Need to replicate docker image from public cloud to mooncake/fairfax

Can I use these steps somewhere in my one branch release pipeline? Will that work? Will I be able to login to MC/FF ACR from one branch pipeline?

Hi himanshi jain

yes you can set up the pipeline to trigger from a specific branch, you need to choose the branch in the pipeline trigger

Create a Service Principal for source ACR and destination ACR

To create SP for source ACR

az ad sp create-for-rbac --name "acr-source-sp" --role "Reader" --scope /subscriptions/{subscription-id}/resourceGroups/{resource-group-name}/providers/Microsoft.ContainerRegistry/registries/{source-acr-name}

To create SP for destination ACR

az ad sp create-for-rbac --name "acr-destination-sp" --role "Contributor" --scope /subscriptions/{subscription-id}/resourceGroups/{resource-group-name}/providers/Microsoft.ContainerRegistry/registries/{destination-acr-name}

you will get this

Save the clientId, clientSecret, and tenantId and use when creating the Service Connection.

we need to service connection

service connections are necessary for Azure DevOps to authenticate and interact with Azure resources

Service Connections are created in Azure DevOps under the Project Settings > Service Connections section.

You need to create separate service connections for each Azure Container Registry in each of your environments (public cloud, Mooncake, and Fairfax).

while creatng service connection for mooncake and firefox

Navigate to Project Settings > Service Connections > New Service Connection.

Select Azure Container Registry.

it will prompted to authenticate and select the Azure Subscription but you will need to explicitly set the Cloud Environment.

For Azure Mooncake select the Azure China Cloud environment.

can you please try below YAML file

trigger:
  branches:
    include:
      - main  # <select your branch>
variables:
  sourceRegistry: <public-acr-name>.azurecr.io
  targetRegistry: <mooncake-acr-name>.azurecr.cn # use domain of mooncake and firefox
  imageName: <image-name>
  imageTag: latest  
jobs:
- job: PullAndPushImage
  displayName: 'Pull Image from Public Cloud and Push to Mooncake/Fairfax ACR'
  pool:
    vmImage: '<pool name>'
  steps:
  
Login to Public Azure ACR (Source Cloud)
  - task: AzureCLI@2
    inputs:
      azureSubscription: '<Public-Cloud-Service-Connection>'  # Replace with your Service Connection name for Public Azure
      scriptType: 'bash'
      scriptLocation: 'inlineScript'
      inlineScript: |
        echo "Logging in to Public Cloud ACR"
        az acr login --name $(sourceRegistry)
Pull the image from the source ACR
  - task: Docker@2
    inputs:
      command: 'pull'
      containerRegistry: $(sourceRegistry)
      repository: $(imageName)
      tags: $(imageTag)
Login to Mooncake/Fairfax ACR (Target Cloud)
  - task: AzureCLI@2
    inputs:
      azureSubscription: '<Mooncake-Fairfax-Service-Connection>'  # Replace with your Service Connection name for Mooncake/Fairfax
      scriptType: 'bash'
      scriptLocation: 'inlineScript'
      inlineScript: |
        echo "Logging in to Mooncake/Fairfax ACR"
        az acr login --name $(targetRegistry)
Tag the image for the target ACR (Mooncake/Fairfax)
  - task: Docker@2
    inputs:
      command: 'tag'
      containerRegistry: $(targetRegistry)
      repository: $(imageName)
      tags: $(imageTag)
      imageName: "$(sourceRegistry)/$(imageName):$(imageTag)"
    
Push the image to the target ACR (Mooncake/Fairfax)
  - task: Docker@2
    inputs:
      command: 'push'
      containerRegistry: $(targetRegistry)
      repository: $(imageName)
      tags: $(imageTag)

If you have any further queries, let me know. If the information is helpful, please click on Upvote.

Thank you.

Hi himanshi jain

Just checking in to see if you had a chance to review the response provided to your question.

Feel free to reach out if you have any further queries.

If you found the information helpful, please click "Upvote" on the post to let us know and consider accepting the answer as the token of appreciation.

Thank You.