Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature]: Enable support for Importing TrustedLaunch/VM Guest State VHDs #25077

Open
ld0614 opened this issue Jun 4, 2024 · 2 comments
Open
Assignees
Labels
Compute customer-reported feature-request This issue requires a new behavior in the product in order be resolved. Gap - CLI This is a feature gap with Azure CLI Service Attention This issue is responsible by Azure service team.

Comments

@ld0614
Copy link

ld0614 commented Jun 4, 2024

Description of the new feature

Basically the request is to have feature parity with the AZ CLI which introduced a similar change 2 years ago (Scenario 2) Azure/azure-cli#22275

I would like to be able to export a TrustedLaunch VM and then be able to import the VM again. Our use case is for (cheap) long term archival of decommissioned VMs (some have to be kept around for 10 or so years in case there is a legal dispute or financial auditing etc)

With the latest release of Az.Compute it looks like we can export the VM Guest State VHD so the only missing feature is now the ability to import the Guest State as part of the OS Disk creation.

I am currently having to do this through the AZ CLI as it doesn't appear that New-AzDiskConfig or New-AzDisk offer the parameters equivalent to --security-data-uri and --security-type
$OSDiskImport = az disk create --name $OSDiskName --resource-group $ResourceGroupName --sku "StandardSSD_LRS" --location $Location --source $OSDiskUri --source-storage-account-id $StorageAccount.Id --security-data-uri $VMStateDiskUri --security-type TrustedLaunch --hyper-v-generation V2 --os-type Windows

Proposed implementation details (optional)

In my mind the easiest approach would be to copy the AZ CLI parameters with more PowerShell like names such as -SecurityDataUri and -SecurityType which has an enum with Trustedlaunch and Standard if Confidential computing types aren't going to be supported

I would assume that these map back to existing REST APIs/Interfaces if the AZ CLI is already using them

@ld0614 ld0614 added feature-request This issue requires a new behavior in the product in order be resolved. needs-triage This is a new issue that needs to be triaged to the appropriate team. labels Jun 4, 2024
@microsoft-github-policy-service microsoft-github-policy-service bot added customer-reported needs-triage This is a new issue that needs to be triaged to the appropriate team. and removed needs-triage This is a new issue that needs to be triaged to the appropriate team. labels Jun 4, 2024
@isra-fel isra-fel added Compute Service Attention This issue is responsible by Azure service team. and removed needs-triage This is a new issue that needs to be triaged to the appropriate team. labels Jun 6, 2024
Copy link
Contributor

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @Drewm3, @TravisCragg-MSFT, @nikhilpatel909, @sandeepraichura, @hilaryw29, @GabstaMSFT, @ramankumarlive, @ushnaarshadkhan.

@isra-fel isra-fel added the Gap - CLI This is a feature gap with Azure CLI label Jun 6, 2024
@TravisCragg-MSFT
Copy link
Member

Thanks for the feedback! We are triaging this issue and will update as soon as we can.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Compute customer-reported feature-request This issue requires a new behavior in the product in order be resolved. Gap - CLI This is a feature gap with Azure CLI Service Attention This issue is responsible by Azure service team.
Projects
None yet
Development

No branches or pull requests

5 participants