chore: cache oras binary in Windows image by jiashun0011 · Pull Request #7860 · Azure/AgentBaker

jiashun0011 · 2026-02-12T07:03:16Z

What this PR does / why we need it:

Cache oras binary in Windows image.

Which issue(s) this PR fixes:

Chore: cache oras binary in Windows image

github-actions · 2026-02-12T07:03:56Z

Changes cached containers or packages on windows VHDs

Please get a Windows SIG member to approve.

The following dif file shows any additions or deletions from what will be cached on windows VHDs organised by VHD type.

Additions are new things cached.
Deletions are things no longer cached.

diff --git a/vhd_files/2019-containerd.txt b/vhd_files/2019-containerd.txt
index 17dbc7d..013c301 100644
--- a/vhd_files/2019-containerd.txt
+++ b/vhd_files/2019-containerd.txt
@@ -15,0 +16 @@ c:\akse-cache\csi-proxy\: https://packages.aks.azure.com/csi-proxy/v1.1.2-hotfix
+c:\akse-cache\oras\: https://github.com/oras-project/oras/releases/download/v1.2.2/oras_1.2.2_windows_amd64.zip
diff --git a/vhd_files/2022-containerd-gen2.txt b/vhd_files/2022-containerd-gen2.txt
index 0209fde..5ba7057 100644
--- a/vhd_files/2022-containerd-gen2.txt
+++ b/vhd_files/2022-containerd-gen2.txt
@@ -16,0 +17 @@ c:\akse-cache\csi-proxy\: https://packages.aks.azure.com/csi-proxy/v1.1.2-hotfix
+c:\akse-cache\oras\: https://github.com/oras-project/oras/releases/download/v1.2.2/oras_1.2.2_windows_amd64.zip
diff --git a/vhd_files/2022-containerd.txt b/vhd_files/2022-containerd.txt
index 73642bd..b61c807 100644
--- a/vhd_files/2022-containerd.txt
+++ b/vhd_files/2022-containerd.txt
@@ -16,0 +17 @@ c:\akse-cache\csi-proxy\: https://packages.aks.azure.com/csi-proxy/v1.1.2-hotfix
+c:\akse-cache\oras\: https://github.com/oras-project/oras/releases/download/v1.2.2/oras_1.2.2_windows_amd64.zip
diff --git a/vhd_files/2025-gen2.txt b/vhd_files/2025-gen2.txt
index 0f7e754..7e7797a 100644
--- a/vhd_files/2025-gen2.txt
+++ b/vhd_files/2025-gen2.txt
@@ -13,0 +14 @@ c:\akse-cache\csi-proxy\: https://packages.aks.azure.com/csi-proxy/v1.1.2-hotfix
+c:\akse-cache\oras\: https://github.com/oras-project/oras/releases/download/v1.2.2/oras_1.2.2_windows_amd64.zip
diff --git a/vhd_files/2025.txt b/vhd_files/2025.txt
index f80e2a6..8c3042b 100644
--- a/vhd_files/2025.txt
+++ b/vhd_files/2025.txt
@@ -13,0 +14 @@ c:\akse-cache\csi-proxy\: https://packages.aks.azure.com/csi-proxy/v1.1.2-hotfix
+c:\akse-cache\oras\: https://github.com/oras-project/oras/releases/download/v1.2.2/oras_1.2.2_windows_amd64.zip
diff --git a/vhd_files/23H2-gen2.txt b/vhd_files/23H2-gen2.txt
index 3d8175c..89f7956 100644
--- a/vhd_files/23H2-gen2.txt
+++ b/vhd_files/23H2-gen2.txt
@@ -14,0 +15 @@ c:\akse-cache\csi-proxy\: https://packages.aks.azure.com/csi-proxy/v1.1.2-hotfix
+c:\akse-cache\oras\: https://github.com/oras-project/oras/releases/download/v1.2.2/oras_1.2.2_windows_amd64.zip
diff --git a/vhd_files/23H2.txt b/vhd_files/23H2.txt
index 4ef680f..61d01f9 100644
--- a/vhd_files/23H2.txt
+++ b/vhd_files/23H2.txt
@@ -14,0 +15 @@ c:\akse-cache\csi-proxy\: https://packages.aks.azure.com/csi-proxy/v1.1.2-hotfix
+c:\akse-cache\oras\: https://github.com/oras-project/oras/releases/download/v1.2.2/oras_1.2.2_windows_amd64.zip

Copilot

Pull request overview

Adds Windows support for caching the oras CLI as part of the Windows VHD build cache, by extending the shared components manifest.

Changes:

Added windowsDownloadLocation for the oras package.
Added a Windows-specific downloadURIs.windows.default entry for oras (v1.2.2).

Copilot · 2026-02-12T07:06:11Z

parts/common/components.json

+        "windows": {
+          "default": {
+            "versionsV2": [
+              {
+                "renovateTag": "<DO_NOT_UPDATE>",
+                "latestVersion": "1.2.2"
+              }
+            ],
+            "downloadURL": "https://github.com/oras-project/oras/releases/download/v${version}/oras_${version}_windows_amd64.zip"
+          }


The Windows oras version here (1.2.2) doesn’t match the oras version currently used during Windows VHD build for OCI pulls (vhdbuilder/packer/windows/configure-windows-vhd.ps1 hardcodes 1.2.3). This creates version drift and can result in downloading/storing two different oras zips in a single build (extra time/space) while the cached copy may never be used. Consider aligning the version with what the VHD build uses, and ideally sourcing the oras version from a single place (e.g., components.json) to prevent future divergence.

@jiashun0011
found function Pull-OCIArtifact, it hardcode to install v1.2.3 oras and installed seems only in aksTempDir "c:\akstemp". I guess it is not impleted for cse runtime?
cc @abeltrano

maybe we can change the cache version to v1.2.3
and in Pull-OCIArtifact, we modify to detect cached version first, wdyt?

fseldow · 2026-02-12T08:52:40Z

parts/common/components.json

    {
      "name": "oras",
      "downloadLocation": "/opt/bin",
+      "windowsDownloadLocation": "c:\\akse-cache\\oras\\",


akse-cache will be removed finally.
Do you think we should move the oras.exe to another place to keep it? e.g. c:/aks-tools/oras/oras.exe?

good point, let's use the future location to avoid problems in the future.

where can I learn more about the deprecation of the akse-cache folder ?

i think it should happen during NodePrep

AgentBaker/parts/windows/kuberneteswindowssetup.ps1

Line 522 in f5a1abc

if (Test-Path $CacheDir)

i just created on windows node, kubectl enter this node but did not find c:\akse-cache

As far as I'm aware, we have no plans to remove the aks-cache directory. It's used during node provisioning and it's probably deleted after the node joins the cluster to save drive space.

fseldow · 2026-02-12T08:57:06Z

parts/common/components.json

+                "latestVersion": "1.2.2"
+              }
+            ],
+            "downloadURL": "https://github.com/oras-project/oras/releases/download/v${version}/oras_${version}_windows_amd64.zip"


from Get-PackagesToCacheOnVHD
i think it will only download the zip file in download path. Do we still need function to unzip it?

djsly · 2026-02-12T12:26:49Z

parts/common/components.json

+          "default": {
+            "versionsV2": [
+              {
+                "renovateTag": "<DO_NOT_UPDATE>",


why not setting up renovate to fetch the version from github and have automatic PR created for ORAS.

djsly · 2026-02-12T12:28:28Z

parts/common/components.json

+            "versionsV2": [
+              {
+                "renovateTag": "<DO_NOT_UPDATE>",
+                "latestVersion": "1.2.2"


1.2.3 is out, same as 1.3.0 shoudlnt we pick one of those two ?

timmy-wright

I'm confused. For windows, Oras seems to be only used during VHD creation. It's not needed (as far as I can tell) during node provisioning. So we don't need it cached on the VHD. Ideally it would be used to pull OCI Artifacts and then deleted afterwards.

If we want to update the version, we can do this in the configure-windows-vhd.ps1 file. Currently it's set to 1.2.3. We probably need a better way to specify this, but I don't think components.json is the right place.

chore: cache oras binary in Windows image

c999447

Copilot AI review requested due to automatic review settings February 12, 2026 07:03

jiashun0011 temporarily deployed to test February 12, 2026 07:03 — with GitHub Actions Inactive

github-actions bot added the components This pull request updates cached components on Linux or Windows VHDs label Feb 12, 2026

Copilot started reviewing on behalf of jiashun0011 February 12, 2026 07:03 View session

Copilot AI reviewed Feb 12, 2026

View reviewed changes

fseldow reviewed Feb 12, 2026

View reviewed changes

djsly reviewed Feb 12, 2026

View reviewed changes

timmy-wright requested changes Feb 12, 2026

View reviewed changes

Conversation

jiashun0011 commented Feb 12, 2026

Uh oh!

github-actions bot commented Feb 12, 2026

Changes cached containers or packages on windows VHDs

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

fseldow Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

fseldow Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

fseldow Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

djsly Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

fseldow Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

timmy-wright Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

fseldow Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

djsly Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

djsly Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

timmy-wright left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

fseldow Feb 12, 2026 •

edited

Loading

djsly Feb 12, 2026 •

edited

Loading

timmy-wright left a comment •

edited

Loading