Skip to content

Add Azure Linux 4.0 .NET 11 image graph#1674

Open
richlander wants to merge 6 commits into
mainfrom
richlander/add-azl4-net11-graph
Open

Add Azure Linux 4.0 .NET 11 image graph#1674
richlander wants to merge 6 commits into
mainfrom
richlander/add-azl4-net11-graph

Conversation

@richlander

@richlander richlander commented Jun 11, 2026

Copy link
Copy Markdown
Member

Summary

  • Port the full Azure Linux net11.0 image graph from 3.0 to 4.0
  • Add build, crossdeps, crossdeps-builder, crossdeps-llvm, cross, Android, WebAssembly, FPM, and opt images
  • Register Azure Linux 4.0 net11.0 tags in the manifest

Notable changes

  • Use the Azure Linux 4.0 beta base image
  • Replace AzL 3.0 package names with AzL 4.0 equivalents (dnf, gawk, wget2-wget, zlib-ng-compat-devel, docker-cli)
  • Install PowerShell as a pinned .NET global tool (POWERSHELL_VERSION=7.6.1)
  • Use packaged libbsd-devel/libmd for FreeBSD cross images
  • Patch the local arcade rootfs script to use gpgv for explicit keyring verification on GnuPG 2.4/keyboxd

Fixes #1646

Validation

  • pwsh ./run-tests.ps1
  • Built/smoked: build, crossdeps, crossdeps-builder, crossdeps-llvm, fpm, opt, cross-amd64, cross-x86, cross-loongarch64, cross-freebsd-14-amd64, android, cross-android, android-docker, cross-android-openssl, and webassembly images locally

@richlander
Add Azure Linux 4.0 .NET 11 image graph
5f6ee8a 
Port the Azure Linux 3.0 net11.0 graph to Azure Linux 4.0, including build, crossdeps, cross targets, Android, WebAssembly, FPM, and opt images.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@richlander richlander requested review from a team as code owners June 11, 2026 03:53
@richlander

richlander commented Jun 11, 2026

Copy link
Copy Markdown
Member Author

@sbomer -- PTAL

@richlander

richlander commented Jun 11, 2026

Copy link
Copy Markdown
Member Author

We'll need to decide on rollout.

Plan:

  • Merge this PR
  • Create test PR on runtime targeting main
  • Replace the Azure 3.0 variant of 11.0 images on runtime and delete source Dockerfiles in this repo.

@richlander

richlander commented Jun 11, 2026

Copy link
Copy Markdown
Member Author

FYI @jkotas

@richlander richlander requested a review from sbomer June 11, 2026 19:16
@akoeplinger

akoeplinger commented Jun 11, 2026

Copy link
Copy Markdown
Member

I did a quick diff over AZL3 by overwriting the files for easier review: akoeplinger@aff5127

akoeplinger
akoeplinger reviewed Jun 11, 2026
View reviewed changes
Comment thread src/azurelinux/4.0/net11.0/android/docker/amd64/Dockerfile Outdated
Comment thread src/azurelinux/4.0/net11.0/crossdeps-builder/amd64/Dockerfile
shadow-utils \
tar \
unzip \
wget2-wget \

@akoeplinger akoeplinger Jun 11, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we might want to install wget1-wget if we run into problems with the new wget fork

@am11 am11 Jun 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If we don't have confidence on wget2 package, we can always remove / not install it and let curl take care of download. All our scripts support curl.

Comment thread src/azurelinux/4.0/net11.0/crossdeps-builder/amd64/Dockerfile
sed -i \
-e 's/verify_command = \["gpg"\]/verify_command = ["gpgv"]/' \
-e 's/verify_command += \["--verify", release_gpg_file.name, release_file.name\]/verify_command += [release_gpg_file.name, release_file.name]/' \
/scripts/eng/common/cross/install-debs.py

@akoeplinger akoeplinger Jun 11, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is something we should handle in the arcade scripts, not via sed replacement here

actually it seems to not be needed, we install gnupg2 which provides a working gpg --verify ?

jkotas
jkotas reviewed Jun 11, 2026
View reviewed changes
Comment thread src/azurelinux/4.0/net11.0/build/amd64/Dockerfile Outdated
ENV POWERSHELL_VERSION=7.6.1
RUN dotnet tool install --tool-path /powershell --version ${POWERSHELL_VERSION} PowerShell

FROM mcr.microsoft.com/dotnet/runtime:10.0-azurelinux3.0 AS runtime

@jkotas jkotas Jun 11, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why does this need to depend on AZL3 .NET 10 image?

@richlander richlander Jun 11, 2026 •
edited
Loading

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a temporary workaround. The base issue is that PowerShell isn't yet available in the feed. The PowerShell tool is framework-dependent so we need a runtime to run it. The --copy trick was my idea for one-line runtime deployment.

@richlander richlander Jun 11, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'll switch it to pull powershell and the runtime from the same SDK image. That will make cleanup later easier.

richlander and others added 3 commits June 11, 2026 13:34
@richlander
Remove moby-engine from AZL4 Android Docker image
66a61cd 
Install docker-cli and docker-buildx without weak dependencies so the image retains Docker client/buildx tooling without installing the daemon package.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@richlander
Copy .NET runtime from SDK stage for AZL4
8b84746 
Remove the separate .NET 10 runtime image stage and copy only the runtime files needed by the PowerShell tool from the existing SDK stage.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@richlander
Merge branch 'main' into richlander/add-azl4-net11-graph
b86c606
@richlander

richlander commented Jun 11, 2026

Copy link
Copy Markdown
Member Author

Thanks for the feedback. Updates:

  • Removed moby-engine from the Android Docker image in 66a61cd3. Since docker-cli pulls moby-engine as a weak dependency on AZL 4.0, the image now installs docker-cli/docker-buildx with --setopt=install_weak_deps=False so it keeps Docker client/buildx tooling without the daemon package.
  • Removed the separate mcr.microsoft.com/dotnet/runtime:10.0-azurelinux3.0 stage in 8b847468. The build and crossdeps images now copy the runtime-shaped /usr/share/dotnet files from the SDK stage that is already used to install the PowerShell tool.
  • Leaving wget2-wget for now. I don't see wget1-wget in the current AZL 4.0 beta repo; we can switch later if that package appears or if we hit a wget2-specific issue.
  • Agree the install-debs.py verification workaround belongs in Arcade. Keeping it here for now because AZL 4.0's GnuPG/keyboxd behavior causes gpg --keyring ... --verify ... to ignore the supplied keyring, while gpgv --keyring ... works for this detached-signature verification path.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@akoeplinger akoeplinger akoeplinger left review comments

@jkotas jkotas jkotas left review comments

@mthalman mthalman mthalman approved these changes

@sbomer sbomer Awaiting requested review from sbomer

+1 more reviewer

@am11 am11 am11 left review comments

Reviewers whose approvals may not affect merge requirements

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Azure Linux 4.0 .NET 11 build images — package blockers

6 participants

@richlander @akoeplinger @am11 @jkotas @mthalman @dkurepa