Skip to content

chore(vhdbuilder): switch ACL VHD builds to SIG source from acldevel …#8734

Draft
mayankfz wants to merge 1 commit into
Azure:mainfrom
mayankfz:acl/sig-source
Draft

chore(vhdbuilder): switch ACL VHD builds to SIG source from acldevel …#8734
mayankfz wants to merge 1 commit into
Azure:mainfrom
mayankfz:acl/sig-source

Conversation

@mayankfz

Copy link
Copy Markdown

…gallery

Switch ACL and ACL ARM64 Packer templates from marketplace images back to direct shared gallery source (acldevel/acl-grub, acldevel/acl-grub-arm64).

Parameterize gallery, image definition, and version so they can be overridden at pipeline trigger time (for daily ACL validation from mariner-org/ACL).

  • Packer: vhd-image-builder-acl{,-arm64}.json use shared_image_gallery.direct_shared_gallery_image_id
  • Release pipeline: new params aclSigSourceGallery, aclSigSourceImageName, aclSigSourceArm64ImageName, aclImageVersion, aclArm64ImageVersion
  • PR builder: hardcoded to acldevel gallery with 0.20260523.1124361
  • spec: updated ensure_sig_image_name_linux tests for SIG source (no IMG_OFFER)

What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes #

…gallery

Switch ACL and ACL ARM64 Packer templates from marketplace images back to
direct shared gallery source (acldevel/acl-grub, acldevel/acl-grub-arm64).

Parameterize gallery, image definition, and version so they can be overridden
at pipeline trigger time (for daily ACL validation from mariner-org/ACL).

- Packer: vhd-image-builder-acl{,-arm64}.json use shared_image_gallery.direct_shared_gallery_image_id
- Release pipeline: new params aclSigSourceGallery, aclSigSourceImageName, aclSigSourceArm64ImageName, aclImageVersion, aclArm64ImageVersion
- PR builder: hardcoded to acldevel gallery with 0.20260523.1124361
- spec: updated ensure_sig_image_name_linux tests for SIG source (no IMG_OFFER)
Copilot AI review requested due to automatic review settings June 18, 2026 08:15

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the ACL (Azure Container Linux) VHD build flow to source base images from a directly shared SIG instead of marketplace images, and makes the SIG source configurable for release pipeline runs.

Changes:

  • Switch vhd-image-builder-acl{,-arm64}.json to use shared_image_gallery.direct_shared_gallery_image_id built from SIG_SOURCE_* environment variables.
  • Update PR and release pipelines to set (and for release: parameterize) SIG_SOURCE_GALLERY_UNIQUE_NAME, SIG_SOURCE_IMAGE_NAME, and SIG_SOURCE_IMAGE_VERSION for ACL builds.
  • Adjust ShellSpec coverage for ensure_sig_image_name_linux so ACL scenarios no longer rely on IMG_OFFER.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file
File Description
vhdbuilder/packer/vhd-image-builder-acl.json Replace marketplace image source fields with direct shared gallery source for ACL (amd64).
vhdbuilder/packer/vhd-image-builder-acl-arm64.json Replace marketplace image source fields with direct shared gallery source for ACL (arm64).
spec/vhdbuilder/packer/ensure_sig_image_name_linux_spec.sh Update ACL-related tests to reflect that ACL builds no longer set/use IMG_OFFER.
.pipelines/.vsts-vhd-builder.yaml Update PR builder ACL jobs to set SIG_SOURCE_* variables instead of IMG_*.
.pipelines/.vsts-vhd-builder-release.yaml Add release parameters for ACL SIG source and wire them into ACL job variable setup.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants