You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-machines/ephemeral-os-disks.md
+30-23Lines changed: 30 additions & 23 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,17 +14,17 @@ ms.subservice: disks
14
14
15
15
**Applies to:**:heavy_check_mark: Linux VMs :heavy_check_mark: Windows VMs :heavy_check_mark: Flexible scale sets :heavy_check_mark: Uniform scale sets
16
16
17
-
Ephemeral OS disks are created on the local virtual machine (VM) storage and not saved to the remote Azure Storage. Ephemeral OS disks work well for stateless workloads, where applications are tolerant of individual VM failures but are more affected by VM deployment time or reimaging of individual VM instances. With Ephemeral OS disk, you get lower read/write latency to the OS disk and faster VM reimage.
18
-
19
-
The key features of ephemeral disks are:
17
+
Ephemeral OS disks are created on the local virtual machine (VM) storage and not saved to the remote Azure Storage. Ephemeral OS disks work well for stateless workloads, where applications are tolerant of individual VM failures but are more affected by VM deployment time or reimaging of individual VM instances. With Ephemeral OS disk, you get lower read/write latency to the OS disk and faster VM reimage.
18
+
19
+
The key features of ephemeral disks are:
20
+
20
21
- Ideal for stateless applications.
21
22
- Supported by Marketplace, custom images, and by [Azure Compute Gallery](./shared-image-galleries.md) (formerly known as Shared Image Gallery).
22
23
- Ability to fast reset or reimage VMs and scale set instances to the original boot state.
23
24
- Lower latency, similar to a temporary disk.
24
25
- Ephemeral OS disks are free, you incur no storage cost for OS disks.
25
26
- Available in all Azure regions.
26
27
27
-
28
28
Key differences between persistent and ephemeral OS disks:
29
29
30
30
|| Persistent OS Disk | Ephemeral OS Disk |
@@ -47,18 +47,20 @@ Key differences between persistent and ephemeral OS disks:
47
47
\* 4 TiB is the maximum supported OS disk size for managed (persistent) disks. However, many OS disks are partitioned with master boot record (MBR) by default and because of this are limited to 2 TiB. For details, see [OS disk](managed-disks-overview.md#os-disk).
48
48
49
49
## Placement options for Ephemeral OS disks
50
+
50
51
Ephemeral OS disk can be stored either on VM's OS cache disk or VM's temp/resource disk.
51
-
[DiffDiskPlacement](/rest/api/compute/virtualmachines/list#diffdiskplacement) is the new property that can be used to specify where you want to place the Ephemeral OS disk. With this feature, when a Windows VM is provisioned, we configure the pagefile to be located on the OS Disk.
52
+
[DiffDiskPlacement](/rest/api/compute/virtualmachines/list#diffdiskplacement) is the new property that can be used to specify where you want to place the Ephemeral OS disk. With this feature, when a Windows VM is provisioned, we configure the pagefile to be located on the OS Disk.
52
53
53
54
## Size requirements
54
55
55
56
You can choose to deploy Ephemeral OS Disk on VM cache or VM temp disk.
56
57
The image OS disk’s size should be less than or equal to the temp/cache size of the VM size chosen.
57
58
58
-
For example, if you want to opt for **OS cache placement**: Standard Windows Server images from the marketplace are about 127 GiB, which means that you need a VM size that has a cache equal to or larger than 127 GiB. The Standard_DS3_v2 has a cache size of 127 GiB, which is large enough. In this case, the Standard_DS3_v2 is the smallest size in the DSv2 series that you can use with this image.
59
+
For example, if you want to opt for **OS cache placement**: Standard Windows Server images from the marketplace are about 127 GiB, which means that you need a VM size that has a cache equal to or larger than 127 GiB. The Standard_DS3_v2 has a cache size of 127 GiB, which is large enough. In this case, the Standard_DS3_v2 is the smallest size in the DSv2 series that you can use with this image.
59
60
60
-
If you want to opt for **Temp disk placement**: Standard Ubuntu server image from marketplace is about 30 GiB. To enable Ephemeral OS disk on temp, the temp disk size must be equal to or larger than 30 GiB. Standard_B4ms has a temp size of 32 GiB, which can fit the 30 GiB OS disk. Upon creation of the VM, the temp disk space would be 2 GiB.
61
-
> [!IMPORTANT]
61
+
For example, if you want to opt for **Temp disk placement**: Standard Ubuntu server image from marketplace is about 30 GiB. To enable Ephemeral OS disk on temp, the temp disk size must be equal to or larger than 30 GiB. Standard_B4ms has a temp size of 32 GiB, which can fit the 30 GiB OS disk. Upon creation of the VM, the temp disk space would be 2 GiB.
62
+
63
+
> [!IMPORTANT]
62
64
> If opting for temp disk placement the Final Temp disk size = (Initial temp disk size - OS image size).
63
65
64
66
In the case of **Temp disk placement**, as Ephemeral OS disk is placed on temp disk it will share the IOPS with temp disk as per the VM size chosen by you.
@@ -67,52 +69,57 @@ Basic Linux and Windows Server images in the Marketplace that are denoted by `[s
67
69
Ephemeral disks also require that the VM size supports **Premium storage**. The sizes usually (but not always) have an `s` in the name, like DSv2 and EsV3. For more information, see [Azure VM sizes](sizes.md) for details around which sizes support Premium storage.
68
70
69
71
> [!NOTE]
70
-
>
72
+
>
71
73
> Ephemeral disk will not be accessible through the portal. You will receive a "Resource not Found" or "404" error when accessing the ephemeral disk which is expected.
72
-
>
74
+
>
75
+
76
+
## Unsupported features
73
77
74
-
## Unsupported features
75
78
- Capturing VM images
76
-
- Disk snapshots
77
-
- Azure Disk Encryption
79
+
- Disk snapshots
80
+
- Azure Disk Encryption
78
81
- Azure Backup
79
82
- Azure Site Recovery
80
-
- OS Disk Swap
83
+
- OS Disk Swap
84
+
85
+
## Trusted Launch for Ephemeral OS disks
81
86
82
-
## Trusted Launch for Ephemeral OS disks
83
87
Ephemeral OS disks can be created with Trusted launch. Not all VM sizes and regions are supported for trusted launch. Check [limitations of trusted launch](trusted-launch.md#limitations) for supported sizes and regions.
84
88
VM guest state (VMGS) is specific to trusted launch VMs. It is a blob that is managed by Azure and contains the unified extensible firmware interface (UEFI) secure boot signature databases and other security information. When using trusted launch by default **1 GiB** from the **OS cache** or **temp storage** based on the chosen placement option is reserved for VMGS.The lifecycle of the VMGS blob is tied to that of the OS Disk.
85
89
86
-
For example, If you try to create a Trusted launch Ephemeral OS disk VM using OS image of size 56 GiB with VM size [Standard_DS4_v2](dv2-dsv2-series.md) using temp disk placement you would get an error as
90
+
For example, If you try to create a Trusted launch Ephemeral OS disk VM using OS image of size 56 GiB with VM size [Standard_DS4_v2](dv2-dsv2-series.md) using temp disk placement you would get an error as
87
91
**"OS disk of Ephemeral VM with size greater than 55 GB is not allowed for VM size Standard_DS4_v2 when the DiffDiskPlacement is ResourceDisk."**
88
92
This is because the temp storage for [Standard_DS4_v2](dv2-dsv2-series.md) is 56 GiB, and 1 GiB is reserved for VMGS when using trusted launch.
89
93
For the same example above, if you create a standard Ephemeral OS disk VM you would not get any errors and it would be a successful operation.
90
94
91
95
> [!IMPORTANT]
92
-
>
96
+
>
93
97
> While using ephemeral disks for Trusted Launch VMs, keys and secrets generated or sealed by the vTPM after VM creation may not be persisted for operations like reimaging and platform events like service healing.
94
-
>
98
+
>
95
99
For more information on [how to deploy a trusted launch VM](trusted-launch-portal.md)
96
100
97
101
## Confidential VMs using Ephemeral OS disks
102
+
98
103
AMD-based Confidential VMs cater to high security and confidentiality requirements of customers. These VMs provide a strong, hardware-enforced boundary to help meet your security needs. There are limitations to use Confidential VMs. Check the [region](../confidential-computing/confidential-vm-overview.md#regions), [size](../confidential-computing/confidential-vm-overview.md#size-support) and [OS supported](../confidential-computing/confidential-vm-overview.md#os-support) limitations for confidential VMs.
99
104
Virtual machine guest state (VMGS) blob contains the security information of the confidential VM.
100
105
Confidential VMs using Ephemeral OS disks by default **1 GiB** from the **OS cache** or **temp storage** based on the chosen placement option is reserved for VMGS.The lifecycle of the VMGS blob is tied to that of the OS Disk.
101
106
> [!IMPORTANT]
102
-
>
107
+
>
103
108
> When choosing a confidential VM with full OS disk encryption before VM deployment that uses a customer-managed key (CMK). [Updating a CMK key version](../storage/common/customer-managed-keys-overview.md#update-the-key-version) or [key rotation](../key-vault/keys/how-to-configure-key-rotation.md) is not supported with Ephemeral OS disk. Confidential VMs using Ephemeral OS disks need to be deleted before updating or rotating the keys and can be re-created subsequently.
104
-
>
109
+
>
105
110
For more information on [confidential VM](../confidential-computing/confidential-vm-overview.md)
106
111
107
112
## Customer Managed key
113
+
108
114
You can choose to use customer managed keys or platform managed keys when you enable end-to-end encryption for VMs using Ephemeral OS disk. Currently this option is available only via [PowerShell](./windows/disks-enable-customer-managed-keys-powershell.md), [CLI](./linux/disks-enable-customer-managed-keys-cli.md) and SDK in all regions.
109
115
110
116
> [!IMPORTANT]
111
-
>
117
+
>
112
118
> [Updating a CMK key version](../storage/common/customer-managed-keys-overview.md#update-the-key-version) or [key rotation](../key-vault/keys/how-to-configure-key-rotation.md) of customer managed key is not supported with Ephemeral OS disk. VMs using Ephemeral OS disks need to be deleted before updating or rotating the keys and can be re-created subsequently.
113
-
>
119
+
>
114
120
For more information on [Encryption at host](./disk-encryption.md)
115
-
121
+
116
122
## Next steps
123
+
117
124
Create a VM with ephemeral OS disk using [Azure Portal/CLI/PowerShell/ARM template](ephemeral-os-disks-deploy.md).
118
125
Check out the [frequently asked questions on ephemeral os disk](ephemeral-os-disks-faq.md).
0 commit comments