Deploy Azure Container Registry with disconnected operations on Azure Local (preview)

This article explains how to deploy and manage Azure Container Registry on disconnected operations running on Azure Local. It provides an overview of the service, prerequisites, deployment steps, and how to manage images in the registry.

About Azure Container Registry

Azure Container Registry on disconnected operations is a managed registry service. This service lets you build, store, and manage container images and artifacts in a private registry for all types of container deployments. With Azure Container Registry, you can:

• Create and manage container registries by using these interfaces:
  • User portal (disconnected operations)
  • PowerShell
  • Azure Command-Line Interface (CLI)
  • Docker Command Line Interface (CLI).
• Store and retrieve Open Container Initiative (OCI) images.
• Assign role-based access control (RBAC) permissions.
• Create webhooks.
• Manage a local repository of images via a local container registry.
  • This registry is part of a continuous integration and continuous delivery (CI/CD) pipeline.
  • It's designed for deployment to Azure Kubernetes Service or other supported container orchestrators on disconnected operations.

Key features of Azure Container Registry on disconnected operations include:

Prerequisites

• Make sure that the disconnected operations virtual machine is deployed.
• Check that you can access the disconnected operations portal.
• Register the Microsoft.ContainerRegistry resource provider with disconnected operations.
• Install the Azure CLI (supported up to version 2.54.0).
• (Optional) Install Docker Desktop on your disconnected operations host or client machine for testing.

Deploy Azure Container Registry for disconnected operations

To deploy an Azure Container Registry for disconnected operations, follow these steps:

1. Sign in to the Azure Local portal and navigate to the Create a resource page.

2. Select Create a resource > Containers > Container Registry.

   

3. On the Basics tab, enter values for Subscription, Resource group, Registry name, Location, and Pricing plan.

   • The registry name must be unique in Azure and have 5-50 alphanumeric characters.
   • For Location, select Autonomous and for Pricing plan, select Standard.

   

4. Select Review + create. Review your settings and select Create.

5. When the Your deployment is complete message appears, select the container registry in the portal.

6. Note your registry name and the value of the Login server.

   • In Azure cloud, the login server is a fully qualified name ending with azurecr.io.
   • You need these values to push and pull images with Docker.

   

Assign RBAC to a container registry

In this section, you assign RBAC to a container registry on disconnected operations. For more information, see Registry roles and permissions - Azure Container Registry.

To assign the AcrPull role to a user and check the role assignment using the Docker CLI, follow these steps:

1. Navigate to your container registry and select Access Control (IAM).

2. Select Add role assignment in the Grant access to this resource box.

   

3. Filter the list of roles by Category = Containers. Select the appropriate role, then select Next.

   

4. Select +Select members, choose the member you want to add to the role, select the Select button, and select Next.

   

5. Review your settings, then select Review + Assign.

Manage images in Azure Container Registry

Sign into the registry

On your local machine, run the az acr login command.

az acr login --name <registry-name>

Import a container image using Azure CLI

Import a container image to your container registry on disconnected operations using Azure CLI. In this example, we import the mcr.microsoft.com/hello-world:latest image into a registry.

To return a list of registries in your resource group, use the az acr list command.

az acr list -g <ResourceGroupName> -o table

To import a container image from a public repository to your container registry, use the az acr import command.

az acr import --name <registry-name> --source mcr.microsoft.com/hello-world:latest --image hello-world:latest

Supported Azure Container Registry CLI commands

The following table lists supported Azure Container Registry CLI commands.

Unsupported capabilities

In this preview, viewing metrics for a container registry isn't supported.

This feature is available only in Azure Local 2506.