Powershell Dsc extension

[Abdul88dev]

Hello everyone i am here hoping that someone can help me with this issue .
i have two vms with azuredevops and biceps done . and i want to promote them to DC one of them suceeded to do so but the another one failed to succeed .

it gives me this error detail :

"details":[{"code":"ExtensionNotFoundForCPUArchitecture","message":"Extension with publisher 'Microsoft.Powershell', type 'DSC', and type handler version '2.8' for CPU Architecture 'x64' was not found in the extension repository.

[brwilkinson]

Which hardwareprofile --> vmSize are you using? For each of the VM's.

[brwilkinson]

Merge both of those configurations into a single configuration and only call it a single time, you should not be calling 2 separate DSC on the same machine. Ensure everything occurs in the single configuration file.

[brwilkinson]

Also after you promote the first DC and set the DNS to only have the DC1 as primary.

Then run the domain join extension on the second DC, even though it has not been promoted yet.

Then after that domain join, run the single DSC configuration with everything in it to promote DC2.

[brwilkinson]

If you look at the end on my DSC samples. I include the code to be able to open up and execute the script directly on the server, including decrypting the parameters.

You might find that helpful to be able to manually test and execute your dsc config add well.

[Abdul88dev]

Thanks a lot for your feedback and all answers . i succeded to promote both of them . now i will go further with the other bugs that are in the code , btw . this is not my code i am just debugging the code so they don`t need to rebuild the code all over again .

i will keep posted in case of any further problmes might accures .

[brwilkinson]

@Abdul88dev great.

[brwilkinson]

Adding the Bicep orchestration in case anyone else comes across this thread.

https://github.com/brwilkinson/AzureDeploymentFramework/blob/d10c55331a0f2ebe2be8824a5b3c45c54913c9ec/ADF/bicep/01-ALL-RG.bicep#LL651C1-L747C2

This does the following:

1. set dns to primary and azuredns
2. deploy DC1, including DSC
3. set dns to primary only
4. deploy DC2, including domain join extension first, then DSC to promote
5. set the dns to primary and secondary

Domain controller virtual machine configurations are defined here:

• https://github.com/brwilkinson/AzureDeploymentFramework/blob/d10c55331a0f2ebe2be8824a5b3c45c54913c9ec/ADF/tenants/AD/AWU3.P0.parameters.json#LL586C1-L629C10

Plus that whole parameter file contains the VNET and everything else used in that environment.

[Abdul88dev]

i am back with the same error but with different Domain controller .

{
    "status": "Failed",
    "error": {
        "code": "ExtensionNotFoundForCPUArchitecture",
        "message": "Extension with publisher 'Microsoft.Powershell', type 'DSC', and type handler version '2.83' for CPU Architecture 'x64' was not found in the extension repository."
    }
}```

here where i create the forest and the domain : 

resource createAdForest 'Microsoft.Compute/virtualMachines/extensions@2022-03-01' = {
name: '${virtualMachines[0].name}/ConfigureADPDC'
location: location
properties: {
publisher: 'Microsoft.Powershell'
type: 'DSC'
typeHandlerVersion: !contains(virtualMachines[0].name, 'DSC') ? '2.83' : extensions.DSC.properties.typeHandlerVersion //virtualMachine[0].name ipv extention
autoUpgradeMinorVersion: !contains(virtualMachines[0].name, 'DSC') ? false : extensions.DSC.properties.autoUpgradeMinorVersion //virtualMachine[0].name ipv extention
settings: {
configuration: {
url: uri(artifactsLocation, 'ConfigureADPDC.ps1.zip')
script: 'ConfigureADPDC.ps1'
function: 'ConfigureADPDC'
}
configurationArguments: {
DomainName: settings.corporateDomainName
DomainNetbiosName: settings.corporateDomainNetbiosName
ForestMode: 'WinThreshold'
DomainMode: 'WinThreshold'
PrivDomainName: settings.domainName
PrivPrimaryDNSServerIpAddress: settings.primaryDNSServerIpAddress
DnsServerForwarders: settings.dnsServerForwarders //added to forward the dns
}
}
protectedSettings: {
configurationUrlSasToken: artifactsLocationSasToken
configurationArguments: {
Credential: {
userName: virtualMachineAdminUsername
password: virtualMachineAdminPassword
}
SafemodeAdministratorPassword: {
userName: safeModeUsername
password: safeModePassword
}
StorageAccountCredential: {
userName: 'localhost\${storageAccountName}'
password: storageAccountSasToken
}
}
}
}
dependsOn: [
domainControllers
]
}```

but he is taking these two also with it where he should not .

resource prepareBDC 'Microsoft.Compute/virtualMachines/extensions@2020-12-01' =  { 
  name: '${virtualMachines[1].name}/PepareBDC'
  location: location
  properties: {
    publisher: 'Microsoft.Powershell'
    type: 'DSC'
    //typeHandlerVersion: !contains(extensions, 'DSC') ? '2.83' : extensions.DSC.properties.typeHandlerVersion
    //autoUpgradeMinorVersion: !contains(extensions, 'DSC') ? true : extensions.DSC.properties.autoUpgradeMinorVersion
    settings: {
      configuration: {
        url: uri(artifactsLocation, 'PrepareADBDC.ps1.zip')
        script: 'PrepareADBDC.ps1'
        function: 'PrepareADBDC'
      }
      configurationArguments: {
        DomainName: settings.corporateDomainName
        DomainNetbiosName: settings.corporateDomainNetbiosName
        // DNSServer: ipAddresses[0]
      }
    }
    protectedSettings: {
      configurationUrlSasToken: artifactsLocationSasToken
    }
  }
  dependsOn: [
    domainControllers
  ]
}

module configureBDCs 'mod-virtualmachine-dsc-extension.bicep' =  {
  name: take('${environment}-pam-corporate-domaincontroller-${1}-${timeStamp}', 64)
  params: {
    vmName: virtualMachines[1].name
    extName: 'PepareBDC'
    configFunctionName: 'ConfigureADBDC'
    artifactsLocation: artifactsLocation
    artifactsLocationSasToken: artifactsLocationSasToken
    //comment
    //typeHandlerVersion: !contains(extensions, 'DSC') ? '2.83' : extensions.DSC.properties.typeHandlerVersion
    //autoUpgradeMinorVersion: !contains(extensions, 'DSC') ? true : extensions.DSC.properties.autoUpgradeMinorVersion
    location: location
    configFunctionArguments: {
      DomainName: settings.corporateDomainName
      DomainNetbiosName: settings.corporateDomainNetbiosName
      ForestMode: 'WinThreshold'
      DomainMode: 'WinThreshold'
    }
    protectedConfigFunctionArguments: {
      Credential: {
        userName: virtualMachineAdminUsername
        password: virtualMachineAdminPassword
      }
      SafemodeAdministratorPassword: {
        userName: safeModeUsername
        password: safeModePassword
      }
    }
  }
  dependsOn: [
    // updateDCNICs
    updateDnsServer
  ]
}```

any advice ??

[brwilkinson]

Yes, merge into a single configuration.