[PA-2701] Windows Network Components restart following Puppet agent Upgrade - Puppet Jira Server

Details

Type: Bug
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: puppet-agent 5.5.17, puppet-agent 6.4.4, puppet-agent 6.8.0
Component/s: None
Labels:

Team:
Night's Watch
Story Points:
3
Sprint:
PR - 2019-06-12, PR - 2019-06-25, PR - 2019-07-10, PR - 2019-07-23, NW - 2019-08-07, NW - 2019-08-21
Method Found:
Customer Feedback

CS Priority:
Reviewed
Zendesk Ticket IDs:
37424,37521
Zendesk Ticket Count:
2

Release Notes:
Bug Fix
Release Notes Summary:

Hide
When performing a puppet agent upgrade, sometimes Windows Network Components are restart. This restart is caused by the eventmessagefile named puppetres.dll that gets loaded and locked into svchost.exe when viewing events raised by puppet.
The puppet agent upgrade tries to modify puppetres.dll, but fails as it is loaded, and the only way to unload it is to restart windows components like DHCP Client.

This fix no longer use the puppetres.dll for events and now uses the EventCreate.exe for generating event messages, so now the EventCreate.exe will get loaded and locked by svchost.exe when viewing puppet events. This will no longer interfere with the puppet agent upgrade, so no windows component will get restarted.

Show
When performing a puppet agent upgrade, sometimes Windows Network Components are restart. This restart is caused by the eventmessagefile named puppetres.dll that gets loaded and locked into svchost.exe when viewing events raised by puppet. The puppet agent upgrade tries to modify puppetres.dll, but fails as it is loaded, and the only way to unload it is to restart windows components like DHCP Client. This fix no longer use the puppetres.dll for events and now uses the EventCreate.exe for generating event messages, so now the EventCreate.exe will get loaded and locked by svchost.exe when viewing puppet events. This will no longer interfere with the puppet agent upgrade, so no windows component will get restarted.

Description

Problem:

When performing the following windows agent upgrade using the puppet_agent module:

PE 2018.1.7
Windows server 2012 R2
puppet_agent module 2.1.1

Upgrade 5.3.5 > 5.5.10

the following services are restarted by the Windows restartmanager as a result of running the installer MSI:

Application DHCP Client

 Application Windows Event Log

 Application TCP/IP NetBIOS Helper

 Application Windows Connection Manager

 Application IP Helper

 Application WinHTTP Web Proxy Auto-Discovery Service

 Application Network List Service

 Application Network Location Awareness

 Application Application Experience

 Application Application Information

 Application Background Intelligent Transfer Service

 Application Certificate Propagation

 Application IKE and AuthIP IPsec Keying Modules

 Application Server

 Application User Profile Service

 Application Task Scheduler

 Application System Event Notification Service

 Application Remote Desktop Configuration

 Application Shell Hardware Detection

 Application Themes

 Application Windows Management Instrumentation

 Application Microsoft Account Sign-in Assistant

 Application User Access Logging Service

 Application SMS Agent Host

 Application COM+ Event System

 Application Windows Font Cache Service

 Application Network Store Interface Service

 Application Remote Registry

 Application Windows Time

 Application Netlogon

 Application Workstation

 Application DNS Client

 Application Cryptographic Services

 Application Windows Remote Management (WS-Management)

 Application Adiscon EvntSLog

 Application CNG Key Isolation

 Application Security Accounts Manager

This is triggered by the following Puppet EXE

File C:\Program Files\Puppet Labs\Puppet\service\nssm.exe

Have been unable to reproduce in Lab, however at customer site it is happening for a significant proportion of upgraded Agents.

Windows application event log:

- System

- Provider

[ Name] Microsoft-Windows-RestartManager

 [ Guid] {0888E5EF-9B98-4695-979D-E92CE4247224}

 EventID 10005

 Version 0

 Level 4

 Task 0

 Opcode 0

 Keywords 0x8000000000000000

 - TimeCreated

[ SystemTime] 2019-05-31T00:54:23.999472700Z

 EventRecordID 1405755

 Correlation

 - Execution

[ ProcessID] 7896

 [ ThreadID] 7552

 Channel Application

 Computer test.redact.com

 - Security

[ UserID] S-1-5-21-1404378610-1931762550-1572757862-149565

- UserData

- RmRestartEvent

RmSessionId 0

 nApplications 37

 - Applications

Application DHCP Client

 Application Windows Event Log

 Application TCP/IP NetBIOS Helper

 Application Windows Connection Manager

 Application IP Helper

 Application WinHTTP Web Proxy Auto-Discovery Service

 Application Network List Service

 Application Network Location Awareness

 Application Application Experience

 Application Application Information

 Application Background Intelligent Transfer Service

 Application Certificate Propagation

 Application IKE and AuthIP IPsec Keying Modules

 Application Server

 Application User Profile Service

 Application Task Scheduler

 Application System Event Notification Service

 Application Remote Desktop Configuration

 Application Shell Hardware Detection

 Application Themes

 Application Windows Management Instrumentation

 Application Microsoft Account Sign-in Assistant

 Application User Access Logging Service

 Application SMS Agent Host

 Application COM+ Event System

 Application Windows Font Cache Service

 Application Network Store Interface Service

 Application Remote Registry

 Application Windows Time

 Application Netlogon

 Application Workstation

 Application DNS Client

 Application Cryptographic Services

 Application Windows Remote Management (WS-Management)

 Application Adiscon EvntSLog

 Application CNG Key Isolation

 Application Security Accounts Manager

 RebootReasons 9

 + System

- Provider

[ Name] Microsoft-Windows-RestartManager

 [ Guid] {0888E5EF-9B98-4695-979D-E92CE4247224}

 EventID 10002

 Version 0

 Level 4

 Task 0

 Opcode 0

 Keywords 0x8000000000000000

 - TimeCreated

[ SystemTime] 2019-05-31T00:54:26.580244200Z

 EventRecordID 1405760

 Correlation

 - Execution

[ ProcessID] 4036

 [ ThreadID] 2128

 Channel Application

 Computer test.test.com

 - Security

[ UserID] S-1-5-21-1404378610-1931762550-1572757862-149565

- UserData

- RmApplicationEvent

RmSessionId 0

 FullPath C:\Windows\System32\svchost.exe

 DisplayName DHCP Client

 AppVersion 0

 AppType 3

 TSSessionId 0

 Status 2

 Pid 460

 nFiles 1

 - Files

File C:\Program Files\Puppet Labs\Puppet\service\nssm.exe

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending
- Thumbnails
- List
- Download All

cvmwnt0283_RuntimeError_1.png
12 kB
2019/06/14 7:17 AM
cvmwnt0283_RuntimeError_2.png
15 kB
2019/06/14 7:17 AM
puppet_module_list (1).txt
5 kB
2019/06/03 7:11 AM

Issue Links

relates to

MODULES-10818 puppet_agent : upgrading windows agent from 5.5.16 to 5.5.21 is failing with `ScriptHalted` error.

Resolved

PA-3175 Windows component DHCP Server service after an upgrade

Resolved

mentioned in: Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...

(7 mentioned in)

Windows Network Components restart following Puppet agent Upgrade

Details

Description

Attachments

Attachments

Issue Links

Activity

People

Dates

Zendesk Support