Skip to content
Open
Changes from 1 commit
Commits
Show all changes
56 commits
Select commit Hold shift + click to select a range
29b1603
update 1ES pipeline
wonwuakpa-msft Sep 25, 2025
84110b6
make optional
wonwuakpa-msft Sep 25, 2025
1955f6e
fix pipeline
wonwuakpa-msft Sep 25, 2025
11ea3ca
change for only release jobs
wonwuakpa-msft Sep 25, 2025
15a0f08
need artifactName
wonwuakpa-msft Sep 25, 2025
a3fe718
Merge branch 'main' into wendi/fix-1es-pipeline
wonwuakpa-msft Oct 7, 2025
5cc8dc8
use consistent pool config
wonwuakpa-msft Oct 8, 2025
f1fa4e2
Merge branch 'main' into wendi/fix-1es-pipeline
wonwuakpa-msft Oct 8, 2025
814c5cf
Merge branch 'main' into wendi/fix-1es-pipeline
wonwuakpa-msft Oct 15, 2025
aac738d
pull
wonwuakpa-msft Oct 15, 2025
24d43b4
mc
wonwuakpa-msft Oct 15, 2025
79496f6
fix 1es pipeline issue
wonwuakpa-msft Oct 15, 2025
bf82989
remove sbom path from task
wonwuakpa-msft Oct 15, 2025
3667757
change sbom drop path
wonwuakpa-msft Oct 15, 2025
29e55a8
Merge branch 'main' of https://github.com/Azure/azure-storage-azcopy …
wonwuakpa-msft Oct 15, 2025
62ed015
changed build drop path
wonwuakpa-msft Oct 16, 2025
e8858ab
move manifest to signed dir
wonwuakpa-msft Oct 16, 2025
e254a24
add sbom param as unsigned to verifyartifacts stage
wonwuakpa-msft Oct 16, 2025
4fce592
Merge branch 'main' into wendi/fix-1es-pipeline
wonwuakpa-msft Oct 16, 2025
a1035d6
release to gh
wonwuakpa-msft Oct 16, 2025
b5821aa
Merge branch 'wendi/fix-1es-pipeline' of https://github.com/Azure/azu…
wonwuakpa-msft Oct 16, 2025
8ab7e19
1es fix
wonwuakpa-msft Oct 16, 2025
1b84cfc
separate out OS build artifacts
wonwuakpa-msft Oct 17, 2025
33b9bc7
windows only
wonwuakpa-msft Oct 17, 2025
4a4ec63
windows fix
wonwuakpa-msft Oct 17, 2025
7ddd399
add targetPath param to pipelineArtifact output
wonwuakpa-msft Oct 17, 2025
4059460
removed dep
wonwuakpa-msft Oct 17, 2025
d7b9008
another one
wonwuakpa-msft Oct 17, 2025
6941f80
make releasejob find previous artifact
wonwuakpa-msft Oct 17, 2025
2ef5e75
add builddroppath param to releasejob
wonwuakpa-msft Oct 17, 2025
8cc3a6f
itemPatter, sbomPath, targetPath
wonwuakpa-msft Oct 21, 2025
a8eea59
just windows
wonwuakpa-msft Oct 21, 2025
0759dc8
add other stages
wonwuakpa-msft Oct 21, 2025
b34cdfe
windows job
wonwuakpa-msft Oct 22, 2025
8793090
verify artifacts
wonwuakpa-msft Oct 22, 2025
4c3a019
removed sbom
wonwuakpa-msft Oct 24, 2025
01f3c0e
change to buildartifact dir
wonwuakpa-msft Oct 24, 2025
f133217
no downloadPath
wonwuakpa-msft Oct 24, 2025
5172c84
path seperator
wonwuakpa-msft Oct 24, 2025
c2a1751
vmImage ubuntu
wonwuakpa-msft Oct 24, 2025
e043d25
added os specficiation
wonwuakpa-msft Oct 24, 2025
72eb0c1
migrate to managed identity auth
wonwuakpa-msft Oct 24, 2025
e0ea9a9
wif auth, uncommented out other stages
wonwuakpa-msft Oct 27, 2025
2f3be54
Merge branch 'main' into wendi/fix-1es-pipeline
wonwuakpa-msft Oct 27, 2025
9bea212
verify Sign & RemoveLinux steps
wonwuakpa-msft Oct 28, 2025
21b2b21
Merge branch 'wendi/fix-1es-pipeline' of https://github.com/Azure/azu…
wonwuakpa-msft Oct 28, 2025
965d9bc
revert bk to creds
wonwuakpa-msft Oct 28, 2025
ba4a893
pmc installation from main
wonwuakpa-msft Oct 29, 2025
c3fd8d1
use cert for test PMC installation
wonwuakpa-msft Nov 7, 2025
52aba3e
use AZCLI task for testing pmc install instead
wonwuakpa-msft Nov 7, 2025
9052a1f
final version, all stages in
wonwuakpa-msft Nov 7, 2025
850d279
final version
wonwuakpa-msft Nov 7, 2025
c79f2f3
removed pipeline artifact output path
wonwuakpa-msft Nov 7, 2025
96bba24
added param validation
wonwuakpa-msft Nov 7, 2025
d531e08
param valid
wonwuakpa-msft Nov 9, 2025
34eff13
Merge branch 'main' into wendi/fix-1es-pipeline
wonwuakpa-msft Nov 10, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
93 changes: 91 additions & 2 deletions build-1es-pipeline.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -36,6 +36,12 @@ parameters:
displayName: 'Test PMC Connection without Publishing Artifacts to Linux Repos'
type: boolean
default: false

- name: remove_packages
displayName: 'Remove Linux Packages'
type: string
default: ''

# Do not trigger this pipeline automatically
trigger: none
pr: none
Expand Down Expand Up @@ -984,7 +990,10 @@ extends:
- AzCopyVersion
- VerifyArtifacts
jobs:
- job: Job
- job: ReleaseJob
templateContext:
type: releaseJob
isProduction: true
pool:
name: azcopy-pool
image: ubuntu22-1espt
Expand Down Expand Up @@ -1215,4 +1224,84 @@ extends:
echo "Repo Name: $repoName"
pmc --auth-type wif --base-url "https://pmc-ingest.trafficmanager.net/api/v4" repo publish $repoName
fi
done < <(tail -n +3 ../packages.csv)
done < <(tail -n +3 ../packages.csv)

- ${{ if ne(parameters.remove_packages, '') }}:
- stage: RemovePackagesFromLinuxRepository
jobs:
- job: RemovePackages
timeoutInMinutes: 120
pool:
vmImage: 'ubuntu-22.04'
variables:
- group: AZCOPY_SECRET_VAULT
steps:
- checkout: none

- task: PipAuthenticate@1
inputs:
artifactFeeds: 'DevExGlobalFeed'
displayName: 'Connect to PMC artifact'

- script: |
sudo apt-get clean
sudo apt-get update --fix-missing
sudo apt-get install -y tree
displayName: 'Install Dependencies'

- script: |
pip install pmc-cli
echo '##vso[task.prependpath]$(HOME)/.local/bin'
displayName: 'Install pmc-cli'

- task: DownloadSecureFile@1
name: pmcCertificate
displayName: 'Download pmc pem file'
inputs:
secureFile: 'blobfusebuildvault-blobfuse-release-pmc1-20230911.pem'

- task: DownloadSecureFile@1
name: settings
displayName: 'Download settings.toml file'
inputs:
secureFile: 'settings.toml'

- script: |
pmc --version
pmc --msal-cert-path $(pmcCertificate.secureFilePath) --config $(settings.secureFilePath) repo list --limit 1
if [ $? -ne 0 ]; then
exit 1
fi
displayName: 'Test PMC installation'

- script: |
pkg_id_list=$(pmc --msal-cert-path $(pmcCertificate.secureFilePath) --config $(settings.secureFilePath) package deb list --name azcopy --version ${{parameters.remove_packages}})

# Loop over all the results and extract the package id for each one
for PKG_ID in $(echo "$pkg_id_list" | jq -r '.results[].id'); do
echo "Processing Package ID: $PKG_ID" # Debugging line
pkg_repo_names=$(pmc --msal-cert-path $(pmcCertificate.secureFilePath) --config $(settings.secureFilePath) repo list --package "$PKG_ID")

for REPO_NAME in $(echo "$pkg_repo_names" | jq -r '.results[].name'); do
echo "Found repo: $REPO_NAME $PKG_ID" # Debugging line
pmc --msal-cert-path $(pmcCertificate.secureFilePath) --config $(settings.secureFilePath) repo package update --remove-packages $PKG_ID $REPO_NAME
pmc --msal-cert-path $(pmcCertificate.secureFilePath) --config $(settings.secureFilePath) repo publish $REPO_NAME
done
done
displayName: 'Remove deb packages from the repository'

- script: |
pkg_id_list=$(pmc --msal-cert-path $(pmcCertificate.secureFilePath) --config $(settings.secureFilePath) package rpm list --name azcopy --version ${{parameters.remove_packages}})

# Loop over all the results and extract the package id for each one
for PKG_ID in $(echo "$pkg_id_list" | jq -r '.results[].id'); do
echo "Processing Package ID: $PKG_ID" # Debugging line
pkg_repo_names=$(pmc --msal-cert-path $(pmcCertificate.secureFilePath) --config $(settings.secureFilePath) repo list --package "$PKG_ID")

for REPO_NAME in $(echo "$pkg_repo_names" | jq -r '.results[].name'); do
echo "Found repo: $REPO_NAME $PKG_ID" # Debugging line
pmc --msal-cert-path $(pmcCertificate.secureFilePath) --config $(settings.secureFilePath) repo package update --remove-packages $PKG_ID $REPO_NAME
pmc --msal-cert-path $(pmcCertificate.secureFilePath) --config $(settings.secureFilePath) repo publish $REPO_NAME
done
done
displayName: 'Remove rpm packages from the repository'
Loading