From e252c720ebc7ceed70e0b878fb570f84b07899b6 Mon Sep 17 00:00:00 2001
From: Mike Mueller <mike.mueller@cstudio.ch>
Date: Tue, 5 May 2026 08:57:27 +0200
Subject: [PATCH] ci(windows): suppress WiX ICE validation; msiserver service
 unreachable as runner user

---
 .gitea/workflows/build-windows.yml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/build-windows.yml b/.gitea/workflows/build-windows.yml
index 015930743..57ed121c4 100644
--- a/.gitea/workflows/build-windows.yml
+++ b/.gitea/workflows/build-windows.yml
@@ -425,7 +425,19 @@ jobs:
           & $msbuild msi.sln -t:Restore -p:Configuration=Release -p:Platform=x64
           if ($LASTEXITCODE -ne 0) { throw "MSBuild restore failed ($LASTEXITCODE)" }
 
-          & $msbuild msi.sln -p:Configuration=Release -p:Platform=x64 /p:TargetVersion=Windows10
+          # WiX's WindowsInstallerValidation target invokes ICEs through the
+          # local Windows Installer service (msiserver). When the runner user
+          # lacks the COM/RPC rights to that service, every ICE check fails
+          # with WIX0217. Skip ICE validation -- it's a development-time lint,
+          # not a functional requirement, and the produced MSI is identical.
+          # Defensively also nudge the service in case some other validation
+          # path (e.g. signing tools) needs it.
+          try { Start-Service msiserver -ErrorAction SilentlyContinue } catch {}
+
+          & $msbuild msi.sln `
+              -p:Configuration=Release -p:Platform=x64 `
+              /p:TargetVersion=Windows10 `
+              /p:SuppressValidation=true
           if ($LASTEXITCODE -ne 0) { throw "MSBuild build failed ($LASTEXITCODE)" }
 
           Move-Item -Force .\Package\bin\x64\Release\en-us\Package.msi "..\..\SignOutput\rustdesk-${env:VERSION_DISPLAY}-x86_64.msi"