Skip to content

Conversation

@cwize1
Copy link
Contributor

@cwize1 cwize1 commented Oct 22, 2025

Add API that allows an Azure Linux image to be specified as a base] image. This is mostly just syntactic sugar around the OCI API except that the OCI artifact's signature is checked against the known Azure Linux Certificate Authority.


Checklist

  • Tests added/updated
  • Documentation updated (if needed)
  • Code conforms to style guidelines

Add API that allows an Azure Linux image to be specified as a base]
image. This is mostly just syntactic sugar around the OCI API except
that the OCI artifact's signature is checked against the known Azure
Linux Certificate Authority.
@cwize1 cwize1 requested a review from a team as a code owner October 22, 2025 23:45
CertificateFsPath string
}

func checkNotationSignature(ctx context.Context, buildDir string, remoteRepo *remote.Repository,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could we consider updating this function to reuse subfunctions and improve readability?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't understand. I don't believe there is any duplicated code in this function.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The current implementation is all inline, but I think breaking it down could make it clearer. Could you try refactoring it into smaller subfunctions?

ancestor: Image Customizer
---

# azureLinuxImage type
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do we expect customers to always use azureLinuxImage if they are using AZL images ? when should one use OCI image type

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Customers should use the dedicated API. The OCI is a generic API that can be used for debug (e.g. private ACR) and/or with other distros.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we add a note in the OCI documentation mentioning that there is a dedicated azureLinuxImage API and provide a link to it?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants