b5b644a360
- Restore-CMM: drop the skip-on-doda gate. DODA bays now restore the config-version PC-DMIS + goCMM settings like any other bay (they have backups now; DODA itself installs separately to C:\Apps\DODA and is unaffected). - sync-cmm-backups.sh: update the stale "do not back up DODA bays" note. - Install-DODA.ps1: grant Users + Authenticated Users Full on the WHOLE C:\Apps\DODA (was PreProcess only) - DODA writes output/temp throughout the folder as the locked-down operator. /T covers PreProcess. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
60 lines
2.4 KiB
PowerShell
60 lines
2.4 KiB
PowerShell
# Install-DODA.ps1 - Extract DODA zip to C:\Apps\DODA\.
|
|
#
|
|
# Called by Install-FromManifest as a Type=PS1 entry. The zip is staged
|
|
# alongside this script in C:\CMM-Install\ by startnet.cmd.
|
|
|
|
$ErrorActionPreference = 'Continue'
|
|
|
|
$installDir = 'C:\Apps\DODA'
|
|
$zipPattern = 'doda_build*.zip'
|
|
$stagingRoot = Split-Path $PSScriptRoot -ErrorAction SilentlyContinue
|
|
if (-not $stagingRoot) { $stagingRoot = 'C:\CMM-Install' }
|
|
|
|
$zip = Get-ChildItem -Path $stagingRoot -Filter $zipPattern -File -ErrorAction SilentlyContinue | Select-Object -First 1
|
|
if (-not $zip) {
|
|
Write-Host "DODA zip not found in $stagingRoot (pattern: $zipPattern)"
|
|
exit 1
|
|
}
|
|
|
|
if (-not (Test-Path $installDir)) {
|
|
New-Item -Path $installDir -ItemType Directory -Force | Out-Null
|
|
}
|
|
|
|
Write-Host "Extracting $($zip.Name) to $installDir..."
|
|
try {
|
|
Expand-Archive -LiteralPath $zip.FullName -DestinationPath $installDir -Force -ErrorAction Stop
|
|
Write-Host "DODA extracted to $installDir"
|
|
} catch {
|
|
Write-Host "ERROR: Extract failed - $_"
|
|
exit 1
|
|
}
|
|
|
|
# MergeFiles.exe (cmm-utilities toolchain) reads C:\Apps\DODA\PreProcess\ as
|
|
# its working dir. The DODA zip extracts flat without it, so create it here -
|
|
# a missing PreProcess dir is the known cause of MergeFiles.GetDoDAFolder
|
|
# throwing DirectoryNotFoundException (see cmm-utilities dotNET event.txt).
|
|
$preProcess = Join-Path $installDir 'PreProcess'
|
|
if (-not (Test-Path $preProcess)) {
|
|
New-Item -Path $preProcess -ItemType Directory -Force | Out-Null
|
|
Write-Host "Created $preProcess"
|
|
}
|
|
|
|
# DODA runs as the LOCKED-DOWN OPERATOR (not admin) and writes throughout its
|
|
# install folder at runtime - PreProcess\ (MergeFiles GetDoDAFolder) plus
|
|
# output/temp elsewhere under C:\Apps\DODA. Grant Users + Authenticated Users
|
|
# Full on the WHOLE folder (object+container inherit; /T applies it to every
|
|
# existing child incl PreProcess). SIDs, not names, to stay locale-independent.
|
|
# Applied every run so it re-asserts after any lockdown pass that strips the ACE.
|
|
foreach ($sid in '*S-1-5-32-545','*S-1-5-11') { # BUILTIN\Users, NT AUTHORITY\Authenticated Users
|
|
& icacls $installDir /grant "${sid}:(OI)(CI)F" /T /C 2>&1 | Out-Null
|
|
}
|
|
Write-Host "Granted Users + Authenticated Users Full on $installDir (recursive)"
|
|
|
|
if (Test-Path (Join-Path $installDir 'DovetailAnalysis.exe')) {
|
|
Write-Host "DovetailAnalysis.exe verified present"
|
|
exit 0
|
|
} else {
|
|
Write-Host "ERROR: DovetailAnalysis.exe not found after extract"
|
|
exit 1
|
|
}
|