Question

Your team uses a multi-stage YAML pipeline on Microsoft-hosted agents with `vmImage: 'ubuntu-latest'`. After Microsoft rolled the `ubuntu-latest` label to a new Ubuntu major version, several builds began failing because a preinstalled toolchain version changed. Leadership wants builds to remain reproducible and unaffected by future automatic image rollovers, while still allowing the team to deliberately adopt new images on their own schedule. What should you do?

Accepted Answer

Pin the pool to a specific image label such as `vmImage: 'ubuntu-22.04'` and update it intentionally when the team validates a newer image.

Answer

Add `retryCountOnTaskFailure: 3` to the failing tasks so transient image differences are automatically retried.

Answer

Switch the job to `vmImage: 'ubuntu-latest'` but add a script step that uninstalls and reinstalls the toolchain at the pinned version on every run.

Answer

Move the workload to a self-hosted agent pool so Microsoft can no longer change the image, keeping `ubuntu-latest` as the demand.