Skip to content

Add Ubuntu 26.04 CVM deployment support and fix NAT association - #44

Merged
Simon Gallagher (vinfnet) merged 11 commits into
Azure-Samples:mainfrom
vinfnet:main
Nov 10, 2026
Merged

Simon Gallagher (vinfnet) merged 11 commits into
Azure-Samples:mainfrom
vinfnet:main

Conversation

@vinfnet

Copy link
Copy Markdown
Contributor

Summary

Add an explicit Ubuntu 26.04 LTS confidential VM deployment option while preserving the existing Ubuntu 24.04 and confidential GPU paths.

  • Add -osType Ubuntu2604 using Canonical:ubuntu-26_04-lts:server-cvm:latest.
  • Persist the subnet NAT Gateway reference directly to address Az.Network versions that drop the association through Set-AzVirtualNetworkSubnetConfig -InputObject.
  • Document usage and successful AMD SEV-SNP v5 and Intel TDX v6 deployments.

Validation

  • Full live deployments succeeded on Standard_DC2as_v5 in North Europe and Standard_DC2es_v6 in West Europe.
  • Both verified Ubuntu 26.04.1 LTS, Secure Boot, vTPM, customer-managed confidential OS disk encryption, Bastion, NAT egress, and compliant CVM attestation.
  • Repository CVM validation and PowerShell parsing passed.
  • Mocked image-selection checks passed for Ubuntu 24.04, Ubuntu 26.04, and the existing Ubuntu 22.04 confidential GPU image.

Branch history / review scope

This PR merges vinfnet:main into Azure-Samples:main. GitHub's merge-base comparison currently lists 19 files, including Service Bus and VMSS additions already present upstream. A conflict-free git merge-tree --write-tree upstream/main origin/main simulation against upstream main 064114c shows the actual merge result changes only:

  • vm-samples/BuildRandomCVM.ps1
  • vm-samples/README.md

Actual merge-result delta: 35 insertions and 9 deletions. The existing upstream GPU support is preserved.

sgallagherMS and others added 11 commits August 19, 2026 20:26
Adds a Confidential VM Scale Set sample that runs a small CPU-bound web app
behind an Application Gateway, with CPU autoscale capped at 5 instances and a
load generator that drives the scale-out from a client machine.

- BuildRandomCVMSS.ps1: resource group (prefix + random suffix), VNet/NSGs,
  NAT Gateway egress, Application Gateway v2, Confidential VMSS (Ubuntu 24.04
  cvm image, SEV-SNP, vTPM + Secure Boot) and autoscale rules
- cloud-init-webapp.yaml: stdlib-only Python app exposing /health, /info and
  /burn, so it starts even with -NoInternetAccess
- Start-VmssLoad.ps1: runspace-based load generator with live capacity reporting
- Instances have no public IP; inbound only via Application Gateway, optional
  Azure Bastion for SSH

Validated end to end in northeurope: scaled 2 -> 5 under load and back to 2,
1152 requests with 0 errors.
Deploy in Korea Central with UAE North fallback, verify passwordless message round trips, and document live and local tests.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Add portal Explorer steps for Entra authentication, JSON payload and ID checks, PeekLock receipt, completion, and empty-queue confirmation.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Add confidential Service Bus Premium messaging example
Add an explicit Ubuntu2604 image option, preserve Ubuntu 24.04, and fix NAT Gateway subnet association. Document successful SNP v5 and TDX v6 deployment and attestation tests.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Add Ubuntu 26.04 CVM deployment support
@vinfnet
Simon Gallagher (vinfnet) merged commit 81b0b5e into Azure-Samples:main Nov 10, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants