skills.rest
github
githubOFFICIAL
Explore all skills by this author →
WebsiteGitHub

azure-container-registry-cli

Manage Azure Container Registry resources, images, builds, and networking via the az acr CLI.

38.5k|4.9k|Updated Jun 11, 2025
Search Tags:#CLI#docker#Azure#container registry#devOps#az acr#acr tasks
One-click install
npx skills add https://github.com/github/awesome-copilot --skill azure-container-registry-cli
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: azure-container-registry-cli
Source: https://github.com/github/awesome-copilot/tree/main/skills/azure-container-registry-cli
Command: npx skills add https://github.com/github/awesome-copilot --skill azure-container-registry-cli

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Managing Azure Container Registry involves dozens of az acr subcommands across authentication, builds, image lifecycle, and networking, and choosing the wrong command or flag leads to security gaps, wasted storage costs, or failed CI pipelines.

Core Features & Use Cases

  • Registry & Image Management: Create registries, import images server-side, list repositories and tags, untag or delete manifests, and purge old images with acr purge.
  • Cloud Builds & ACR Tasks: Build images in Azure without a local Docker daemon, create triggered tasks with commit, base-image, and timer triggers, and run multi-step task YAML.
  • Authentication & Security: Configure Entra RBAC roles (legacy and ABAC modes), service principals, managed identities, AKS integration, and repository-scoped tokens while avoiding the admin user in production.
  • Networking & Geo-Replication: Set up geo-replication, private endpoints, network rules, dedicated data endpoints, connected registries, and transfer pipelines.
  • Use Case: When a CI pipeline fails to push images to ACR, use this Skill to diagnose the issue with az acr check-health, verify RBAC role assignments, and configure a managed identity with the correct AcrPush role.

Quick Start

Ask the AI to create an Azure Container Registry, build a container image in the cloud with az acr build, and push it to the registry.

Frequently Asked Questions about azure-container-registry-cli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a Docker image in Azure Container Registry without local Docker?▼

Use az acr build --registry {registry} --image app:v1 . to build in Azure and push directly to the registry without a local Docker daemon. You can also build from a Git repository URL or create triggered ACR Tasks for automated builds on commits.

How do I copy a container image between registries in Azure?▼

Use az acr import for server-side image copies, which is faster than docker pull and push and requires no local storage. It supports public registries, other ACR instances in the same tenant via resource ID, and private registries with credentials.

Does AKS integration work with ABAC-enabled Azure Container Registries?▼

The az aks --attach-acr flag assigns the AcrPull role, which is not honored on ABAC-enabled registries. For those, manually assign the Container Registry Repository Reader role to the kubelet identity using az role assignment create.

Why do ACR Tasks fail with 403 errors on network-restricted registries?▼

Since June 2025, --allow-trusted-services alone is insufficient for tasks using system-assigned managed identities. Enable the task network bypass policy via az resource update with networkRuleBypassAllowedForTasks=true, or use a VNet-attached agent pool.

What is the difference between untag and delete in Azure Container Registry?▼

az acr repository untag removes only the tag while the manifest and layers remain pullable by digest. Deleting by tag removes the entire manifest and all other tags pointing to it, so untag first if you only want to retire a tag name.

Which ACR features require the Premium SKU?▼

Geo-replication, private endpoints, retention policies, connected registries, dedicated agent pools, and transfer pipelines require Premium. Repository-scoped tokens and soft delete work in all tiers, and zone redundancy is automatic in all tiers in supported regions.

Related Skills

Explore More Software Engineering Skills→
selrai-companyselrai-company

azure-connector

Install and configure the Azure CLI across macOS, Linux, and Windows.

Official
Advanced
codewithmukeshcodewithmukesh
640

ci-cd

Automate .NET build, test, and deployment pipelines with GitHub Actions or Azure DevOps.

Official
Intermediate
zerAdazerAda

supply_chain_security

Sign Docker images with Cosign and generate SBOMs for supply chain security.

Community
Advanced
jorgeasaurusjorgeasaurus
12

azure-enterprise-infra-planner

Generate Bicep or Terraform code for enterprise Azure infrastructure planning.

Community
Advanced