripts and modules AppLockerDevice Guard PowerShell Package Management for the Enterprise

Options for Enterprise PowerShellGet repositories UNC share Pros: on premises, trivial to set up Cons: lacking features available in full repositories (UI, branding, tags, etc.) Local NuGet installation Pros: on premises, feature rich, open source, brandable and fully customizable Cons: much more complicated to set up initially (for now)

Options for Enterprise PowerShellGet repositories ProGet Pros: on premises, commercially developed, free tier available Cons: paid tiers required for larger teams/enterprises, may be more than necessary for PowerShell Package Management MyGet Pros: commercially developed, free tier available (open source only) Cons: paid tiers required for closed source projects, hosted servers not allowed in some enterprise environments, may be more than necessary for PowerShell Package Management

Demo Setting up a local PowerShellGet repository

Evaluations: Please provide session feedback by clicking the EVAL button in the scheduler app (also download slides). One lucky winner will receive a free ticket to the next MMS! Session Title: Discuss… Ask your questions-real world answers! Plenty of time to engage, share knowledge. SPONSORS