Register MAR as default trusted repository

adityapatwardhan · adityapatwardhan · commit e3c6d81c32e1 · 2026-03-03T14:11:11.000-08:00
diff --git a/src/code/RegisterPSResourceRepository.cs b/src/code/RegisterPSResourceRepository.cs
@@ -323,7 +323,7 @@ private PSRepositoryInfo RepoValidationHelper(Hashtable repo)
                 return null;
             }
 
-            if (repo["Name"].ToString().Equals("PSGallery"))
+            if (repo["Name"].ToString().Equals("PSGallery", StringComparison.OrdinalIgnoreCase))
             {
                 WriteError(new ErrorRecord(
                         new PSInvalidOperationException("Cannot register PSGallery with -Name parameter. Try: Register-PSResourceRepository -PSGallery"),
@@ -334,6 +334,17 @@ private PSRepositoryInfo RepoValidationHelper(Hashtable repo)
                 return null;
             }
 
+            if (repo["Name"].ToString().Equals("MAR", StringComparison.OrdinalIgnoreCase))
+            {
+                WriteError(new ErrorRecord(
+                        new PSInvalidOperationException("Cannot register MAR with -Name parameter. The MAR repository is automatically registered. Try: Reset-PSResourceRepository to restore default repositories."),
+                        "MARProvidedAsNameRepoPSet",
+                        ErrorCategory.InvalidArgument,
+                        this));
+
+                return null;
+            }
+
             if (!repo.ContainsKey("Uri") || repo["Uri"] == null || String.IsNullOrEmpty(repo["Uri"].ToString()))
             {
                 WriteError(new ErrorRecord(
diff --git a/src/code/RepositorySettings.cs b/src/code/RepositorySettings.cs
@@ -26,8 +26,12 @@ internal static class RepositorySettings
         // The repository store file's location is currently only at '%LOCALAPPDATA%\PSResourceGet' for the user account.
         private const string PSGalleryRepoName = "PSGallery";
         private const string PSGalleryRepoUri = "https://www.powershellgallery.com/api/v2";
+        private const string MARRepoName = "MAR";
+        private const string MARRepoUri = "https://mcr.microsoft.com";
         private const int DefaultPriority = 50;
+        private const int MARDefaultPriority = 40;
         private const bool DefaultTrusted = false;
+        private const bool MARDefaultTrusted = true;
         private const string RepositoryFileName = "PSResourceRepository.xml";
         private static readonly string RepositoryPath = Path.Combine(Environment.GetFolderPath(
             Environment.SpecialFolder.LocalApplicationData), "PSResourceGet");
@@ -63,6 +67,10 @@ public static void CheckRepositoryStore()
                 // Add PSGallery to the newly created store
                 Uri psGalleryUri = new Uri(PSGalleryRepoUri);
                 Add(PSGalleryRepoName, psGalleryUri, DefaultPriority, DefaultTrusted, repoCredentialInfo: null, repoCredentialProvider: CredentialProviderType.None, APIVersion.V2, force: false);
+
+                // Add MAR to the newly created store
+                Uri marUri = new Uri(MARRepoUri);
+                Add(MARRepoName, marUri, MARDefaultPriority, MARDefaultTrusted, repoCredentialInfo: null, repoCredentialProvider: CredentialProviderType.None, APIVersion.ContainerRegistry, force: false);
             }
 
             // Open file (which should exist now), if cannot/is corrupted then throw error
@@ -85,6 +93,12 @@ public static PSRepositoryInfo AddRepository(string repoName, Uri repoUri, int r
                 return null;
             }
 
+            if (repoName.Equals("MAR", StringComparison.OrdinalIgnoreCase))
+            {
+                errorMsg = "Cannot register MAR with -Name parameter. The MAR repository is automatically registered. Try: Reset-PSResourceRepository to restore default repositories.";
+                return null;
+            }
+
             return AddToRepositoryStore(repoName, repoUri, repoPriority, repoTrusted, apiVersion, repoCredentialInfo, repoCredentialProvider, force, cmdletPassedIn, out errorMsg);
         }
 
@@ -187,6 +201,20 @@ public static PSRepositoryInfo UpdateRepositoryStore(string repoName, Uri repoUr
                 return null;
             }
 
+            // check MAR Uri is not trying to be set
+            if (repoName.Equals("MAR", StringComparison.OrdinalIgnoreCase) && repoUri != null)
+            {
+                errorMsg = "The MAR repository has a predefined Uri. Setting the -Uri parameter for this repository is not allowed. Please run 'Reset-PSResourceRepository' to restore default repositories.";
+                return null;
+            }
+
+            // check MAR CredentialInfo is not trying to be set
+            if (repoName.Equals("MAR", StringComparison.OrdinalIgnoreCase) && repoCredentialInfo != null)
+            {
+                errorMsg = "Setting the -CredentialInfo parameter for MAR is not allowed. Run 'Reset-PSResourceRepository' to restore default repositories.";
+                return null;
+            }
+
             // determine trusted value to pass in (true/false if set, null otherwise, hence the nullable bool variable)
             bool? _trustedNullable = isSet ? new bool?(repoTrusted) : new bool?();
 
@@ -908,6 +936,10 @@ public static PSRepositoryInfo Reset(out string errorMsg)
                 Uri psGalleryUri = new Uri(PSGalleryRepoUri);
                 PSRepositoryInfo psGalleryRepo = Add(PSGalleryRepoName, psGalleryUri, DefaultPriority, DefaultTrusted, repoCredentialInfo: null, repoCredentialProvider: CredentialProviderType.None, APIVersion.V2, force: false);
 
+                // Add MAR to the newly created store
+                Uri marUri = new Uri(MARRepoUri);
+                Add(MARRepoName, marUri, MARDefaultPriority, MARDefaultTrusted, repoCredentialInfo: null, repoCredentialProvider: CredentialProviderType.None, APIVersion.ContainerRegistry, force: false);
+
                 // Clean up backup file on success
                 if (!string.IsNullOrEmpty(backupFilePath) && File.Exists(backupFilePath))
                 {
diff --git a/src/code/ResetPSResourceRepository.cs b/src/code/ResetPSResourceRepository.cs
@@ -10,7 +10,7 @@ namespace Microsoft.PowerShell.PSResourceGet.Cmdlets
     /// <summary>
     /// The Reset-PSResourceRepository cmdlet resets the repository store by creating a new PSRepositories.xml file.
     /// This is useful when the repository store becomes corrupted.
-    /// It will create a new repository store with only the PSGallery repository registered.
+    /// It will create a new repository store with PSGallery and MAR repositories registered.
     /// </summary>
     [Cmdlet(VerbsCommon.Reset,
         "PSResourceRepository",
@@ -39,8 +39,8 @@ protected override void ProcessRecord()
                 "PSResourceRepository.xml");
 
             WriteVerbose($"Resetting repository store at: {repositoryStorePath}");
-            
-            if (!ShouldProcess(repositoryStorePath, "Reset repository store and create new PSRepositories.xml file with PSGallery registered"))
+
+            if (!ShouldProcess(repositoryStorePath, "Reset repository store and create new PSRepositories.xml file with PSGallery and MAR registered"))
             {
                 return;
             }
@@ -57,7 +57,7 @@ protected override void ProcessRecord()
                 return;
             }
 
-            WriteVerbose("Repository store reset successfully. PSGallery has been registered.");
+            WriteVerbose("Repository store reset successfully. PSGallery and MAR have been registered.");
 
             if (PassThru)
             {
diff --git a/src/code/SetPSResourceRepository.cs b/src/code/SetPSResourceRepository.cs
@@ -110,10 +110,11 @@ public SwitchParameter Trusted
         public object GetDynamicParameters()
         {
             PSRepositoryInfo repository = RepositorySettings.Read(new[] { Name }, out string[] _).FirstOrDefault();
-            // Dynamic parameter '-CredentialProvider' should not appear for PSGallery, or any container registry repository.
+            // Dynamic parameter '-CredentialProvider' should not appear for PSGallery, MAR, or any container registry repository.
             // It should also not appear when using the 'Repositories' parameter set.
             if (repository is not null &&
                 (repository.Name.Equals("PSGallery", StringComparison.OrdinalIgnoreCase) ||
+                repository.Name.Equals("MAR", StringComparison.OrdinalIgnoreCase) ||
                 ParameterSetName.Equals(RepositoriesParameterSet) ||
                 repository.IsContainerRegistry()))
             {
diff --git a/test/PSGetTestUtils.psm1 b/test/PSGetTestUtils.psm1
@@ -19,6 +19,9 @@ $script:IsCoreCLR = $PSVersionTable.ContainsKey('PSEdition') -and $PSVersionTabl
 $script:PSGalleryName = 'PSGallery'
 $script:PSGalleryLocation = 'https://www.powershellgallery.com/api/v2'
 
+$script:MARName = 'MAR'
+$script:MARLocation = 'https://mcr.microsoft.com'
+
 $script:NuGetGalleryName = 'NuGetGallery'
 $script:NuGetGalleryLocation = 'https://api.nuget.org/v3/index.json'
 
@@ -153,6 +156,16 @@ function Get-PSGalleryName
 function Get-PSGalleryLocation {
     return $script:PSGalleryLocation
 }
+
+function Get-MARName
+{
+    return $script:MARName
+}
+
+function Get-MARLocation {
+    return $script:MARLocation
+}
+
 function Get-NewTestDirs {
     Param(
         [string[]]
diff --git a/test/ResourceRepositoryTests/MARRepository.Tests.ps1 b/test/ResourceRepositoryTests/MARRepository.Tests.ps1
@@ -0,0 +1,132 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
+$modPath = "$psscriptroot/../PSGetTestUtils.psm1"
+Write-Verbose -Verbose -Message "PSGetTestUtils path: $modPath"
+Import-Module $modPath -Force -Verbose
+
+Describe "Test MAR Repository Registration" -tags 'CI' {
+    BeforeEach {
+        $MARName = Get-MARName
+        $MARUri = Get-MARLocation
+        $PSGalleryName = Get-PSGalleryName
+        $PSGalleryUri = Get-PSGalleryLocation
+        Get-NewPSResourceRepositoryFile
+    }
+    AfterEach {
+        Get-RevertPSResourceRepositoryFile
+    }
+
+    Context "MAR is auto-registered with expected values" {
+        It "MAR repository should be present with expected default values" {
+            $res = Get-PSResourceRepository -Name $MARName
+            $res | Should -Not -BeNullOrEmpty
+            $res.Name | Should -Be $MARName
+            $res.Uri | Should -Be "$MARUri/"
+            $res.Trusted | Should -Be True
+            $res.Priority | Should -Be 40
+            $res.ApiVersion | Should -Be 'ContainerRegistry'
+        }
+
+        It "MAR repository should have lower priority number (higher priority) than PSGallery" {
+            $mar = Get-PSResourceRepository -Name $MARName
+            $psGallery = Get-PSResourceRepository -Name $PSGalleryName
+            $mar.Priority | Should -BeLessThan $psGallery.Priority
+        }
+    }
+
+    Context "MAR name protection" {
+        It "should not allow registering MAR with -Name parameter" {
+            { Register-PSResourceRepository -Name "MAR" -Uri "https://mcr.microsoft.com" -ErrorAction Stop } | Should -Throw -ErrorId "ErrorInNameParameterSet,Microsoft.PowerShell.PSResourceGet.Cmdlets.RegisterPSResourceRepository"
+        }
+
+        It "should not allow registering MAR (case insensitive) with -Name parameter" {
+            { Register-PSResourceRepository -Name "mar" -Uri "https://mcr.microsoft.com" -ErrorAction Stop } | Should -Throw -ErrorId "ErrorInNameParameterSet,Microsoft.PowerShell.PSResourceGet.Cmdlets.RegisterPSResourceRepository"
+        }
+
+        It "should not allow registering MAR with -Name parameter in hashtable" {
+            Unregister-PSResourceRepository -Name $MARName
+            $hashtable = @{Name = "MAR"; Uri = "https://mcr.microsoft.com"}
+            Register-PSResourceRepository -Repository $hashtable -ErrorVariable err -ErrorAction SilentlyContinue
+            $err.Count | Should -BeGreaterThan 0
+            $err[0].FullyQualifiedErrorId | Should -BeExactly "MARProvidedAsNameRepoPSet,Microsoft.PowerShell.PSResourceGet.Cmdlets.RegisterPSResourceRepository"
+        }
+
+        It "should not allow setting Uri for MAR repository" {
+            { Set-PSResourceRepository -Name $MARName -Uri "https://example.com" -ErrorAction Stop } | Should -Throw -ErrorId "ErrorInNameParameterSet,Microsoft.PowerShell.PSResourceGet.Cmdlets.SetPSResourceRepository"
+        }
+
+        It "should not allow setting CredentialInfo for MAR repository" {
+            $randomSecret = [System.IO.Path]::GetRandomFileName()
+            $credentialInfo = New-Object Microsoft.PowerShell.PSResourceGet.UtilClasses.PSCredentialInfo ("testvault", $randomSecret)
+            { Set-PSResourceRepository -Name $MARName -CredentialInfo $credentialInfo -ErrorAction Stop } | Should -Throw -ErrorId "ErrorInNameParameterSet,Microsoft.PowerShell.PSResourceGet.Cmdlets.SetPSResourceRepository"
+        }
+
+        It "should allow setting Trusted for MAR repository" {
+            Set-PSResourceRepository -Name $MARName -Trusted:$false
+            $res = Get-PSResourceRepository -Name $MARName
+            $res.Trusted | Should -Be False
+        }
+
+        It "should allow setting Priority for MAR repository" {
+            Set-PSResourceRepository -Name $MARName -Priority 10
+            $res = Get-PSResourceRepository -Name $MARName
+            $res.Priority | Should -Be 10
+        }
+    }
+
+    Context "Reset repository store includes MAR" {
+        It "Reset-PSResourceRepository should register MAR alongside PSGallery" {
+            Reset-PSResourceRepository -Force
+            $res = Get-PSResourceRepository -Name $MARName
+            $res | Should -Not -BeNullOrEmpty
+            $res.Name | Should -Be $MARName
+            $res.Uri | Should -Be "$MARUri/"
+            $res.Trusted | Should -Be True
+            $res.Priority | Should -Be 40
+            $res.ApiVersion | Should -Be 'ContainerRegistry'
+
+            $psGallery = Get-PSResourceRepository -Name $PSGalleryName
+            $psGallery | Should -Not -BeNullOrEmpty
+        }
+
+        It "Reset-PSResourceRepository should restore MAR after unregistration" {
+            Unregister-PSResourceRepository -Name $MARName
+            $res = Get-PSResourceRepository -Name $MARName -ErrorAction SilentlyContinue
+            $res | Should -BeNullOrEmpty
+
+            Reset-PSResourceRepository -Force
+            $res = Get-PSResourceRepository -Name $MARName
+            $res | Should -Not -BeNullOrEmpty
+            $res.Name | Should -Be $MARName
+            $res.Uri | Should -Be "$MARUri/"
+            $res.Trusted | Should -Be True
+            $res.Priority | Should -Be 40
+        }
+
+        It "Reset-PSResourceRepository should restore both PSGallery and MAR" {
+            Unregister-PSResourceRepository -Name $MARName
+            Unregister-PSResourceRepository -Name $PSGalleryName
+            Reset-PSResourceRepository -Force
+
+            $mar = Get-PSResourceRepository -Name $MARName
+            $mar | Should -Not -BeNullOrEmpty
+            $mar.Priority | Should -Be 40
+            $mar.Trusted | Should -Be True
+            $mar.ApiVersion | Should -Be 'ContainerRegistry'
+
+            $psGallery = Get-PSResourceRepository -Name $PSGalleryName
+            $psGallery | Should -Not -BeNullOrEmpty
+            $psGallery.Priority | Should -Be 50
+        }
+    }
+
+    Context "MAR first due to higher priority" {
+        It "Find-PSResource Az.Accounts module from MAR" {
+            $res = Find-PSResource -Name "Az.Accounts"
+            $res | Should -Not -BeNullOrEmpty
+            $res.Name | Should -Be "Az.Accounts"
+            $res.Repository | Should -Be $MARName
+        }
+    }
+}
diff --git a/test/testRepositories.xml b/test/testRepositories.xml
@@ -1,5 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <configuration>
   <Repository Name="PSGallery"       Uri="https://www.powershellgallery.com/api/v2" Priority="50" Trusted="false" APIVersion="v2" />
+  <Repository Name="MAR"             Uri="https://mcr.microsoft.com"                Priority="40" Trusted="true"  APIVersion="ContainerRegistry" />
   <Repository Name="NuGetGallery"    Uri="https://api.nuget.org/v3/index.json"      Priority="70" Trusted="true" APIVersion="v3" />
 </configuration>

Original file line number	Diff line number	Diff line change
`@@ -323,7 +323,7 @@ private PSRepositoryInfo RepoValidationHelper(Hashtable repo)`
`323`	`323`	`return null;`
`324`	`324`	`}`
`325`	`325`
`326`		`- if (repo["Name"].ToString().Equals("PSGallery"))`
	`326`	`+ if (repo["Name"].ToString().Equals("PSGallery", StringComparison.OrdinalIgnoreCase))`
`327`	`327`	`{`
`328`	`328`	`WriteError(new ErrorRecord(`
`329`	`329`	`new PSInvalidOperationException("Cannot register PSGallery with -Name parameter. Try: Register-PSResourceRepository -PSGallery"),`
`@@ -334,6 +334,17 @@ private PSRepositoryInfo RepoValidationHelper(Hashtable repo)`
`334`	`334`	`return null;`
`335`	`335`	`}`
`336`	`336`
	`337`	`+ if (repo["Name"].ToString().Equals("MAR", StringComparison.OrdinalIgnoreCase))`
	`338`	`+ {`
	`339`	`+ WriteError(new ErrorRecord(`
	`340`	`+ new PSInvalidOperationException("Cannot register MAR with -Name parameter. The MAR repository is automatically registered. Try: Reset-PSResourceRepository to restore default repositories."),`
	`341`	`+ "MARProvidedAsNameRepoPSet",`
	`342`	`+ ErrorCategory.InvalidArgument,`
	`343`	`+ this));`
	`344`	`+`
	`345`	`+ return null;`
	`346`	`+ }`
	`347`	`+`
`337`	`348`	`if (!repo.ContainsKey("Uri") \|\| repo["Uri"] == null \|\| String.IsNullOrEmpty(repo["Uri"].ToString()))`
`338`	`349`	`{`
`339`	`350`	`WriteError(new ErrorRecord(`
Original file line number	Diff line number	Diff line change
`@@ -10,7 +10,7 @@ namespace Microsoft.PowerShell.PSResourceGet.Cmdlets`
`10`	`10`	`/// <summary>`
`11`	`11`	`/// The Reset-PSResourceRepository cmdlet resets the repository store by creating a new PSRepositories.xml file.`
`12`	`12`	`/// This is useful when the repository store becomes corrupted.`
`13`		`- /// It will create a new repository store with only the PSGallery repository registered.`
	`13`	`+ /// It will create a new repository store with PSGallery and MAR repositories registered.`
`14`	`14`	`/// </summary>`
`15`	`15`	`[Cmdlet(VerbsCommon.Reset,`
`16`	`16`	`"PSResourceRepository",`
`@@ -39,8 +39,8 @@ protected override void ProcessRecord()`
`39`	`39`	`"PSResourceRepository.xml");`
`40`	`40`
`41`	`41`	`WriteVerbose($"Resetting repository store at: {repositoryStorePath}");`
`42`		`-`
`43`		`- if (!ShouldProcess(repositoryStorePath, "Reset repository store and create new PSRepositories.xml file with PSGallery registered"))`
	`42`	`+`
	`43`	`+ if (!ShouldProcess(repositoryStorePath, "Reset repository store and create new PSRepositories.xml file with PSGallery and MAR registered"))`
`44`	`44`	`{`
`45`	`45`	`return;`
`46`	`46`	`}`
`@@ -57,7 +57,7 @@ protected override void ProcessRecord()`
`57`	`57`	`return;`
`58`	`58`	`}`
`59`	`59`
`60`		`- WriteVerbose("Repository store reset successfully. PSGallery has been registered.");`
	`60`	`+ WriteVerbose("Repository store reset successfully. PSGallery and MAR have been registered.");`
`61`	`61`
`62`	`62`	`if (PassThru)`
`63`	`63`	`{`
Original file line number	Diff line number	Diff line change
`@@ -110,10 +110,11 @@ public SwitchParameter Trusted`
`110`	`110`	`public object GetDynamicParameters()`
`111`	`111`	`{`
`112`	`112`	`PSRepositoryInfo repository = RepositorySettings.Read(new[] { Name }, out string[] _).FirstOrDefault();`
`113`		`- // Dynamic parameter '-CredentialProvider' should not appear for PSGallery, or any container registry repository.`
	`113`	`+ // Dynamic parameter '-CredentialProvider' should not appear for PSGallery, MAR, or any container registry repository.`
`114`	`114`	`// It should also not appear when using the 'Repositories' parameter set.`
`115`	`115`	`if (repository is not null &&`
`116`	`116`	`(repository.Name.Equals("PSGallery", StringComparison.OrdinalIgnoreCase) \|\|`
	`117`	`+ repository.Name.Equals("MAR", StringComparison.OrdinalIgnoreCase) \|\|`
`117`	`118`	`ParameterSetName.Equals(RepositoriesParameterSet) \|\|`
`118`	`119`	`repository.IsContainerRegistry()))`
`119`	`120`	`{`