Azure Container Instances

# Tạo Resource Group
az group create \
  --name rg-az104-m25 \
  --location southeastasia \
  --tags Course=AZ-104 Module=25 Environment=Lab

# Chạy ACI đơn giản từ public Docker Hub image (nginx)
az container create \
  --name aci-nginx-m25 \
  --resource-group rg-az104-m25 \
  --image nginx:latest \
  --cpu 0.5 \
  --memory 0.5 \
  --ports 80 \
  --ip-address Public \
  --dns-name-label "aci-nginx-m25-$(date +%s | tail -c 6)" \
  --os-type Linux \
  --restart-policy Always

# Xem trạng thái container
az container show \
  --name aci-nginx-m25 \
  --resource-group rg-az104-m25 \
  --query "{name:name, state:instanceView.state, ip:ipAddress.ip, fqdn:ipAddress.fqdn, cpu:containers[0].resources.requests.cpu, memory:containers[0].resources.requests.memoryInGb}" \
  --output table

# Xem logs container
az container logs \
  --name aci-nginx-m25 \
  --resource-group rg-az104-m25

# Tên ACR phải unique toàn cầu, chỉ chữ và số
ACR_NAME="acraz104m25$(date +%s | tail -c 6)"
echo "ACR name: $ACR_NAME"

# Tạo Azure Container Registry (Basic SKU)
az acr create \
  --name "$ACR_NAME" \
  --resource-group rg-az104-m25 \
  --sku Basic \
  --admin-enabled true \
  --location southeastasia

# Lấy login server
ACR_SERVER=$(az acr show \
  --name "$ACR_NAME" \
  --resource-group rg-az104-m25 \
  --query loginServer --output tsv)

echo "ACR Login Server: $ACR_SERVER"

# Build image trực tiếp trên ACR (dùng ACR Tasks — không cần Docker local)
# Sử dụng Dockerfile từ sample GitHub repo
az acr build \
  --registry "$ACR_NAME" \
  --image "myapp:v1.0" \
  https://github.com/Azure-Samples/aci-helloworld

# Liệt kê images trong ACR
az acr repository list \
  --name "$ACR_NAME" \
  --output table

az acr repository show-tags \
  --name "$ACR_NAME" \
  --repository myapp \
  --output table

# Lấy credentials ACR để pull image
ACR_USERNAME=$(az acr credential show \
  --name "$ACR_NAME" \
  --query username --output tsv)

ACR_PASSWORD=$(az acr credential show \
  --name "$ACR_NAME" \
  --query "passwords[0].value" --output tsv)

echo "ACR Username: $ACR_USERNAME"

# Chạy ACI từ private ACR image
az container create \
  --name aci-myapp-m25 \
  --resource-group rg-az104-m25 \
  --image "$ACR_SERVER/myapp:v1.0" \
  --cpu 0.5 \
  --memory 0.5 \
  --ports 80 \
  --ip-address Public \
  --dns-name-label "aci-myapp-m25-$(date +%s | tail -c 6)" \
  --registry-login-server "$ACR_SERVER" \
  --registry-username "$ACR_USERNAME" \
  --registry-password "$ACR_PASSWORD" \
  --os-type Linux \
  --environment-variables APP_ENV=Lab APP_VERSION=v1.0

# Kiểm tra container mới
az container show \
  --name aci-myapp-m25 \
  --resource-group rg-az104-m25 \
  --query "{state:instanceView.state, fqdn:ipAddress.fqdn}" \
  --output table

# Tạo YAML định nghĩa container group: app + sidecar logger
cat > /tmp/container-group-m25.yaml << 'EOF'
apiVersion: '2021-10-01'
location: southeastasia
name: cg-az104-m25
properties:
  containers:
  - name: app-container
    properties:
      image: nginx:alpine
      resources:
        requests:
          cpu: 0.5
          memoryInGb: 0.5
      ports:
      - port: 80
        protocol: TCP
      environmentVariables:
      - name: APP_NAME
        value: HoaTranLab-Demo
      - name: APP_SECRET
        secureValue: SuperSecretPassword123
      volumeMounts:
      - name: shared-logs
        mountPath: /var/log/nginx
  - name: logger-sidecar
    properties:
      image: busybox:latest
      resources:
        requests:
          cpu: 0.1
          memoryInGb: 0.1
      command:
      - sh
      - -c
      - "while true; do cat /shared-logs/access.log 2>/dev/null || echo 'waiting for logs...'; sleep 10; done"
      volumeMounts:
      - name: shared-logs
        mountPath: /shared-logs
  volumes:
  - name: shared-logs
    emptyDir: {}
  ipAddress:
    type: Public
    ports:
    - port: 80
      protocol: TCP
    dnsNameLabel: cg-az104-m25-demo
  osType: Linux
  restartPolicy: Always
tags:
  Course: AZ-104
  Module: "25"
type: Microsoft.ContainerInstance/containerGroups
EOF

# Deploy container group từ YAML
az container create \
  --resource-group rg-az104-m25 \
  --file /tmp/container-group-m25.yaml

# Xem trạng thái container group
az container show \
  --name cg-az104-m25 \
  --resource-group rg-az104-m25 \
  --query "{state:instanceView.state, containers:containers[].name, ip:ipAddress.ip}" \
  --output json

# Xem logs của từng container trong group
az container logs \
  --name cg-az104-m25 \
  --resource-group rg-az104-m25 \
  --container-name app-container

az container logs \
  --name cg-az104-m25 \
  --resource-group rg-az104-m25 \
  --container-name logger-sidecar

# Exec vào container để kiểm tra
az container exec \
  --name cg-az104-m25 \
  --resource-group rg-az104-m25 \
  --container-name app-container \
  --exec-command "/bin/sh"

STORAGE_NAME="staz104m25$(date +%s | tail -c 6)"
SHARE_NAME="aci-data"

# Tạo Storage Account cho Azure Files
az storage account create \
  --name "$STORAGE_NAME" \
  --resource-group rg-az104-m25 \
  --location southeastasia \
  --sku Standard_LRS \
  --kind StorageV2 \
  --https-only true

# Tạo Azure File Share
az storage share create \
  --name "$SHARE_NAME" \
  --account-name "$STORAGE_NAME" \
  --quota 5

# Lấy storage key
STORAGE_KEY=$(az storage account keys list \
  --resource-group rg-az104-m25 \
  --account-name "$STORAGE_NAME" \
  --query "[0].value" --output tsv)

# Tạo file test trên share để kiểm tra mount
az storage file upload \
  --account-name "$STORAGE_NAME" \
  --account-key "$STORAGE_KEY" \
  --share-name "$SHARE_NAME" \
  --source /tmp/container-group-m25.yaml \
  --path "test-file.yaml"

# Chạy ACI với Azure Files volume mount
az container create \
  --name aci-files-m25 \
  --resource-group rg-az104-m25 \
  --image alpine:latest \
  --cpu 0.25 \
  --memory 0.25 \
  --command-line "sh -c 'ls /mnt/data && echo \"Files mounted successfully\" && cat /mnt/data/test-file.yaml | head -5 && sleep 300'" \
  --azure-file-volume-account-name "$STORAGE_NAME" \
  --azure-file-volume-account-key "$STORAGE_KEY" \
  --azure-file-volume-share-name "$SHARE_NAME" \
  --azure-file-volume-mount-path /mnt/data \
  --os-type Linux \
  --restart-policy Never

# Chờ container chạy và xem kết quả
sleep 15
az container logs \
  --name aci-files-m25 \
  --resource-group rg-az104-m25

# Xóa toàn bộ Resource Group (ACI, ACR, Storage Account)
az group delete --name rg-az104-m25 --yes --no-wait

# Xác nhận đang xóa
az group show --name rg-az104-m25 --query "properties.provisioningState" -o tsv
# Kết quả mong đợi: Deleting