Chocolatey - Software Automation for Windows (and sneak peak of Central Management!) - PowerShell Summit 2018
1 like679 views
Chocolatey is a software package management tool for Windows that allows users to easily install, update, and uninstall software applications. It provides a centralized way to manage software across an organization by writing deployments once and deploying everywhere using independent software packages. Chocolatey integrates with various configuration management and reporting tools. It aims to bring order to the chaotic Windows software ecosystem through its universal package format and single interface for controlling software installations.
Ad
More Related Content
What's hot (20)
Similar to Chocolatey - Software Automation for Windows (and sneak peak of Central Management!) - PowerShell Summit 2018 (20)
Ad
More from Rob Reynolds (11)
Ad
Recently uploaded (20)
![Pixologic ZBrush Crack Plus Activation Key [Latest 2025] New Version](https://cdn.slidesharecdn.com/ss_thumbnails/fashionevolution2-250322112409-f76abaa7-250428124909-b51264ff-250504160528-fc2bb1c5-thumbnail.jpg?width=560&fit=bounds)
Chocolatey - Software Automation for Windows (and sneak peak of Central Management!) - PowerShell Summit 2018
- 1. Chocolatey The package manager for Windows Software Automation for Windows Rob Reynolds Founder Chocolatey Software @ferventcoder Gary Ewan Park Senior Software Engineer Chocolatey Software @gep13
- 2. Rob Reynolds • Creator and Founder of Chocolatey • Enjoys long walks on the beach and designing solutions that make hard things easy • Co-wrote infrastructure framework known as the Chuck Norris Framework • Over 10 years experience in infrastructure automation • Obsesses over user experience • Microsoft MVP for both Cloud and Datacenter Management and Visual Studio and Development Technologies
- 3. Gary Ewan Park • Senior Software Engineer • Chocolatey GUI product owner • Loves Cake, sometimes Chocolatey Cake • Developing with .NET for nearly 10 years • Founding member of Aberdeen Developers .NET User Group • Microsoft MVP for Visual Studio and Development Technologies
- 4. Agenda • The Story of Windows Automation • Windows Software Ecosystem • Chocolatey • Chocolatey + DSC • Sneak Peeks!
- 5. Let’s talk about a story… possibly your story
- 6. The Story of Modern Automation for Windows
- 8. You probably use or have used traditional tools
- 9. Traditional Tools • Manual Configuration • Golden Images • Endpoint management tools • Not necessarily bad, just are harder to fit into modern automation approaches
- 10. Modern Automation • Feature-Rich • Infrastructure as Code (IaC) • Source Control • Testable Infrastructure • Reporting • Centralized Management
- 11. PowerShell DSC • Microsoft • Building on PowerShell • Desired State • Modern Approaches • Framework - couple it with full Configuration Management Platforms like Puppet / Chef / Ansible when appropriate
- 12. So you modernized your Windows automation
- 13. DevOps == Rainbows and Unicorns “Umm…”
- 14. Rainbows and Unicorns “Just go with it…”
- 18. Something was not quite right…
- 19. Configuration Management alone is missing something
- 20. Software Management / Package Management is necessary for great Configuration Management
- 21. Software management may account for 50-90% of your automation
- 22. Windows Software Ecosystem • Over 20 installer formats and thousands of installers in the wild • Zips and other archive formats • Software installers are messy • Deploy internal/3rd party software using same approach? • It’s like the Wild West
- 23. PowerShell DSC - Package Resource • You may have used Package Resource • Finding the PackageID (MSI Product Code GUID) • Non-MSI? • Upgrades?
- 24. “Fortunately there is a better way”
- 25. What is Chocolatey? • Software Management • PowerShell • Fancy zip files = “packages” • Packages are independent software deployment artifacts • Takes your deployment scripts to the next level
- 26. So you knew about Chocolatey
- 27. But does it work well in organizational sense?
- 30. Well, obviously - what does it represent though?
- 31. Here’s a hint
- 33. Let’s take a step back and evaluate what’s possible
- 34. Chocolatey - Sane Software Management • Easily manage the software lifecycle • Universal format for managing all aspects of Windows software are 1st class citizens (native installers, scripts, zips, binaries) • PowerShell module simplifies work • Packages are independent building blocks • Integrates with configuration management and RMM tools • Business friendly features
- 35. Chocolatey - The Approach • Single, unifying interface - control the chaos • Decentralized - multiple places to get packages, including internal • PowerShell • Flexible • Secure • Reliable 7+ years - proven technology
- 36. Chocolatey - The Approach (Sum it up!) With Chocolatey you can write a software deployment once, deploy it everywhere with everything, then manage and track that software over time (even without installers).
- 37. FOSS vs Chocolatey for Business (C4B) • Chocolatey open source (FOSS) == package management • Works well in organizational use • C4B == complete software management • Smoother experience • Builds on top of FOSS • Better system integration, endpoint management, etc • Better visual interfaces (GUIs) • Features geared specifically towards organizational use
- 38. Sweet Features
- 39. Smart Installs / Smarter Upgrades • Track software installation in Programs & Features to map packages to system installs • Track environment variable changes • Leave out guesswork by reporting on software installation location • Upgrades - Use Xml Document Transform (XDT) for .NET configuration file changes • Exclusive to Chocolatey - Use new tools / commands without closing / re-opening your shell for environment changes to take effect
- 40. Graphical Interface - ChocolateyGUI • Configure Chocolatey • Manage software installations • Great for Desktop users • Great for Self-Service Management (C4B)
- 41. Automatic Uninstallation • Exclusive to Chocolatey - Automatically uninstall 80-90% of installations without uninstall script • Installer packages manage native installations into Programs and Features • AutoUninstaller reduces time by not developing and managing uninstall scripts for installer packages • Up to 95% effective in licensed editions thanks to enhancements and Package Synchronizer
- 42. Integrates with Everything • https://chocolatey.org/docs/features-infrastructure- automation • Puppet • Chef (built-in), cookbook • PowerShell DSC • Ansible • Saltstack • Octopus Deploy • Boxstarter • SCCM • RMM, or really anything that can run scripts
- 44. Inventory - Comprehensive Software Audit • Exclusive to Chocolatey - Visibility beyond just the software ‘installed’ in Programs & Features • Track versions of zip archives & own internal software that is not visible in system installation. • Get a complete view of your systems. Chocolatey reports applications in systems not directly under its management. • Package Audit (C4B) adds who, when, and history
- 45. Package Synchronizer (C4B) - All Packages in Programs and Features • Programs and Features represents only 50-80% of the software on a machine • Chocolatey brings managed entries for non-installer packages • Supporting legacy inventory reporting systems is now a snap • Do not need to build MSIs / Installers for internal use just to support legacy reporting
- 46. Logging - Detailed Reporting • Log file captures very detailed information - environment and state • Reduces rollback / recreation necessity
- 47. Compliance – Audit Out of Date Software • choco outdated • Comprehensive reporting on available upgrades • See what will upgrade on next maintenance window • Pinned items won't upgrade until pin is remove
- 49. Community Package Repository • https://chocolatey.org/packages • Community Feed / Community Maintained • Moderated as of October 2014 • Everything goes through VirusTotal • Organizations Should Avoid • Not Fully Reliable - public repo means subject to distribution rights (download CDN cache feature helps) • Trust and Control
- 50. Hosting Your Own Package Server • https://chocolatey.org/docs/how-to-host-feed • Artifactory Pro (cross-platform) • Sonatype Nexus (cross-platform) • ProGet / MyGet (hosted) • Chocolatey.Server • NuGet.Server / NuGet Gallery proper • Visual Studio Team Services (v2 endpoints) / TFS • File Share (DFS, CIFS, SMB) / SCCM Distribution points
- 52. Chocolatey Packages • Terminology: "Package" is nupkg file, "Software" is binaries or installers • Zip files + Versioning, Dependencies & PowerShell • Metadata - Software Information / Package Information • PowerShell - https://chocolatey.org/docs/helpers-reference • 30+ Built-in functions - complex tasks become 1 liners • Handle additional missing installer logic (like add to PATH) • Add options missing from installer arguments • Files - drop in binaries, native installers
- 53. Creating Packages • https://chocolatey.org/docs/create- packages • choco new • Generates package files with most of the work done • Create your own packaging templates!
- 54. Package Builder (C4B) - “Generate software deployment packages in seconds” • Package Builder automatically creates high quality packaging from an installer/zip in 5-10 seconds • Determines everything necessary for silently installing software • Supports passing urls (and checksums) - downloads files first • Allows customization • Supports exe, msi, 7z, zip, msu, and msp files
- 55. Package Internalizer (C4B) - “Convert existing packages to 100% offline and reliable” • Take advantage of existing packages without dependency on the internet • Downloads existing package and all remote resources • Recompiles package to use those internal resources • Option to download and point to other locations • Ability to host packages on private internal repositories • Visual Interface coming
- 56. How does it work?
- 59. Package Synchronizer (Licensed) - Auto Sync • Chocolatey maintains state based on packages. System state can be manipulated outside of Chocolatey • Any Chocolatey command will trigger synchronization in licensed editions of Chocolatey • Package Synchronizer syncs with manual software removal • Syncs w/software that automatically upgrades, such as Chrome
- 60. Package Synchronizer (C4B) - Choco Sync Command • Brings all software in Programs and Features under Chocolatey management • Generates packaging and baselines to Chocolatey install • Provides packaging code to take back to source control
- 61. Package Reducer (Licensed) • Reduce Chocolatey space usage down automatically • Reduction on install/ upgrade • choco optimize to clean existing
- 62. Other Features • https://chocolatey.org/docs/release-notes • Internal sources (like ProGet) • choco upgrade all - Windows update for your 3rd party and internal software • Shimming - like symlinks but better • Pass install arguments directly through to installer (append or override package args) • Package Parameters to adjust logic in packages • Handles locking on upgrades in package folders • Great reference docs - https:// chocolatey.org/docs/commands- reference & https://chocolatey.org/ docs/helpers-reference • Excellent open source support community • 30+ built-in PowerShell Functions • Extend functionality with your own PowerShell Modules • Custom Package Templates • Can manage anything on Windows
- 63. Other Features (C4B) • https://chocolatey.org/docs/ release-notes-licensed • Auto-uninstaller more effective - uninstaller detection / Package Synchronizer • Install/upgrade keeping secrets out of logs • Ubiquitous Install Directory Option • More built-in PowerShell functions • Uninstall non-Chocolatey managed software • Direct Installer - install directly from exe/msi • Package Throttle • Runtime malware protection • CDN Cache • Professional Packaging Services • Amazing expert support team - https://chocolatey.org/support
- 64. Chocolatey Roadmap • https://chocolatey.org/docs/ roadmap • Central Management UI (C4B) • Choco Deploy CLI (C4B) • WSA / Windows Nano Support • PowerShell PackageManagement Official Provider • Package Enhancements • Pack Validation • Virtual packages • GPG Signing • Package Grid (C4B) • Deferred Installer (C4B) • Possible support on other platforms
- 65. Where does DSC come in?
- 66. cChoco DSC Resource • Manages Chocolatey installation • Manages Choco sources and configuration • Manages packages • https://github.com/ PowerShellOrg/cChoco • https:// www.powershellgallery.com/ packages/cChoco/2.3.0.0
- 67. cChocoInstaller • Manages Chocolatey installation • Manage install location • Works offline, specify a script to run locally
- 68. cChocoSource • Manage available package sources • Add or remove, does not disable • Add credentials • Add priorities for sources
- 69. cChocoFeature • Manage available Chocolatey features • cChoco vNext
- 70. cChocoPackageInstall • Ensure software package installation • Optional params, chocoParams, Version, Source, and AutoUpgrade • Allows customizing complete choco call
- 71. cChoco - Get Involved • If you are looking for a place to contribute, this is a good place • https://github.com/ chocolatey/cchoco
- 72. Demo
- 73. This is you
- 75. This is you on Chocolatey
- 77. Any Questions?
- 78. + • Rob (@ferventcoder) • rob at chocolatey dot io • Gary (@gep13) • gary at chocolatey dot io Evaluate Chocolatey for Business in your environment - discounts available conference attendees - reach out at https://chocolatey.org/ contact for details