Skip to content

Conversation

@matt-FFFFFF
Copy link
Member

@matt-FFFFFF matt-FFFFFF commented Sep 17, 2025

This pull request makes several improvements to container build and test workflows, enhances cross-platform support for ARM64 builds, and updates development environment configurations for better usability and security. The most significant changes are grouped below.

CI/CD Workflow Improvements

  • The main container release workflow (.github/workflows/container-release.yml) is now triggered on pull requests to the main branch, in addition to tags and manual dispatches. This allows container builds and tests to run automatically on PRs.
  • The Docker image push step is now conditional, only pushing images for tag builds, preventing unnecessary pushes for non-release builds. Artifact attestation is also only generated for tag builds, improving supply chain security. [1] [2]
  • The legacy container test workflow (.github/workflows/legacy-container-test.yml) has been removed, consolidating container build and test logic into the main workflow.

ARM64 Cross-Platform Build Support

  • The Dockerfiles (container/Dockerfile.azterraform, container/Dockerfile.build) have been updated to install and use the correct cross-compilation toolchain (gcc-aarch64-linux-gnu) when building for ARM64, and to set the appropriate compiler environment variables. This ensures reliable builds for multiple architectures. [1] [2]
  • Minor fixes to environment variable syntax and Dockerfile formatting for consistency and correctness. [1] [2]

Dev Container Configuration Enhancements

  • The .devcontainer/devcontainer.json files in managed-files/root, tests/terraform-azure-avm-res-mock, and tests/terraform-azurerm-avm-res-mock have been updated to add container environment variables, grant additional capabilities (SYS_PTRACE, seccomp unconfined), use host networking, and mount the Docker socket. These changes improve debugging, container management, and compatibility with Docker-in-Docker workflows.

Documentation and Editor Settings

  • The Copilot instructions and AGENTS documentation now clarify that changes should be committed after running ./avm pre-commit, ensuring proper workflow for contributors.
  • New VSCode settings files enable Copilot agent features and other useful tools for development in the test directories.

These updates collectively improve build reliability, developer experience, and CI/CD automation for the project.

@azure-verified-modules
Copy link
Contributor

This test run generated changes to the mock modules in this PR. Please review the changes and merge if appropriate, see #293.

@azure-verified-modules
Copy link
Contributor

This test run generated changes to the mock modules in this PR. Please review the changes and merge if appropriate, see #294.

@azure-verified-modules
Copy link
Contributor

This test run generated changes to the mock modules in this PR. Please review the changes and merge if appropriate, see #295.

@azure-verified-modules
Copy link
Contributor

This test run generated changes to the mock modules in this PR. Please review the changes and merge if appropriate, see #296.

…rge) (#296)

This PR was created by the AVM governance test workflow after pre-commit
was run. Please review if the changes should be made to the mock
modules:
<https://github.com/Azure/avm-terraform-governance/actions/runs/17795914169>

Co-authored-by: Azure Verified Modules [bot] <1049636+azure-verified-modules[bot]@users.noreply.github.com>
…merge) (#295)

This PR was created by the AVM governance test workflow after pre-commit
was run. Please review if the changes should be made to the mock
modules:
<https://github.com/Azure/avm-terraform-governance/actions/runs/17795914169>

Co-authored-by: Azure Verified Modules [bot] <1049636+azure-verified-modules[bot]@users.noreply.github.com>
Copy link
Member

@jaredfholgate jaredfholgate left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, just a minor question

@matt-FFFFFF matt-FFFFFF merged commit acdc5b9 into main Sep 17, 2025
4 of 6 checks passed
@matt-FFFFFF matt-FFFFFF deleted the feat/containerArmCgo branch September 17, 2025 13:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants