windows - Terraform 脚本 Windows 模块设置帐户锁定策略和最小密码长度 Azure
问题描述
我正在研究 Azure Terraform 脚本,最近在 windows 启动时安装了 windows 模块,默认情况下没有设置帐户锁定策略和最小密码长度策略,有什么方法可以在 windows 模块的 terraform 脚本中定义。谢谢。
resource "azurerm_virtual_machine_extension" "vm" {
name = var.vm_hostname
count = (var.is_windows_image || contains(list(var.vm_os_simple, var.vm_os_offer), "WindowsServer")) ? var.nb_instances : 0
virtual_machine_id = azurerm_virtual_machine.vm-windows[count.index].id
publisher = "Microsoft.Azure.Extensions"
type = "CustomScript"
type_handler_version = "2.0"
settings = <<SETTINGS
{
"commandToExecute": "net accounts /minpwlen:8 && net accounts /maxpwage:45 && net accounts /minpwage:0 && net accounts /lockoutduration:30 && net accounts /lockoutthreshold:3 "
}
SETTINGS
}
我得到了错误。
module.windowsservers.azurerm_virtual_machine_extension.vm[0]: Still creating... [10s elapsed]
module.windowsservers.azurerm_virtual_machine_extension.vm[0]: Still creating... [20s elapsed]
module.windowsservers.azurerm_virtual_machine_extension.vm[0]: Still creating... [30s elapsed]
module.windowsservers.azurerm_virtual_machine_extension.vm[0]: Still creating... [40s elapsed]
module.windowsservers.azurerm_virtual_machine_extension.vm[0]: Still creating... [50s elapsed]
module.windowsservers.azurerm_virtual_machine_extension.vm[0]: Still creating... [1m0s elapsed]
Error: Code="VMExtensionProvisioningError" Message="VM has reported a failure when processing extension '`HOSTNAME'. Error message: \"Extension '' of Handler 'Microsoft.Azure.Extensions.CustomScript' version '1.0' faulted due to exception during extension processing\"\r\n\r\nMore information on troubleshooting is available at https://aka.ms/VMExtensionCSELinuxTroubleshoot "
on ..\..\modules\windowsservers\main.tf line 194, in resource "azurerm_virtual_machine_extension" "vm":
194: resource "azurerm_virtual_machine_extension" "vm" {
解决方案
resource "azurerm_virtual_machine_extension" "vm" {
name = "${var.vm_hostname}-${count.index}"
count = (var.is_windows_image || contains(list(var.vm_os_simple, var.vm_os_offer), "WindowsServer")) ? var.nb_instances : 0
virtual_machine_id = azurerm_virtual_machine.vm-windows[count.index].id
publisher = "Microsoft.Compute"
type = "CustomScriptExtension"
type_handler_version = "1.9"
settings = <<SETTINGS
{
"commandToExecute": "powershell -ExecutionPolicy Unrestricted -Command net accounts /minpwlen:8 && net accounts /maxpwage:45 && net accounts /minpwage:0 && net accounts /lockoutduration:30 && net accounts /lockoutthreshold:3 "
}
SETTINGS
}
这是解决我的问题的一段代码,我一直在做的这个错误是使用了错误的扩展名,该扩展名用于 Linux 正确的扩展名,代码粘贴在这里。
推荐阅读
- amazon-web-services - Lambda 函数的 AWS 安全组规则
- r - 如何在数据框中选择两个所需的列来构建 svm 模型?
- android - 在 Volley 中传递 Edittext 值以获取请求 URL
- c# - 显式流上传文件到谷歌驱动器
- php - php到mysql数据检索
- ios - 函数在签入 if 语句 Swift 后跳转 else 语句
- asp.net - 无法检索“DataSet1”数据集的数据
- excel - 将多个单元格复制/粘贴到 excel 列中时识别重复项
- android - 上下文操作模式删除侧边栏 onClick() :webview
- maven - 将“非 D”参数传递给 jenkins maven 构建步骤