deep-learning-azure

Public Azure integration layer for deep-learning-core.

deep-learning-azure adds Azure ML execution, Azure storage helpers, and Azure-oriented dataset wrappers on top of deep-learning-core.

Current release: deep-learning-azure==0.0.28. Requires deep-learning-core>=0.1.12,<0.2.

What's New in 0.0.28?

• file downloads and the shard cache prefer AzCopy with configurable SDK fallback
• Azure settings share an azure namespace, with project defaults and dataset overrides; existing flat configs remain supported
• SDK downloads support parallel range requests and configurable pools, chunks, read buffers, and timeouts; cache path hooks and reservations stay in place

Previous versions are recorded in the release history.

Install it directly or through the deep-learning-core[azure] extra. The package is kept separate so Azure-specific dependencies and scaffold wiring do not leak into plain deep-learning-core installations.

Install

Install from PyPI through the core extra:

pip install "deep-learning-core[azure]"

Install the package directly:

pip install "deep-learning-azure[webdataset]"

Install in a uv project:

uv add "deep-learning-core[azure]"

Scope

• Azure ML executor
• Azure storage helpers and AzCopy wrappers
• Azure dataset wrappers
• Azure experiment scaffold integration through dl-init --with-azure

Out Of Scope

• Generic trainer, dataset, and metric abstractions
• Public framework defaults
• Concrete experiment repositories

Quick Start

Install it into an experiment repository through the Azure extra:

uv add "deep-learning-core[azure]"

The installed package registers its runtime components through dl-core's extension entry points. dl-init --with-azure also prepares the experiment scaffold, selects executors.azure in the example sweep, and creates azure-config.json. When adding Azure wiring to an existing project, dl-init preserves its dataset modules. Add project-specific Azure dataset wrappers there if needed.

The development lock resolves dl-core from PyPI. Both publish workflows check that the locked version matches the declared minimum before building a release.

The Azure executor is sweep-oriented. Use uv run dl-sweep experiments/lr_sweep.yaml --dry-run before the first real submission in a new repository. It writes generated run YAML; use --preview for a read-only check, or --overwrite when replacing existing generated configs is intended.

If you need Azure ML to run a custom script instead of the default python -m dl_core.worker ... command, set executor.command in the sweep config. Prefer plain python ... commands because the Azure ML environment already controls the runtime. The command string also supports placeholders such as {config_path} and {run_name}.

Concrete experiment flow:

uv init
uv add deep-learning-azure
uv run dl-init --root-dir . --with-azure
uv run dl-core add dataset AzureSeq --base azure_compute_multiframe
uv run dl-sweep experiments/lr_sweep.yaml --dry-run

Example custom Azure submission:

fixed:
  executor:
    name: azure
    compute_target: gpu-cluster
    environment_name: dl_lab
    environment_version: latest
    # parent_job_name: existing-azure-parent-job
    command: python scripts/preprocessing/fix_nested_frame_dirs.py --config {config_path}

Tracker naming defaults to the repository root name. If you want Azure job submission and Azure MLflow to use a different destination name, set tracking.experiment_name in your sweep config. Use executor.parent_job_name when child Azure jobs should nest under an existing Azure ML parent job; keep tracking.parent_run_id for MLflow nesting. Azure-owned MLflow runs close as FINISHED, FAILED, or KILLED according to the trainer's completed, failed, or interrupted terminal status.

Azure submissions automatically rewrite the default local runtime.output_dir from artifacts to outputs/artifacts inside the remote job. That keeps checkpoints, plots, metrics, and other run files under Azure ML's managed output directory without changing the local default artifact layout.

When you analyze an Azure-backed sweep with dl-analyze, the Azure metrics source fetches only the metric histories requested on the CLI, for example:

uv run dl-analyze --sweep experiments/lr_sweep.yaml \
  --metric test/eer --mode min \
  --metric test/accuracy --mode max \
  --rank-method rank-sum

Those fetched metric histories are cached in analysis_cache.json next to sweep_tracking.json. Use --force to refresh them.

If you want the tracked Azure job outputs locally after the sweep finishes, run:

uv run dl-sync --sweep experiments/lr_sweep.yaml --artifacts

That downloads the Azure job bundle for each tracked run and patches sweep_tracking.json with the resolved local artifact paths.

Concrete dataset scaffold examples:

uv run dl-core add dataset AzureImages --base azure_compute
uv run dl-core add dataset AzureFrames --base azure_compute_frame
uv run dl-core add dataset AzureSeq --base azure_compute_multiframe
uv run dl-core add dataset AzureStream --base azure_streaming
uv run dl-core add dataset AzureStreamSeq --base azure_streaming_multiframe
uv run dl-core add dataset AzureTar --base azure_streaming_tar

Dataset Wrapper Notes

Use the compute wrappers when the dataset is already mounted into the Azure ML job or available locally through a compatible directory layout:

• AzureComputeWrapper
• AzureComputeFrameWrapper
• AzureComputeMultiFrameWrapper
• AzureComputeTarShardWrapper

Compute wrappers resolve the dataset root in this order:

• dataset.root_dir
• AZURE_ML_INPUT_<input_name>
• dataset.local_fallback_root when dataset.allow_local_fallback is true

Use the streaming wrappers when you want to read directly from blob storage instead of relying on an Azure ML input mount:

• AzureStreamingWrapper
• AzureStreamingFrameWrapper
• AzureStreamingMultiFrameWrapper
• AzureStreamingTarShardWrapper

Streaming wrappers read Azure settings from dataset.azure, overriding the azure defaults in azure-config.json. Set container_name and account_name in either location. Existing flat dataset keys and project files remain valid.

AzureClientService.get_blob_sas_url() issues a user-delegation SAS through DefaultAzureCredential; it never silently returns an unsigned URL. The active identity therefore needs permission to request a user delegation key and the required Blob Data role for the requested operation. If a child job's dataset uses a different storage account from its job SAS, the client uses managed identity for that dataset instead of the other account's token; grant the job identity access to the dataset account.

File downloads through AzureClientService.download_blob() and the tar cache prefer AzCopy, falling back to the SDK if it is missing or a transfer fails. Missing AzCopy is detected once per executable per process. A transfer or SAS signing failure affects only that file. Images and JSON read into memory use the SDK directly.

dataset:
  azure:
    config_path: azure-config.json
    account_name: my-storage-account
    container_name: datasets
    download:
      backend: azcopy            # Or sdk
      fallback_to_sdk: true
      azcopy:
        concurrency: null       # Inherit environment or AzCopy defaults
        buffer_gb: null
      sdk:
        max_concurrency: 32
        connection_pool_size: 32
        chunk_size_mib: 4
        read_buffer_kib: 64

Install AzCopy separately to use it; no separate azcopy login is needed when the Azure client can supply a SAS URL. Downloads keep temporary files separate from final destinations and verify size and any stored MD5 before promotion. See download settings and validation for timeouts, larger SDK chunks, and direct utility usage.

Frame wrappers share a few image-specific settings:

• height / width for the output tensor shape
• resize_height / resize_width for pre-augmentation resizing
• use_face_detection to enable metadata-driven face crops
• margin as an int, two-item sequence, or {height, width} mapping

If you enable face_detected_and_resized_cache, processed frame images are stored in the wrapper cache when a cache backend is available. That is most useful for the streaming frame wrappers, where blob reads can be cached locally.

Tar shard wrappers use the optional WebDataset integration from dl-core. Compute wrappers provide mounted shard paths. Streaming wrappers provide user-delegation SAS URLs, so WebDataset can divide shards between ranks and workers before opening them. Project transforms receive grouped member bytes through file_dict["members"].

For project-specific discovery and weighting, override build_shard_sources(split). Return logical mounted paths in compute wrappers or logical container-relative blob paths in streaming wrappers; the parent wrapper still performs mount resolution or SAS authentication.

dataset:
  name: my_azure_tar_dataset
  auto_split: false
  shards:
    train:
      - path: train/attack-000.tar
        group: attack
      - path: train/real-000.tar
        group: real
  required_extensions: [png, json]
  persistent_workers: true
  azure:
    container_name: datasets
    cache:
      enabled: true
      cache_dir: /mnt/localssd/dl-azure
      cache_size_gb: 3000
      download_retries: 5
      retry_backoff_seconds: 1
      retry_backoff_max_seconds: 30
    download:
      sdk:
        connection_timeout_seconds: 20
        read_timeout_seconds: 120
  webdataset:
    shard_shuffle: 100
    sample_shuffle: 10000
    resampled:
      train: true
      validation: false
      test: false

download_retries counts retries after the initial attempt. Retry jitter is enabled by default. Set azure.cache.retry_jitter: false only when fixed delays are required. Authentication, permission, and missing-blob errors are not retried. Streaming tar shards use the local cache by default so sample metadata and download errors do not expose signed URL query strings.

For training that rotates shards, enable queued downloads and report progress through wrapper.create_shard_prefetcher():

dataset:
  azure:
    prefetch:
      enabled: true
      trigger_fraction: 0.5
      max_concurrent_downloads: 2
      max_pending_shards: 32

Create one plan per active shard slot, or one plan for a whole cycle. The trainer supplies the selected replacements and calls advance() with samples or batches consumed. At the threshold, the queue downloads those replacements while training continues. Current and upcoming shards remain protected from cache eviction until their plan is released. Prefetching defaults to disabled; enabling it requires the project trainer to call this API. See the integration example and cache limits.

Custom tar cache destinations

Concrete classes choose where each blob is cached through a stable path mapping:

from pathlib import Path
from dl_azure.datasets import AzureStreamingTarShardWrapper


class ProjectTarWrapper(AzureStreamingTarShardWrapper):
    def get_shard_cache_path(self, blob_path: str) -> Path:
        return Path(self.config["data_cache_root"]).expanduser() / blob_path

    def transform(self, file_dict: dict, split: str) -> dict:
        return {"key": file_dict["key"], "members": file_dict["members"]}

The hook receives a container-relative blob path. Absolute results may use any data root; relative results are beneath azure.cache.cache_dir. Returning None uses the existing hashed filename. create_shard_cache() is the shared factory for streaming and prefetching. Direct AzureShardCache consumers can supply a path_resolver receiving the public blob URL without SAS query strings.

azure.cache.state_dir optionally selects where locks, pins, and destination records live, independently of shard destinations. All processes sharing destinations must share cache state, the size limit, and the path mapping. Eviction accounts for registered shard files across directories and preserves reservations. Different blobs mapped to the same destination raise an error. Cache hits update access metadata without changing tar modification time.

Indexed Azure tar reading

Use cached_shard_sources() in the training process to resolve selected sources and reserve their local files. Build core's indexed dataset inside that context and finish its reader and workers before exiting. Concrete classes choose whether to use this utility. Workers receive local paths and metadata; the reservation context and prefetch controller belong to the trainer.

dataset.track_shard_progress: true retains shard IDs after transforms. Record completed batches through record_shard_consumption() and pass the resulting counts to ShardPrefetcher.advance(). Each shard can trigger its replacement while one DataLoader worker pool reads across the selected shards. See the indexed integration example.

Multiframe wrappers add one multiframe block:

dataset:
  name: AzureSeq
  input_name: dataset_path
  allow_local_fallback: true
  local_fallback_root: data/my_dataset
  height: 224
  width: 224
  use_face_detection: true
  face_detected_and_resized_cache: true
  multiframe:
    mode: consecutive
    num_frames: 5
    frame_stride: 2

multiframe.mode: random draws num_frames unique frames per sample. multiframe.mode: consecutive walks each video in fixed windows and uses frame_stride to skip frames between windows. Videos with fewer than num_frames frames are skipped.

What You Get

• the azure executor
• Azure storage helpers and AzCopy wrappers
• generic Azure dataset foundations: AzureComputeWrapper, AzureStreamingWrapper, AzureComputeFrameWrapper, AzureStreamingFrameWrapper, AzureComputeMultiFrameWrapper, AzureStreamingMultiFrameWrapper, AzureComputeTarShardWrapper, and AzureStreamingTarShardWrapper
• dl-init --with-azure scaffold integration
• a managed .amlignore block that preserves user content while excluding common local-only outputs and environment files from Azure submissions
• Azure job output routing to outputs/artifacts for automatic artifact persistence in Azure ML

Companion Packages

• dl-core
• dl-mlflow
• dl-wandb

Documentation

• Documentation Index
• GitHub Repository

License

MIT. See LICENSE.