Recently I helped develop and use an image building process, based on Packer<\/a>, to regularly create images for a Citrix farm hosted in Microsoft Azure. It’s a pretty sweet solution that is driven from Azure DevOps and results in a very automated deployment that requires little work to update app versions or add\/remove apps. At the time, I quickly evaluated Azure Image Builder<\/a> (also based on Packer but still in Preview back then) but I thought it was too complicated and would still require the same pieces as our Packer solution. But I did decide to come back to Azure Image Builder when there was time (today) and have another look.<\/p>\n The first mission – figure out the resource complexity (compared to Packer by itself).<\/p>\n I believe that one of Microsoft’s failings when documenting these services is their inability to explain the functions of the resources and how they work together. Working primarily in ARM templates, I get to see that stuff (a little). I’ve always felt that understanding the underlying system helps with understanding the solution – it was that way with Hyper-V and that continues with Azure.<\/p>\n A managed identity will be used by an Image Template to authorise Packer to use the imaging process that you are building. A custom role<\/a> is associated with this Managed Identity, granting Packer rights to the resource group that the Shared Image Gallery, Image Definition, and Image Template are stored in.<\/p>\n The Shared Image Gallery is the management resource for images. The only notable attribute in the deployment is the name of the resource, which sadly, is similar to things like Storage Accounts in lacking standardisation with the rest of Microsoft Azure resource naming.<\/p>\n The Image Definition documents your image as you would like to present it to your “customers”.<\/p>\n The Image Definition is associated with the Shared Image Gallery by naming. If your Shared Image Gallery was named “myGallery” then an image definition called “myImage” would actually be named as “myGallery\/myImage”.<\/p>\n The properties document things including:<\/p>\n This is where you will end up spending most of your time while operating the imaging process over time.<\/p>\n The Image Template describes to Packer (hidden by Azure) how it will build your image:<\/p>\n An Image Version, a resource with a messy resource name that will break your naming standards, is created when you build from an Image Template. The name of the Image Version is based on the name of the Image Definition plus an incremental number. If my Image Definition is named “myGallery\/myImage” then the Image Version will be named “myGallery\/myImage\/<unique number>”.<\/p>\n The properties of this resource include a publishing profile, documenting to what regions an image is replicated and how it is stored.<\/p>\n Packer will create a resource group and virtual machine (and associated resources) to build the new image. The way that the virtual machine is networked (public IP address by default) can normally be manipulated by the Image Template when using Packer.<\/p>\n There is a lot more here than with a simple run of Packer. But, Azure Image Builder provides a lot more functionality for making images available to “customers” across an enterprise-scale deployment; that’s really where all the complexity comes from and I guess “releasing” is something that Microsoft knows a lot about.<\/p>\n <\/p>\n","protected":false},"excerpt":{"rendered":" In this post, I will explain the roles of and links\/connections between the various resources used by Azure Image Builder. Background I enjoy the month of July. My customers, all in the Nordics, are off for the entire month and I am working. This year has been a crazy busy one so far, so there … Continue reading “Understanding the Azure Image Builder Resources”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":19832,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_wpcom_ai_launchpad_first_post":false,"footnotes":""},"categories":[5,1],"tags":[170,470,471,472,473,474,468,153],"class_list":["post-22331","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure","category-uncategorized","tag-azure","tag-azure-image-builder","tag-azure-shared-image-gallery","tag-image-definition","tag-image-template","tag-image-version","tag-packer","tag-virtual-machines"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\tThe Resources<\/h2>\n
![\"\"](\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2021\/07\/AzureImageGalleryC.png\")
<\/a><\/p>\nManaged Identity – Microsoft.ManagedIdentity\/userAssignedIdentities<\/h3>\n
Shared Image Gallery – Microsoft.Compute\/galleries\/images<\/h3>\n
Image Definition- Microsoft.Compute\/galleries\/images<\/h3>\n
\n
Image Template – Microsoft.VirtualMachineImages\/imageTemplates<\/h3>\n
\n
\n
Image Version – Microsoft.Compute\/galleries\/images\/versions<\/h3>\n
What Is Not Covered<\/h3>\n
Summary<\/h2>\n