WIP: add Windows Update template with online COM API updates

Add essentials.windowsUpdate template that boots Audit Mode, uses the
Windows Update COM API to search/download/install all available updates
(cumulative, .NET, Defender), handles multi-round reboots with Audit
Mode preservation, and compacts the image afterward.

Known issues being worked:
- Audit Mode preservation after update reboot needs verification
- Install takes ~60-90 min with 4GB RAM on slow machines

See wip/win10-update.session.md for full context and TODOs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Git Sagar 2026-06-09 10:31:08 +05:30
parent 3b454b749a
commit f33b8e7ce3
5 changed files with 222 additions and 6 deletions

View file

@ -9,7 +9,9 @@ rec {
upstreamISO = upstreamISOs.win10-ltsc-2021;
productKey = "M7XTQ-FN8P6-TTKYV-9D4CC-J462D";
};
basic = customizeImageFold upstream (with templates; [
# Apply all available Windows Updates (cumulative, .NET, Defender)
updated = customizeImage upstream (templates.essentials.windowsUpdate {});
basic = customizeImageFold updated (with templates; [
essentials.virtioTools
essentials.removeIE
essentials.removeWMP
@ -38,8 +40,9 @@ rec {
productKey = "M7XTQ-FN8P6-TTKYV-9D4CC-J462D";
useAHCI = true;
};
laptopUpdated = customizeImage laptopUpstream (templates.essentials.windowsUpdate {});
laptopSlim = customizeImageFold laptopUpstream templates.bundles.laptopSlim;
laptopSlim = customizeImageFold laptopUpdated templates.bundles.laptopSlim;
laptop = customizeImageFold laptopUpstream templates.bundles.laptop;
laptop = customizeImageFold laptopUpdated templates.bundles.laptop;
}