Uploaded image for project: 'Puppet Agent'
  1. Puppet Agent
  2. PA-2701

Windows Network Components restart following Puppet agent Upgrade

    Details

    • Template:
    • Team:
      Night's Watch
    • Story Points:
      3
    • Sprint:
      PR - 2019-06-12, PR - 2019-06-25, PR - 2019-07-10, PR - 2019-07-23, NW - 2019-08-07, NW - 2019-08-21
    • Method Found:
      Customer Feedback
    • CS Priority:
      Reviewed
    • Release Notes:
      Bug Fix
    • Release Notes Summary:
      Hide
      When performing a puppet agent upgrade, sometimes Windows Network Components are restart. This restart is caused by the eventmessagefile named puppetres.dll that gets loaded and locked into svchost.exe when viewing events raised by puppet.
      The puppet agent upgrade tries to modify puppetres.dll, but fails as it is loaded, and the only way to unload it is to restart windows components like DHCP Client.

      This fix no longer use the puppetres.dll for events and now uses the EventCreate.exe for generating event messages, so now the EventCreate.exe will get loaded and locked by svchost.exe when viewing puppet events. This will no longer interfere with the puppet agent upgrade, so no windows component will get restarted.
      Show
      When performing a puppet agent upgrade, sometimes Windows Network Components are restart. This restart is caused by the eventmessagefile named puppetres.dll that gets loaded and locked into svchost.exe when viewing events raised by puppet. The puppet agent upgrade tries to modify puppetres.dll, but fails as it is loaded, and the only way to unload it is to restart windows components like DHCP Client. This fix no longer use the puppetres.dll for events and now uses the EventCreate.exe for generating event messages, so now the EventCreate.exe will get loaded and locked by svchost.exe when viewing puppet events. This will no longer interfere with the puppet agent upgrade, so no windows component will get restarted.

      Description

      Problem:

      When performing the following windows agent upgrade using the puppet_agent module:

      PE 2018.1.7
      Windows server 2012 R2
      puppet_agent module 2.1.1

      Upgrade 5.3.5 > 5.5.10

       

      the following services are restarted by the Windows restartmanager as a result of running the installer MSI:

       

       

       

      Application DHCP Client 
       
       Application Windows Event Log 
       
       Application TCP/IP NetBIOS Helper 
       
       Application Windows Connection Manager 
       
       Application IP Helper 
       
       Application WinHTTP Web Proxy Auto-Discovery Service 
       
       Application Network List Service 
       
       Application Network Location Awareness 
       
       Application Application Experience 
       
       Application Application Information 
       
       Application Background Intelligent Transfer Service 
       
       Application Certificate Propagation 
       
       Application IKE and AuthIP IPsec Keying Modules 
       
       Application Server 
       
       Application User Profile Service 
       
       Application Task Scheduler 
       
       Application System Event Notification Service 
       
       Application Remote Desktop Configuration 
       
       Application Shell Hardware Detection 
       
       Application Themes 
       
       Application Windows Management Instrumentation 
       
       Application Microsoft Account Sign-in Assistant 
       
       Application User Access Logging Service 
       
       Application SMS Agent Host 
       
       Application COM+ Event System 
       
       Application Windows Font Cache Service 
       
       Application Network Store Interface Service 
       
       Application Remote Registry 
       
       Application Windows Time 
       
       Application Netlogon 
       
       Application Workstation 
       
       Application DNS Client 
       
       Application Cryptographic Services 
       
       Application Windows Remote Management (WS-Management) 
       
       Application Adiscon EvntSLog 
       
       Application CNG Key Isolation 
       
       Application Security Accounts Manager 

      This is triggered by the following Puppet EXE

       

      File C:\Program Files\Puppet Labs\Puppet\service\nssm.exe

      Have been unable to reproduce in Lab, however at customer site it is happening for a significant proportion of upgraded Agents.

       

      Windows application event log:

       

       

      - System
      - Provider
      [ Name] Microsoft-Windows-RestartManager 
       [ Guid] {0888E5EF-9B98-4695-979D-E92CE4247224} 
       
       EventID 10005 
       
       Version 0 
       
       Level 4 
       
       Task 0 
       
       Opcode 0 
       
       Keywords 0x8000000000000000 
       
       - TimeCreated
      [ SystemTime] 2019-05-31T00:54:23.999472700Z 
       
       EventRecordID 1405755 
       
       Correlation 
       
       - Execution
      [ ProcessID] 7896 
       [ ThreadID] 7552 
       
       Channel Application 
       
       Computer test.redact.com
       
       - Security
      [ UserID] S-1-5-21-1404378610-1931762550-1572757862-149565
      - UserData
      - RmRestartEvent
      RmSessionId 0 
       
       nApplications 37 
       
       - Applications
      Application DHCP Client 
       
       Application Windows Event Log 
       
       Application TCP/IP NetBIOS Helper 
       
       Application Windows Connection Manager 
       
       Application IP Helper 
       
       Application WinHTTP Web Proxy Auto-Discovery Service 
       
       Application Network List Service 
       
       Application Network Location Awareness 
       
       Application Application Experience 
       
       Application Application Information 
       
       Application Background Intelligent Transfer Service 
       
       Application Certificate Propagation 
       
       Application IKE and AuthIP IPsec Keying Modules 
       
       Application Server 
       
       Application User Profile Service 
       
       Application Task Scheduler 
       
       Application System Event Notification Service 
       
       Application Remote Desktop Configuration 
       
       Application Shell Hardware Detection 
       
       Application Themes 
       
       Application Windows Management Instrumentation 
       
       Application Microsoft Account Sign-in Assistant 
       
       Application User Access Logging Service 
       
       Application SMS Agent Host 
       
       Application COM+ Event System 
       
       Application Windows Font Cache Service 
       
       Application Network Store Interface Service 
       
       Application Remote Registry 
       
       Application Windows Time 
       
       Application Netlogon 
       
       Application Workstation 
       
       Application DNS Client 
       
       Application Cryptographic Services 
       
       Application Windows Remote Management (WS-Management) 
       
       Application Adiscon EvntSLog 
       
       Application CNG Key Isolation 
       
       Application Security Accounts Manager 
       
       
       RebootReasons 9 
       
       
       
       
       
       + System
      - Provider
      [ Name] Microsoft-Windows-RestartManager 
       [ Guid] {0888E5EF-9B98-4695-979D-E92CE4247224} 
       
       EventID 10002 
       
       Version 0 
       
       Level 4 
       
       Task 0 
       
       Opcode 0 
       
       Keywords 0x8000000000000000 
       
       - TimeCreated
      [ SystemTime] 2019-05-31T00:54:26.580244200Z 
       
       EventRecordID 1405760 
       
       Correlation 
       
       - Execution
      [ ProcessID] 4036 
       [ ThreadID] 2128 
       
       Channel Application 
       
       Computer test.test.com
       
       - Security
      [ UserID] S-1-5-21-1404378610-1931762550-1572757862-149565
      - UserData
      - RmApplicationEvent
      RmSessionId 0 
       
       FullPath C:\Windows\System32\svchost.exe 
       
       DisplayName DHCP Client 
       
       AppVersion 0 
       
       AppType 3 
       
       TSSessionId 0 
       
       Status 2 
       
       Pid 460 
       
       nFiles 1 
       
       - Files
      File C:\Program Files\Puppet Labs\Puppet\service\nssm.exe 
      

       

       

       

        Attachments

          Issue Links

            Activity

              jsd-sla-details-panel

                People

                • Assignee:
                  dorin.pleava Dorin Pleava
                  Reporter:
                  martin.ewings Marty Ewings
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  7 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Zendesk Support