From e35a4fdcf082f249bdeb62d8ee173113561f5142 Mon Sep 17 00:00:00 2001 From: Kyle Carberry Date: Wed, 20 Apr 2022 10:01:35 -0500 Subject: [PATCH] fix: Disable Windows Defender on agent binary (#1095) Windows (reasonably) detected our CLI as a virus due to the name being "sshd" for VS Code support. See: https://github.com/microsoft/vscode-remote-release/issues/5699 This disables monitoring for our binary prior to run, which fixes our Windows example. --- provisionersdk/agent.go | 1 + 1 file changed, 1 insertion(+) diff --git a/provisionersdk/agent.go b/provisionersdk/agent.go index 62a1997531..5ffaee48b2 100644 --- a/provisionersdk/agent.go +++ b/provisionersdk/agent.go @@ -14,6 +14,7 @@ var ( "amd64": ` $ProgressPreference = "SilentlyContinue" Invoke-WebRequest -Uri ${ACCESS_URL}bin/coder-windows-amd64.exe -OutFile $env:TEMP\sshd.exe +Set-MpPreference -DisableRealtimeMonitoring $true -ExclusionPath $env:TEMP\sshd.exe $env:CODER_AUTH = "${AUTH_TYPE}" $env:CODER_URL = "${ACCESS_URL}" Start-Process -FilePath $env:TEMP\sshd.exe -ArgumentList "agent" -PassThru