Docker-Linux-Arm-Internal build pool must be moved to Azure Linux 3.0

[lbussell]

The "Docker-Linux-Arm-Internal" pool contains one image, "Mariner-2-Docker-ARM64". CBL Mariner 2.0 is EOL as of today. We need a new build image containing Azure Linux 3.0. This migration is critical to ensuring that our pipelines and .NET builds are secure.

Release Note Category

• Feature changes/additions
• Bug fixes
• Internal Infrastructure Improvements

Release Note Description

[epananth]

Update the image to use

Name: AzureLinux.3.Arm64
OperatingSystemId: Linux-AzureLinux-3.0-ARM64

Keep both images for now and leave mariner-2 is the default. That is hooked up to prod and we don't want to break it

[epananth]

created the image here https://ms.portal.azure.com/?feature.customportal=false#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/%2Fsubscriptions%2F84a65c9a-787d-45da-b10a-3a1cefce8060%2FresourceGroups%2FDockerARM%2Fproviders%2FMicrosoft.Resources%2Fdeployments%2FAzure-Linux-3-Docker-ARM64/packageId//primaryResourceId/%2Fsubscriptions%2F84a65c9a-787d-45da-b10a-3a1cefce8060%2Fresourcegroups%2FDockerARM%2Fproviders%2FMicrosoft.CloudTest%2Fimages%2FAzure-Linux-3-Docker-ARM64/createBlade~/%7B%22extension%22%3A%22Microsoft_Azure_CloudTest%22%2C%22telemetryId%22%3A%2286df792e-6197-4681-ac52-3f6ee6c27034%22%7D

[epananth]

We had a minor hiccup with permissions but I was able to update the pool. Waiting for confirmation from Logan to close this

[lbussell]

The new image is now working, but it's missing Azure CLI which is needed to log in to Azure resources:

##[error]Azure CLI 2.x is not installed on this machine.

The error is from this pipeline run (internal link): https://dev.azure.com/dnceng/internal/_build/results?buildId=2765288&view=logs&j=e8c26a7e-0adc-5510-ad26-8ef4bd7168f6&t=f1885a89-166f-5075-413d-e685f085439d&l=83

[lbussell]

I think that we will also need an equivalent image for our public pool (for PR validation).

Pool: Docker-Linux-Arm-Public
Example of a pipeline run that's using that pool with the old image, "Mariner-2-Docker-ARM64": https://dev.azure.com/dnceng-public/public/_build/results?buildId=1116967&view=logs&j=e27bb03b-8ee4-51d2-159a-afc23d6ec395&t=4ba5040f-7402-460f-844e-54323f03ca56&l=7

I'm not sure if the image is identical or if it is a similar image that excludes the 1ESPT artifact.

[epananth]

@garath will help with this one. Thanks so much Stu :)

[epananth]

This is the image I created using 1ES image base image

https://ms.portal.azure.com/#@microsoft.onmicrosoft.com/resource/subscriptions/84a65c9a-787d-45da-b10a-3a1cefce8060/resourceGroups/DockerARM/providers/Microsoft.CloudTest/images/Azure-Linux-3-Docker-ARM64/overview

[lbussell]

@garath, do you have an ETA on adding Azure CLI? This is blocking us from moving off of an EOL OS (Mariner 2.0).