1200.6

• Includes CIS MS-L1 v2.2.1 security hardening.
• The security policies disable RDP by default. If you would like to enable RDP, use the enable_rdp job in the windows-utilities-release (version 0.4.0 or greater).
• Fixes an issue in the BOSH Agent regarding DNS resolvers that can cause application downtime when a BOSH Director is unavailable (e.g. during upgrades) when deployed on Cloud Foundry.

Known Issues

• In the case of an empty cloud config, the Windows host DNS list will be cleared on BOSH Agent restarts.
• CIS policies break the IPsec bosh add-on.

1200.5

• Install-CFFeatures is now Install-CFFeatures2012.
• BOSH Agent randomizes password for Administrator user on bootup. If you need to set the password, use the set_password job in the windows-utilities-release.
• Removes Windows Defender for all IaaSes in Windows Server 2016/1709
• No longer installs Docker on Windows 2016/1709

1200.4

General Notes:

• The BOSH-Agent now disables automatic updates during its bootstrap process.
• Do not remove Powershell-ISE when building stemcell.
• Added better error checking when applying group policies.
• Intended for 2017 Sep Windows Updates roll-up.

GCP 2016:

• Set smaller MTU of network interfaces created by Docker

Windows 1709

• Skip sysprep until official 1709 build is available due to bug in insider build

1200.3

What’s changed since 1200.0:

• Agent backs off exponentially when unable to reach the director, moving from 5 seconds to 160 seconds over 6 connection attempts to reduce the impact on small-footprint BOSH VMs (resolves cloudfoundry/bosh-agent#137).
• BOSH SSH is now supported as a beta feature. Users can enable connecting to a cmd session using the bosh ssh command by running the relevant job from windows-utilities-release.
• Fixed an issue where jobs were being stopped synchronously rather than concurrently, preventing stop scripts that waited on other stop scripts from ever finishing.
• Fixed an issue where jobs that failed to start on the first attempt weren’t being retried.
• Other minor bug fixes and performance improvements.

1200.2

Update submodules

1200.0

1200.0 Release of Windows Stemcell Builder

1089.0

install docker+server core container into 2016 stemcell [#146082947]

Signed-off-by: Natalie Arellano <narellano@pivotal.io>

1079.0

Do not compress or optimize disk in azure

[#143720855]

Signed-off-by: Amin Jamali <ajamali@pivotal.io>
Signed-off-by: Mark DeLillo <mdelillo@pivotal.io>

1056.0

retry searching for installed updates

- the updates.txt is not populated with any updates if the first try at
searching failed
- we now retry searching 5 times if there is an exception thrown by the search

Signed-off-by: Sunjay Bhatia <sbhatia@pivotal.io>