fix: Disable Windows Defender on agent binary (coder#1095)

kylecarbs · web-flow · commit e35a4fdcf082 · 2022-04-20T15:01:35.000Z
Windows (reasonably) detected our CLI as a virus due to the name being "sshd" for VS Code support. See: microsoft/vscode-remote-release#5699 This disables monitoring for our binary prior to run, which fixes our Windows example.
diff --git a/provisionersdk/agent.go b/provisionersdk/agent.go
@@ -14,6 +14,7 @@ var (
 			"amd64": `
 $ProgressPreference = "SilentlyContinue"
 Invoke-WebRequest -Uri ${ACCESS_URL}bin/coder-windows-amd64.exe -OutFile $env:TEMP\sshd.exe
+Set-MpPreference -DisableRealtimeMonitoring $true -ExclusionPath $env:TEMP\sshd.exe
 $env:CODER_AUTH = "${AUTH_TYPE}"
 $env:CODER_URL = "${ACCESS_URL}"
 Start-Process -FilePath $env:TEMP\sshd.exe -ArgumentList "agent" -PassThru
