infra: Add AZL4 builder infrastructure and image acquisition#680
Draft
Britel wants to merge 5 commits into
Draft
infra: Add AZL4 builder infrastructure and image acquisition#680Britel wants to merge 5 commits into
Britel wants to merge 5 commits into
Conversation
Adds AZL4 build pipeline stages with MCR-hosted MIC container, BlobImageManifest class for ACG blob source downloads, and service connection runbook. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
testimages.py runs docker with the short tag (imagecustomizer:1.4.0-1) but docker pull uses the full MCR path. Without a local tag, docker run fails with 'pull access denied'. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
AZL4 base VHDXes may continue to come from blob storage rather than the ADO feed. The trident-service RPM will come from an AZL4 package repo, not ADO. Update comments to reflect this. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contains internal infrastructure details (UAMI names, principal IDs, subscription IDs, FIC configuration) that should not be published to a public GitHub repository. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds the CI pipeline infrastructure to build AZL4 test images: base VHDX acquisition from the AZL preview gallery, MIC container from MCR, blob download tooling, and the AZL4 build pipeline stages.
Part 4 of the AZL4 enablement stack. Depends on PR #679 (BLS entry support).
Changes
Base VHDX acquisition
azlpubdev2mruiyvi/images-dev)4.0.2026051502(Beta build)blobSubscriptionparameter for cross-subscription context (storage account is in a different subscription than the service connection)BlobImageManifestwithfile_suffix=".vhdfixed"for the gallery's VHD formatMIC container
imagecustomizer:1.4.0-1from MCR (AZL4 support included)testimages.pycan reference by short namePipeline stages
build-image-azl4.yml— AZL4 stage wrapper (mirrors AZL3'sbuild-image.yml)build-image-template-azl4.yml— AZL4 step template (blob download + MIC build)Blob download tooling
download.py—download_blob_image()with date-versioned blob selection and atomic downloadBlobImageManifestdataclass inbuilder/__init__.py_BLOB_NAME_VERSION_REregex for AZL4 date format (4.0.YYYYMMDDNN)Testing
PR Stack