ci: reverts to generated nuget.config to avoid impacting external contributors

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

Author: baywet

.azure-pipelines/ci-build.yml

@@ -75,6 +75,18 @@ extends:
         - task: NuGetAuthenticate@1
           displayName: 'Authenticate to Azure Artifacts'
 
+        - pwsh: |
+            @"
+            <?xml version="1.0" encoding="utf-8"?>
+            <configuration>
+              <packageSources>
+                <clear />
+                <add key="GraphDeveloperExperiences_Public" value="https://microsoftgraph.pkgs.visualstudio.com/0985d294-5762-4bc2-a565-161ef349ca3e/_packaging/GraphDeveloperExperiences_Public/nuget/v3/index.json" />
+              </packageSources>
+            </configuration>
+            "@ | Set-Content -Path "$(Build.SourcesDirectory)/nuget.config" -Encoding UTF8
+          displayName: 'Create nuget.config (central feed)'
+
         - task: DotNetCoreCLI@2
           displayName: 'restore'
           inputs:
@@ -487,6 +499,7 @@ extends:
                       --build-arg VSS_NUGET_EXTERNAL_FEED_ENDPOINTS \
                       --build-arg VSS_NUGET_URI_PREFIXES \
                       --secret id=vss_nuget_accesstoken,env=VSS_NUGET_ACCESSTOKEN \
+                      --secret id=nuget_config,src="$(Pipeline.Workspace)/nuget.config" \
                       -t "$(REGISTRY)/$(IMAGE_NAME):nightly" \
                       -t "$(REGISTRY)/$(IMAGE_NAME):${VERSION}.${BUILDDATE}${RUNNUMBER}" \
                       "$(Pipeline.Workspace)"
@@ -510,6 +523,7 @@ extends:
                       --build-arg VSS_NUGET_EXTERNAL_FEED_ENDPOINTS \
                       --build-arg VSS_NUGET_URI_PREFIXES \
                       --secret id=vss_nuget_accesstoken,env=VSS_NUGET_ACCESSTOKEN \
+                      --secret id=nuget_config,src="$(Pipeline.Workspace)/nuget.config" \
                       -t "$(REGISTRY)/$(IMAGE_NAME):latest" \
                       -t "$(REGISTRY)/$(IMAGE_NAME):${VERSION}" \
                       "$(Pipeline.Workspace)"

Dockerfile

@@ -6,13 +6,17 @@ ARG VSS_NUGET_EXTERNAL_FEED_ENDPOINTS
 
 COPY ./src ./hidi/src
 COPY ./Directory.Build.props ./hidi/Directory.Build.props
-COPY ./nuget.config ./hidi/nuget.config
 COPY ./README.md ./hidi/README.md
 WORKDIR /app/hidi
-RUN wget -qO- https://aka.ms/install-artifacts-credprovider.sh | bash
-RUN --mount=type=secret,id=vss_nuget_accesstoken,target=/run/secrets/vss_nuget_accesstoken \
-    VSS_NUGET_ACCESSTOKEN="$(cat /run/secrets/vss_nuget_accesstoken)" \
-    dotnet publish ./src/Microsoft.OpenApi.Hidi/Microsoft.OpenApi.Hidi.csproj -c Release -p:RestoreConfigFile=/app/hidi/nuget.config
+RUN --mount=type=secret,id=vss_nuget_accesstoken,target=/run/secrets/vss_nuget_accesstoken,required=false \
+    --mount=type=secret,id=nuget_config,target=/run/secrets/nuget_config,required=false \
+    if [ -f /run/secrets/nuget_config ]; then \
+      wget -qO- https://aka.ms/install-artifacts-credprovider.sh | bash && \
+      VSS_NUGET_ACCESSTOKEN="$(cat /run/secrets/vss_nuget_accesstoken)" \
+      dotnet publish ./src/Microsoft.OpenApi.Hidi/Microsoft.OpenApi.Hidi.csproj -c Release -p:RestoreConfigFile=/run/secrets/nuget_config; \
+    else \
+      dotnet publish ./src/Microsoft.OpenApi.Hidi/Microsoft.OpenApi.Hidi.csproj -c Release; \
+    fi
 
 FROM mcr.microsoft.com/dotnet/runtime:8.0-jammy-chiseled AS runtime
 WORKDIR /app