Prerequisites

Required

Azure Subscription

An active Azure subscription with permission to create:

Resource groups
Virtual networks and subnets
Network security groups
Public IP addresses
Virtual machines (Standard_D16s_v3 — 16 vCPU, 64 GiB RAM for 41-container workloads)

Azure CLI

Install and authenticate the Azure CLI:

curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash

az login

az account show --query '{name:name, id:id}' -o table

Terraform

Terraform >= 1.5 is required:

terraform version

If not installed, use the HashiCorp APT repository:

wget -O- https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list
sudo apt update && sudo apt install terraform

Azure AD Permissions

Your Azure AD account must have User.Read permissions. The deployer identifier (used in resource naming) is automatically derived from your Azure AD profile. For service principal or managed identity authentication, set the deployer Terraform variable explicitly.

SSH Key Pair

An SSH key pair for VM access:

ssh-keygen -t ed25519 -f ~/.ssh/origin-server-key -N ""

Azure Resources Created

Resource	SKU
Ubuntu 24.04 VM	Standard_D16s_v3 (16 vCPU, 64 GiB)
Public IP	Standard, Static
OS Disk	60 GiB Premium SSD
VNet + NSG	Default

See the Azure pricing calculator for current costs. Use terraform destroy when the lab is not in use to stop charges. See Teardown for the procedure.