Azure ARM模板 - 运行DSC脚本而不触发扩展安装？

Question

我正在尝试使用两个DC部署Active Directory林。我已设法部署DC并在两个VM上安装ADDS功能。 “PDC”有一个运行和配置森林的DSC脚本，再次运行良好。我遇到的问题是尝试在第二个DC上运行第二个DSC脚本，此脚本运行ADDS配置以将VM提升为DC并将其连接到林。我创建了一个嵌套的JSON模板，由主模板调用。但是我遇到了这个错误：

“操作系统类型'Windows'不支持每个处理程序多个VMExtensions。已在输入中添加或指定了处理程序'Microsoft.Powershell.DSC'的VMExtension'PrepareBDC'。”

我花了最后一个小时左右在互联网上徘徊寻找答案，每个人似乎都说同样的事情......你不能安装两次相同的分机。好的，我可以看到为什么这是有道理的，我的问题是我可以配置嵌套模板，因此它不会尝试安装扩展，只使用已安装在VM上的内容吗？

主模板代码段：

{
    "type": "Microsoft.Compute/virtualMachines/extensions",
    "name": "[concat(variables('dc2name'), '/PrepareDC2AD')]",
    "apiVersion": "2018-06-01",
    "location": "[resourceGroup().location]",
    "dependsOn": [
        "[resourceId('Microsoft.Compute/virtualMachines', variables('dc2name'))]"
    ],
    "properties": {
        "publisher": "Microsoft.Powershell",
        "type": "DSC",
        "typeHandlerVersion": "2.19",
        "autoUpgradeMinorVersion": true,
        "settings": {
            "ModulesUrl": "[concat(parameters('Artifacts Location'), '/dsc/PrepareADBDC.zip', parameters('Artifacts Location SAS Token'))]",
            "ConfigurationFunction": "PrepareADBDC.ps1\\PrepareADBDC",
            "Properties": {
                "DNSServer": "[variables('dc1ipaddress')]"
            }
        }
    }
},
{
    "name": "ConfiguringDC2",
    "type": "Microsoft.Resources/deployments",
    "apiVersion": "2016-09-01",
    "dependsOn": [
        "[concat('Microsoft.Compute/virtualMachines/',variables('dc1name'),'/extensions/CreateADForest')]",
        "[concat('Microsoft.Compute/virtualMachines/',variables('dc2name'),'/extensions/PrepareDC2AD')]"
    ],
    "properties": {
        "mode": "Incremental",
        "templateLink": {
            "uri": "[concat(parameters('Artifacts Location'), '/nestedtemplates/configureADBDC.json', parameters('Artifacts Location SAS Token'))]",
            "contentVersion": "1.0.0.0"
        },
        "parameters": {
            "adBDCVMName": {
                "value": "[variables('dc2name')]"
            },
            "location": {
                "value": "[resourceGroup().location]"
            },
            "adminUsername": {
                "value": "[parameters('Administrator User')]"
            },
            "adminPassword": {
                "value": "[parameters('Administrator Password')]"
            },
            "domainName": {
                "value": "[parameters('Domain Name')]"
            },
            "adBDCConfigurationFunction": {
                "value": "ConfigureADBDC.ps1\\ConfigureADBDC"
            },
            "adBDCConfigurationModulesURL": {
                "value": "[concat(parameters('Artifacts Location'), '/dsc/ConfigureADBDC.zip', parameters('Artifacts Location SAS Token'))]"
            }
        }
    }
},

嵌套模板：

{
    "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "adBDCVMName": {
            "type": "string"
        },
        "location": {
            "type": "string",
            "defaultValue": "[resourceGroup().location]"
        },
        "adminUsername": {
            "type": "string"
        },
        "adminPassword": {
            "type": "securestring"
        },
        "domainName": {
            "type": "string"
        },
        "adBDCConfigurationFunction": {
            "type": "string"
        },
        "adBDCConfigurationModulesURL": {
            "type": "string"
        }
    },
    "resources": [
        {
            "type": "Microsoft.Compute/virtualMachines/extensions",
            "name": "[concat(parameters('adBDCVMName'),'/PrepareBDC')]",
            "apiVersion": "2016-03-30",
            "location": "[parameters('location')]",
            "properties": {
                "publisher": "Microsoft.Powershell",
                "type": "DSC",
                "typeHandlerVersion": "2.21",
                "autoUpgradeMinorVersion": true,
                "forceUpdateTag": "1.0",
                "settings": {
                    "modulesURL": "[parameters('adBDCConfigurationModulesURL')]",
                    "wmfVersion": "4.0",
                    "configurationFunction": "[parameters('adBDCConfigurationFunction')]",
                    "properties": {
                        "domainName": "[parameters('domainName')]",
                        "adminCreds": {
                            "userName": "[parameters('adminUsername')]",
                            "password": "privateSettingsRef:adminPassword"
                        }
                    }
                },
                "protectedSettings": {
                    "items": {
                        "adminPassword": "[parameters('adminPassword')]"
                    }
                }
            }
        }
    ]
}

Answer 1

这个错误意味着它所说的内容：您不能拥有相同扩展名的多个副本，您需要做的是将相同的扩展名应用于vm，所有输入都必须相同。你可以看看this example就是这么做的。此特定模板第二次安装扩展以将bdc加入域。

但是，我不喜欢这种方法。我使用Powershell DSC等待域创建并一次性将bdc加入域。你会使用这个powershell dsc片段：

xWaitForADDomain DscForestWait {
    DomainName           = $DomainName
    DomainUserCredential = $DomainCreds
    RetryCount           = $RetryCount
    RetryIntervalSec     = $RetryIntervalSec
}

Here's一个完整的例子