You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-machines/share-gallery-community.md
+32-18Lines changed: 32 additions & 18 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ ms.service: virtual-machines
6
6
ms.subservice: gallery
7
7
ms.topic: how-to
8
8
ms.workload: infrastructure
9
-
ms.date: 03/30/2023
9
+
ms.date: 05/24/2023
10
10
ms.author: saraic
11
11
ms.reviewer: cynthn, mattmcinnes
12
12
ms.custom: template-how-to
@@ -43,23 +43,19 @@ There are three main ways to share images in an Azure Compute Gallery, depending
43
43
## Limitations for images shared to the community
44
44
45
45
There are some limitations for sharing your gallery to the community:
46
-
- Encrypted images aren't supported.
47
-
- TrustedLaunch and TVMSupported Image is not supported
48
-
- CVMSuppored image is not supported
49
46
- For the preview, image resources need to be created in the same region as the gallery. For example, if you create a gallery in West US, the image definitions and image versions should be created in West US if you want to make them available during the public preview.
50
47
- For the preview, you can't share [VM Applications](vm-applications.md) to the community.
51
-
- The gallery must be created as a community gallery. For the preview, there is no way to migrate an existing private gallery to be a community gallery
52
-
- The image version region in the gallery should be same as the region home region, creating of cross-region version where the home region is different than the gallery is not supported, however once the image is in the home region it can be replicated to other regions
48
+
- The image version region in the gallery should be same as the region home region, creating of cross-region version where the home region is different than the gallery isn't supported, however once the image is in the home region it can be replicated to other regions
53
49
- To find images shared to the community from the Azure portal, you need to go through the VM create or scale set creation pages. You can't search the portal or Azure Marketplace for the images
54
50
55
51
56
52
## How sharing with the community works
57
53
58
54
You [create a gallery resource](create-gallery.md#create-a-community-gallery) under `Microsoft.Compute/Galleries` and choose `community` as a sharing option.
59
55
60
-
When you are ready, you flag your gallery as ready to be shared publicly. Only the owner of a subscription, or a user or service principal with the `Compute Gallery Sharing Admin` role at the subscription or gallery level, can enable a gallery to go public to the community. At this point, the Azure infrastructure creates proxy read-only regional resources, under `Microsoft.Compute/CommunityGalleries`, which are public.
56
+
When you're ready, you flag your gallery as ready to be shared publicly. Only the owner of a subscription, or a user or service principal with the `Compute Gallery Sharing Admin` role at the subscription or gallery level, can enable a gallery to go public to the community. At this point, the Azure infrastructure creates proxy read-only regional resources, under `Microsoft.Compute/CommunityGalleries`, which are public.
61
57
62
-
The end-users can only interact with the proxy resources, they never interact with your private resources. As the publisher of the private resource, you should consider the private resource as your handle to the public proxy resources. The `prefix` you provide when you create the gallery will be used, along with a unique GUID, to create the public facing name for your gallery.
58
+
The end-users can only interact with the proxy resources, they never interact with your private resources. As the publisher of the private resource, you should consider the private resource as your handle to the public proxy resources. The `prefix` you provide when you create the gallery is used, along with a unique GUID, to create the public facing name for your gallery.
63
59
64
60
Azure users can see the latest image versions shared to the community in the portal, or query for them using the CLI. Only the latest version of an image is listed in the community gallery.
65
61
@@ -88,17 +84,35 @@ As a content publisher, you might want to share a gallery to the community:
88
84
89
85
- You don’t want to deal with the complexity of multi-tenant authentication when sharing with multiple tenants on Azure.
90
86
91
-
## Reporting issues with a public image
92
-
Utilizing community-submitted virtual machine images has several risks. Certain images could harbor malware, security vulnerabilities, or violate someone's intellectual property. To help create a secure and reliable experience for the community, you can report images in which you see these issues.
## Should I use a marketplace image or a community gallery image?
89
+
90
+
There are a variety of reasons why you might want to use an Azure Marketplace image instead of a community gallery image. The primary reason to choose an Azure Marketplace image is that they're supported by Microsoft, while community images aren't.
91
+
92
+
Why use a marketplace mage?
93
+
- Microsoft certified images
94
+
- Can be used for production workloads
95
+
- First party and third party images
96
+
- Paid images with additional software offerings
97
+
- Supported by Microsoft
96
98
99
+
When to use a community image?
100
+
- You trust and know how to contact the publisher
101
+
- You're looking for a community version of an image published by open-source community
102
+
- Using the image for testing
103
+
- Community images are free
104
+
- Supported by the owner of the image, not Microsoft.
105
+
106
+
## Reporting issues with a community image
107
+
Using community-submitted virtual machine images has several risks. Images could contain malware, security vulnerabilities, or violate someone's intellectual property. To help create a secure and reliable experience for the community, you can report images when you see these issues.
- Images published to the community gallery should be [generalized](generalize.md) images, that have had sensitive or machine specific information removed. For more information about preparing an image, see the OS specific information for [Linux](./linux/create-upload-generic.md) or [Windows](./windows/prepare-for-upload-vhd-image.md).
115
+
- Images published to the community gallery should be [generalized](generalize.md) images that have had sensitive or machine specific information removed. For more information about preparing an image, see the OS specific information for [Linux](./linux/create-upload-generic.md) or [Windows](./windows/prepare-for-upload-vhd-image.md).
102
116
## FAQ
103
117
104
118
**Q: What are the charges for using a gallery that is shared to the community?**
@@ -109,15 +123,15 @@ Utilizing community-submitted virtual machine images has several risks. Certain
109
123
110
124
**Q: Is it safe to use images shared to the community?**
111
125
112
-
**A**: Users should exercise caution while using images from non-verified sources, since these images aren't subject to certification and not scanned for malware/vulnerabilities and publisher details are not verified.
126
+
**A**: Users should exercise caution while using images from non-verified sources, since these images aren't subject to certification and not scanned for malware/vulnerabilities and publisher details aren't verified.
113
127
114
128
**Q: If an image that is shared to the community doesn’t work, who do I contact for support?**
115
129
116
-
**A**: Azure isn't responsible for any issues users might encounter with community-shared images. The support is provided by the image publisher. Please look up the publisher contact information for the image and reach out to them for any support.
130
+
**A**: Azure isn't responsible for any issues users might encounter with community-shared images. The support is provided by the image publisher. Look up the publisher contact information for the image and reach out to them for any support.
117
131
118
132
**Q: Is Community gallery sharing functionality part of Azure Marketplace?**
119
133
120
-
**A**: No, Community gallery sharing is not part of Azure Marketplace, it's a feature of 'Azure Compute Gallery'. Anyone with an Azure subscription can use 'Community gallery' and make their images public.
134
+
**A**: No, Community gallery sharing isn't part of Azure Marketplace, it's a feature of 'Azure Compute Gallery'. Anyone with an Azure subscription can use 'Community gallery' and make their images public.
121
135
122
136
**Q: I have concerns about an image, who do I contact?**
123
137
@@ -138,7 +152,7 @@ In order to share a gallery publicly, it needs to be created as a community gall
138
152
139
153
### [CLI](#tab/cli)
140
154
141
-
Once you are ready to make the gallery available to the public, enable the community gallery using [az sig share enable-community](/cli/azure/sig/share#az-sig-share-enable-community). Only a user in the `Owner` role definition can enable a gallery for community sharing.
155
+
Once you're ready to make the gallery available to the public, enable the community gallery using [az sig share enable-community](/cli/azure/sig/share#az-sig-share-enable-community). Only a user in the `Owner` role definition can enable a gallery for community sharing.
142
156
143
157
```azurecli-interactive
144
158
az sig share enable-community \
@@ -171,7 +185,7 @@ When you're ready to make the gallery public:
171
185
1. On the page for the gallery, select **Sharing** from the left menu.
172
186
1. Select **Share** from the top of the page.
173
187
:::image type="content" source="media/create-gallery/share.png" alt-text="Screenshot showing the Share button for sharing your gallery to the community.":::
0 commit comments