Add support for a AzureLinux 3 build pool image

[jkoritzinsky]

As CBL-Mariner 2.0 is hitting EOL in a few months, we'd like to move off of the 1es-mariner-2 images. However, there's no AzureLinux 3 1ES image available according to helix.dot.net. Can we get a 1ES AzureLinux 3 image to use before Mariner hits EOL?

cc: @richlander
Related: dotnet/arcade#15486

Release Note Category

• Feature changes/additions
• Bug fixes
• Internal Infrastructure Improvements

Release Note Description

[richlander]

What is that queue/VM used for?

[riarenas]

1ES doesn't seem to have an Azure Linux 3 image available for use with the 1ES pipeline templates yet. The 1ES-* labeled images we get directly from them: https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/onboardingesteams/create-agent-image

So it might be worth asking if there's a plan to add an Azure Linux 3 image.

[dougbu]

we also don't really recommend using the 1es-* images. they're kitchen sinks and have all of the downsides you can imagine related to the software nobody in .NET needs

[ilyas1974]

There is currently a work item for the 1ES team to add support for AzureLinux 3 - https://dev.azure.com/mseng/1ES/_workitems/edit/2209402. Once that work is completed, we can incorporate it into our system.

[dougbu]

we should not create or use a 1ES image of any type. the Marketplace contains a useful base image for Azure Linux 3, one we already use for Helix VMs. that's what we should start from

the future of 1es-* build pool images in general should be very much in doubt. 1ES themselves do not recommend their use beyond an initial startup

[dougbu]

@ilyas1974 I suggest removing "1ES" from the issue title. as-is, it sounds like we'll create a new image based on a 1ES base image. at most, we'll make sure the new image contains the 1ES prerequisites and add the new image to our 1ES hosted pools. too many 1ESes 😁

[richlander]

Is this image now ready? This is now a higher priority. I was under the impression we had a build image but I am not sure what it is called.

We need to start acting on dotnet/arcade#15486.

[chcosta]

Here's my WIP PR - https://dev.azure.com/dnceng/internal/_git/dotnet-helix-machines/pullrequest/50629

I briefly looked at this while I was on ops, but I didn't make much progress and i haven't circled back to determine why. Putting this issue back on the backlog for someone else to pick up.