ARM模板问题求助：如何在单个Resource Group创建带私有IP的多台VM

Let's get your ARM template sorted so you can deploy those 900 VMs smoothly. First, let's break down the key issues in your original template, then walk through a corrected version tailored exactly to your requirements.

Key Issues in Your Original Template #

• Missing location Parameter: You referenced [parameters('location')] but didn't define it in the parameters section, which triggers deployment failures.
• Incorrect Copy Configuration: The copy block was placed outside the VM resource, so it wouldn't actually create multiple VMs or NICs.
• Duplicate Resource Names: All VMs and NICs used the same static name, which violates Azure's requirement for unique resource names in a resource group.
• Missing Dependency Links: VMs depend on NICs, and NICs depend on the Virtual Network—without dependsOn, resources might try to provision out of order (this is likely why your VNet creation failed or the NIC couldn't attach to it).
• No Storage Account Reuse: The original template didn't specify a shared storage account for all VM OS disks as you requested.
• Missing Network Security Group (NSG): You mentioned needing an NSG, but it wasn't included in the template.

Corrected ARM Template #

Here's a polished template that meets all your needs: bulk configurable VMs (default 900), single shared VNet/NSG, single storage account, private IP only, no DNS/domain join, and Basic_A0 VM size.

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "vmCount": {
      "type": "int",
      "defaultValue": 900,
      "metadata": {
        "description": "Number of VMs to deploy"
      }
    },
    "virtualMachineSize": {
      "type": "string",
      "defaultValue": "Basic_A0",
      "metadata": {
        "description": "VM size for all instances"
      }
    },
    "adminUsername": {
      "type": "string",
      "defaultValue": "user",
      "metadata": {
        "description": "Admin username for all VMs"
      }
    },
    "adminPassword": {
      "type": "securestring",
      "metadata": {
        "description": "Admin password for all VMs (use a strong value)"
      }
    },
    "location": {
      "type": "string",
      "defaultValue": "[resourceGroup().location]",
      "metadata": {
        "description": "Location for all resources (defaults to resource group location)"
      }
    },
    "storageAccountName": {
      "type": "string",
      "defaultValue": "[concat('vmstorage', uniqueString(resourceGroup().id))]",
      "metadata": {
        "description": "Unique name for the shared storage account"
      }
    }
  },
  "variables": {
    "vmNamePrefix": "uservm",
    "nicNamePrefix": "vmnic",
    "virtualNetworkName": "MyVNET",
    "subnetName": "VMSubnet",
    "addressPrefix": "10.0.0.0/16",
    "subnetPrefix": "10.0.0.0/20", // Larger subnet to fit 900+ private IPs
    "nsgName": "VMNSG",
    "subnetRef": "[resourceId('Microsoft.Network/virtualNetworks/subnets', variables('virtualNetworkName'), variables('subnetName'))]",
    "storageAccountType": "Standard_LRS"
  },
  "resources": [
    // Shared Storage Account (reused by all VMs)
    {
      "type": "Microsoft.Storage/storageAccounts",
      "apiVersion": "2021-09-01",
      "name": "[parameters('storageAccountName')]",
      "location": "[parameters('location')]",
      "sku": {
        "name": "[variables('storageAccountType')]"
      },
      "kind": "StorageV2",
      "properties": {
        "supportsHttpsTrafficOnly": true
      }
    },
    // Shared NSG (basic inbound/outbound rules)
    {
      "type": "Microsoft.Network/networkSecurityGroups",
      "apiVersion": "2021-05-01",
      "name": "[variables('nsgName')]",
      "location": "[parameters('location')]",
      "properties": {
        "securityRules": [
          {
            "name": "AllowSSH",
            "properties": {
              "protocol": "Tcp",
              "sourcePortRange": "*",
              "destinationPortRange": "22",
              "sourceAddressPrefix": "*",
              "destinationAddressPrefix": "*",
              "access": "Allow",
              "priority": 1000,
              "direction": "Inbound"
            }
          }
        ]
      }
    },
    // Shared VNet with NSG attached to subnet
    {
      "type": "Microsoft.Network/virtualNetworks",
      "apiVersion": "2021-05-01",
      "name": "[variables('virtualNetworkName')]",
      "location": "[parameters('location')]",
      "dependsOn": [
        "[resourceId('Microsoft.Network/networkSecurityGroups', variables('nsgName'))]"
      ],
      "properties": {
        "addressSpace": {
          "addressPrefixes": [
            "[variables('addressPrefix')]"
          ]
        },
        "subnets": [
          {
            "name": "[variables('subnetName')]",
            "properties": {
              "addressPrefix": "[variables('subnetPrefix')]",
              "networkSecurityGroup": {
                "id": "[resourceId('Microsoft.Network/networkSecurityGroups', variables('nsgName'))]"
              }
            }
          }
        ]
      }
    },
    // Bulk NICs (one per VM)
    {
      "type": "Microsoft.Network/networkInterfaces",
      "apiVersion": "2021-05-01",
      "name": "[concat(variables('nicNamePrefix'), '-', padLeft(copyIndex(), 3, '0'))]",
      "location": "[parameters('location')]",
      "copy": {
        "name": "nicCopy",
        "count": "[parameters('vmCount')]"
      },
      "dependsOn": [
        "[resourceId('Microsoft.Network/virtualNetworks', variables('virtualNetworkName'))]"
      ],
      "properties": {
        "ipConfigurations": [
          {
            "name": "ipconfig1",
            "properties": {
              "subnet": {
                "id": "[variables('subnetRef')]"
              },
              "privateIPAllocationMethod": "Dynamic",
              "privateIPAddressVersion": "IPv4"
            }
          }
        ],
        "enableIPForwarding": false
      }
    },
    // Bulk VMs
    {
      "type": "Microsoft.Compute/virtualMachines",
      "apiVersion": "2021-11-01",
      "name": "[concat(variables('vmNamePrefix'), '-', padLeft(copyIndex(), 3, '0'))]",
      "location": "[parameters('location')]",
      "copy": {
        "name": "vmCopy",
        "count": "[parameters('vmCount')]"
      },
      "dependsOn": [
        "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccountName'))]",
        "[concat('Microsoft.Network/networkInterfaces/', variables('nicNamePrefix'), '-', padLeft(copyIndex(), 3, '0'))]"
      ],
      "properties": {
        "osProfile": {
          "computerName": "[concat(variables('vmNamePrefix'), '-', padLeft(copyIndex(), 3, '0'))]",
          "adminUsername": "[parameters('adminUsername')]",
          "adminPassword": "[parameters('adminPassword')]",
          "linuxConfiguration": {
            "disablePasswordAuthentication": false
          }
        },
        "hardwareProfile": {
          "vmSize": "[parameters('virtualMachineSize')]"
        },
        "storageProfile": {
          "imageReference": {
            "publisher": "credativ",
            "offer": "Debian",
            "sku": "9",
            "version": "latest"
          },
          "osDisk": {
            "name": "[concat(variables('vmNamePrefix'), '-osdisk-', padLeft(copyIndex(), 3, '0'))]",
            "vhd": {
              "uri": "[concat(reference(resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccountName'))).primaryEndpoints.blob, 'vhds/', variables('vmNamePrefix'), '-osdisk-', padLeft(copyIndex(), 3, '0'), '.vhd')]"
            },
            "caching": "ReadWrite",
            "createOption": "FromImage"
          },
          "dataDisks": []
        },
        "networkProfile": {
          "networkInterfaces": [
            {
              "id": "[resourceId('Microsoft.Network/networkInterfaces', concat(variables('nicNamePrefix'), '-', padLeft(copyIndex(), 3, '0')))]"
            }
          ]
        },
        "diagnosticsProfile": {
          "bootDiagnostics": {
            "enabled": false
          }
        }
      }
    }
  ]
}

Key Improvements Explained #

• Configurable VM Count: The vmCount parameter lets you adjust the number of VMs (default set to 900).
• Unique Resource Names: Uses padLeft(copyIndex(), 3, '0') to generate unique names for VMs/NICs (e.g., uservm-001, vmnic-001) to avoid conflicts.
• Proper Dependencies: Ensures resources provision in the correct order: Storage Account → NSG → VNet → NICs → VMs—eliminating "resource not found" errors.
• Shared Storage Account: All VMs use the same storage account for their OS disks, as you requested.
• Larger Subnet: The 10.0.0.0/20 subnet provides ~4096 private IPs, which is more than enough for 900 VMs plus overhead.
• NSG Integration: Attaches an NSG to the subnet (you can modify security rules to match your needs).
• Private IP Only: No public IPs or DNS configuration added, keeping VMs isolated to the private network.
• Up-to-Date API Versions: Uses recent API versions for better compatibility and feature support.

Deployment Notes #

1. Check Quotas: Before deploying 900 VMs, verify your Azure subscription has enough core quota for Basic_A0 instances in the target region.
2. Storage Account Limits: A single Standard_LRS storage account has IOPS/throughput limits—if you hit performance issues, you may need to split VMs across multiple storage accounts (though this template follows your request for a single account).
3. Security: Consider using SSH keys instead of passwords for VM authentication for better security.
4. Validate First: Use Azure CLI's az deployment group validate or the Portal's template validation tool to catch errors before deployment.

内容的提问来源于stack exchange，提问作者Subscriber