ci(installer): skip MSI ICE validation only when the Windows Installer service is unreachable #26

2026-11-10T20:21:05Z

forge-recovery commented

2026-11-10 20:21:05 +00:00

Batch-logon runner accounts cannot start msiserver (WIX0217). Falls back to SuppressValidation for unsigned builds only; signed builds still refuse. Verified: build.yaml run #154 green on qqq-lore-windows.

🤖 Generated with Claude Code

Batch-logon runner accounts cannot start msiserver (WIX0217). Falls back to SuppressValidation for unsigned builds only; signed builds still refuse. Verified: build.yaml run #154 green on qqq-lore-windows. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

forge-recovery added 1 commit 2026-11-10 20:21:05 +00:00

ci(installer): skip MSI ICE validation only when the Windows Installer service is unreachable

node / node (push) Successful in 33s

Details

build / scripts (push) Successful in 33s

Details

windows / windows (push) Successful in 5m20s

Details

build / windows (push) Successful in 5m20s

Details

a36f9105dd

WiX validates the MSI through the Windows Installer service (msiserver). The shared native
Windows runners log on as batch accounts, which Windows does not allow to start that service,
so every ICE action fails with WIX0217 and the whole MSI build fails after all tests pass.

Try to reach the service before the MSI build. When it is reachable, validation runs exactly as
before. When it is not, build without validation and warn loudly. A signed release build (one
with a certificate thumbprint) refuses to skip validation and fails instead, so it must be built
on a host where validation works.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

forge-recovery merged commit 93cd228188 into ci/shared-windows

2026-11-10 20:21:06 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/qqq-print-agent#26