[Flaky Test]: Integration tests on Windows – virus or potentially unwanted software

[rdner]

Failing test case

Integration tests on Windows

Error message

virus or potentially unwanted software

Build

https://buildkite.com/elastic/elastic-agent/builds/7542#018e0e28-972c-460b-861e-1802ff8389d6

OS

Windows

Stacktrace and notes

failed to run compiled magefile: fork/exec C:\Users\windows\magefile\5ab13b2cacf496bb9ea662d613b50ccd7a1140fa.exe: Operation did not complete successfully because the file contains a virus or potentially unwanted software.

There was already a related change for the buildkite runner #4183 but this error is coming from Windows virtual machines we run on GCP (via OGC). We need to exclude the user directory from Windows Defender in our image which we use for the integration tests.

[elasticmachine]

Pinging @elastic/elastic-agent (Team:Elastic-Agent)

[pazone]

First let's add Set-MpPreference -DisableRealtimeMonitoring $true to the Windows prepare function. If it help I can rebuild the image

[rdner]

@pazone I don't think we should disable it completely, I started with adding an exception in #4357

[pierrehilbert]

We got the same issue in the past and you fixed it if I remember correctly @pazone.
How can we avoid this issue to happen?

[rdner]

Had to revert my fix #4365

[rdner]

There was no failure for more than a month. Seems like it was a temporary issue. Closing for now.