Wingetnode Project

For the Typescript version please see:

wingetnodets

This current project will likely be abandoned.

Introduction

This is a NodeJS/MongoDB Proof of Concept implementation of the Winget Restsource reference code. This code is very much alpha and will later be rewritten in Typescript.

Please refer to the following for more information on the official reference implementation:

1. winget-cli-restsource
2. winget-cli
   1. Example manifest yaml files
   2. Example version 1.4 JSON response format
      Note: as of this writing, version 1.4 has not been released, but prior versions are available to view in the same folder as the above link.

REST API project and MongoDB configuration

I'll have more information on these topics soon.

WebServer

You will need a signed certificate for your REST webserver. Winget will not allow HTTP rest endpoints. InstallerURLs can be regular http.

You will need to create a directory at the root of the project named noclone. Copy the config.example.json to this directory and rename to config.json. Edit the fields for your environment.

--

There is still much to work on, but simple searching and installing seem to function well. Searching with the filters --name, --tag, --exact are implemented but may return unexpected results. I'll work on --query last once I finish with all the filters.

MongoDB

The only requirement here is an accessible Mongo instance with a database named "winget".
For dev/test purposes, I'm using the official mongodb and mongo-express docker images. The sample docker compose file listed they have should work fine for testing.

https://hub.docker.com/_/mongo

Generating and uploading package manifest JSON files.

In ./Powershell, there are 3 .ps1 files

1. parsemsi.ps1
2. parsemsix.ps1 (work in progress)
3. parsenullsoft.ps1

Running a parser will prompt for the URL of the package

For example:

https://dmtdev.itportal.sentara.com:7071/api/downloads/setup.msi

NOTE TO MY TEAM MEMBERS:

For packages internal to Sentara, you can test your package by copying the file to:
\\inditwebd01\websites\winget\packages.
This UNC location is the full path to the URI alias:
https://dmtdev.itportal.sentara.com:7071/api/downloads

The script will download the file to a temp file and run some commands to inspect the file. You'll be prompted for any additional information for the package.

Once inspection is complete, the script will open the resulting manifest file in Notepad.exe. From here you can make any manual adjustments to the file.

Upon optionally saving changes and closing the notepad instance, you will be prompted to upload the manifest to our winget REST server. If you choose to upload, a batch file located in ./Batch named upload.cmd will execute.

Adding the new winget source

This will vary depending on your environment's configuration. "dmtstore" can be any name.
The argument is the url to the running index.js. SSL is required!

winget source add -n dmtstore -a https://dmtdev.itportal.sentara.com:7071/api -t Microsoft.Rest

Searching a single repository

winget search SomeInstaller -s dmtstore

Since we're dev/testing, local DB corruption can occur, especiallly if you change an existing package manifest. Just delete the source's DB folder.
Sources maintain their own independent sqlite DBs in the following path:

%USERPROFILE%\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState

Current TODO

• Finish powershell scripts to help with manifest creation in Windows
• Create bash scripts for manifest creation in Linux (msitools can parse msi properties)
• Adjust mongo queries - search still needs work. I need to search additional fields and format the return data
• Implement all possible filtering to support winget cli filtering options
• Way, way, way down the road... I plan on implementing the package ingestion/validation endpoints
• Rejoice

Troubleshooting

If getting a certificate error, you may need the following registry value

Allows unpinned sources (otherwise add source via GPO):

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller
EnableBypassCertificatePinningForMicrosoftStore (DWORD): 1