Skip to content

Windows - #189

Draft
samestep wants to merge 2 commits into
mainfrom
windows-vm
Draft

Windows#189
samestep wants to merge 2 commits into
mainfrom
windows-vm

Conversation

@samestep

Copy link
Copy Markdown
Owner

wimdows

samestep and others added 2 commits July 18, 2026 11:15
Runs Windows 11 inside sandbox-amd64 via dockur/windows + nested KVM,
reachable over the tailnet by RDP or by SSH into a PowerShell prompt
(the same nested-SSH pattern as the Linux VMs). Documents the OpenSSH
bootstrap (logon task + SeAssignPrimaryTokenPrivilege grant, since the
service crashes as LocalSystem on this image) and passwordless key setup
via administrators_authorized_keys. Also records why the ARM equivalent
hangs at the Windows-ARM bootloader under nested virt.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018GfYK5A2H1RMYsLnjMjDJA
`ssh -J sandbox-amd64 -p 2222 agent@localhost` authenticates end-to-end, so
the guest sees the *local* machine's key (not sandbox-amd64's) and falls back
to a password. Instead add a `win-amd64` host alias that uses RemoteCommand to
run the inner ssh on sandbox-amd64, so it authenticates with that host's key
(which is in the guest's authorized_keys). tailnet now emits its hostname too.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018GfYK5A2H1RMYsLnjMjDJA
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant