-
Feature Request
-
Resolution: Unresolved
-
Normal
-
None
-
None
-
None
-
Future Sustainability
-
False
-
-
False
-
Not Selected
- Windows VM is set with ExecutionPolicy:
~~~
Get-ExecutionPolicy -List
Scope ExecutionPolicy
----- ---------------
MachinePolicy AllSigned
UserPolicy Undefined
Process Undefined
CurrentUser Undefined
LocalMachine RemoteSigned
~~~
So, with "MachinePolicy AllSigned", the migration completes successfully but the isntallation of qemu-ga and static network configuraiton will fail with error:
~~~
running "C:\Program Files\Guestfs\Firstboot\scripts\5000-0003-install-qemu-ga.bat" File C:\Program Files\Guestfs\Firstboot\Temp\install-qemu-ga.ps1 cannot be loaded. The file C:\Program Files\Guestfs\Firstboot\Temp\install-qemu-ga.ps1 is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at https:/go.microsoft.com/fwlink/?LinkID=135170. + CategoryInfo : SecurityError: (
[], ParentContainsErrorRecordException + FullyQualifiedErrorId : UnauthorizedAccess
~~~
As this is custom configuration and workaround it to undefine/ Bypass or Allow the script, the customer is asking to sign the scripts relates to qemu-ga and network-configuration.
Is it possible to sign these scripts somehow?