WIP: add Windows Update template with online COM API updates

Add essentials.windowsUpdate template that boots Audit Mode, uses the
Windows Update COM API to search/download/install all available updates
(cumulative, .NET, Defender), handles multi-round reboots with Audit
Mode preservation, and compacts the image afterward.

Known issues being worked:
- Audit Mode preservation after update reboot needs verification
- Install takes ~60-90 min with 4GB RAM on slow machines

See wip/win10-update.session.md for full context and TODOs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Git Sagar 2026-06-09 10:31:08 +05:30
parent 3b454b749a
commit f33b8e7ce3
5 changed files with 222 additions and 6 deletions

View file

@ -12,7 +12,8 @@ rec {
windowsVersionForVirtioDrivers = "w11";
};
basic = customizeImageFold upstream (with templates; [
updated = customizeImage upstream (templates.essentials.windowsUpdate {});
basic = customizeImageFold updated (with templates; [
essentials.virtioTools
essentials.removeIE
essentials.removeWMP
@ -45,9 +46,11 @@ rec {
windowsVersionForVirtioDrivers = "w11";
};
laptopSlim = customizeImageFold laptopUpstream
laptopUpdated = customizeImage laptopUpstream (templates.essentials.windowsUpdate {});
laptopSlim = customizeImageFold laptopUpdated
(templates.bundles.laptopSlim ++ [ templates.reg.disableUCPD ]);
laptop = customizeImageFold laptopUpstream
laptop = customizeImageFold laptopUpdated
(templates.bundles.laptop ++ [ templates.reg.disableUCPD ]);
}