Skip to content

Conversation

@mthalman
Copy link
Member

@mthalman mthalman commented Nov 4, 2025

Fixes dotnet/source-build#5342

  • Updates download-source-built-archive.sh to take the encoded storage key that can be used to access the internal blob storage location.
    • The internal URL will be used whenever the artifact version contains the servicing label.
  • Updates the pipeline to pass in the storage key by calling the enable-internal-runtimes.yml template from Arcade which dynamically creates a SAS token and sets it to the dotnetbuilds-internal-container-read-token-base64 variable.

DownloadArchive "source-built SDK" "PrivateSourceBuiltSdkVersion" false "${{ parameters.artifactsRid }}" "$(sourcesPath)/prereqs/packages/archive/"
displayName: Download Previously Source-Built SDK
- ${{ if eq(variables['System.TeamProject'], 'internal') }}:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should be unnecessary. The template doesn't do anything if the project is public

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed in 53b1248

baseUrl="https://ci.dot.net/public/source-build"
# Determine CI location based on version suffix
if [[ $isServicingArchiveVersion == true ]]; then
baseUrl="https://ci.dot.net/internal/source-build"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it correct to assume that the SB archive will always be on internal? Typically, what we've done is pass in alternate storage paths+creds to the download functionality. The download code then attempts to first find the asset on public storage, falling back to internal with auth if it gets a 404.

I prefer this approach in general because it has fewer issues at boundary times.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed in b69b671


local isServicingArchiveVersion=false
if [[ "$archiveVersion" == *"servicing"* ]]; then
isServicingArchiveVersion=true
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I wouldn't assume location based on servicing or not. An RC might be internal too, for instance. Instead, I'd use an approach where we look in a default public location first, then go to an alternate provided location after that.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed in b69b671

@mthalman mthalman requested a review from mmitche November 5, 2025 16:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

2 participants