feat: install waagent via wireserver by mxj220 · Pull Request #7987 · Azure/AgentBaker

mxj220 · 2026-02-27T21:37:30Z

Upgrades WALinuxAgent through manifest to preserve existing configurations but support the latest features (including FIPS 140-3 compatibility). Upgrading during build means that the customer faces no waagent update delays during AKS boot, as the latest version is baked into the VHD.

This update also blocks the WALinuxAgent from automatically updating afterwards.
What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes #

Copilot

Pull request overview

Adds support for installing/upgrading WALinuxAgent via the Azure wireserver manifest and running the install post-deprovision during VHD build, with accompanying VHD validation and regenerated CustomData snapshots.

Changes:

Update packer deprovision steps to optionally run a post-deprovision WALinuxAgent install script.
Add installWALinuxAgent (wireserver/manifest-based) and a VHD content test validating the cached agent + waagent.conf settings.
Add a walinuxagent entry to components.json, update build logging, capture waagent logs in e2e, and regenerate snapshot testdata.

Reviewed changes

Copilot reviewed 51 out of 78 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
vhdbuilder/packer/vhd-image-builder-mariner.json	Run post-deprovision WALinuxAgent install after waagent deprovision.
vhdbuilder/packer/vhd-image-builder-mariner-cvm.json	Same post-deprovision WALinuxAgent install hook (Mariner CVM).
vhdbuilder/packer/vhd-image-builder-mariner-arm64.json	Same post-deprovision WALinuxAgent install hook (Mariner arm64).
vhdbuilder/packer/vhd-image-builder-cvm.json	Same post-deprovision WALinuxAgent install hook (Ubuntu CVM).
vhdbuilder/packer/vhd-image-builder-base.json	Same post-deprovision WALinuxAgent install hook (Ubuntu base).
vhdbuilder/packer/vhd-image-builder-arm64-gen2.json	Same post-deprovision WALinuxAgent install hook (Ubuntu arm64 gen2).
vhdbuilder/packer/test/linux-vhd-content-test.sh	Add WALinuxAgent validation in VHD content tests.
vhdbuilder/packer/pre-install-dependencies.sh	Add OS variant detection.
vhdbuilder/packer/install-dependencies.sh	Add walinuxagent handling/logging in package loop.
vhdbuilder/packer/cleanup-vhd.sh	Generate post-deprovision WALinuxAgent install script driven by components.json.
pkg/agent/testdata/MarinerV2+Kata/CustomData	Regenerated CustomData snapshot.
pkg/agent/testdata/MarinerV2+CustomCloud/CustomData	Regenerated CustomData snapshot.
pkg/agent/testdata/Flatcar/CustomData.inner	Regenerated CustomData snapshot.
pkg/agent/testdata/CustomizedImageLinuxGuard/CustomData	Regenerated CustomData snapshot.
pkg/agent/testdata/CustomizedImageKata/CustomData	Regenerated CustomData snapshot.
pkg/agent/testdata/CustomizedImage/CustomData	Regenerated CustomData snapshot.
parts/linux/cloud-init/artifacts/cse_install.sh	Add manifest-based `installWALinuxAgent` implementation.
parts/common/components.json	Add `walinuxagent` downloadLocation entry.
e2e/vmss.go	Collect `/var/log/waagent.log` in VM log extraction.

parts/linux/cloud-init/artifacts/cse_install.sh

vhdbuilder/packer/cleanup-vhd.sh

vhdbuilder/packer/test/linux-vhd-content-test.sh

Copilot

Pull request overview

Copilot reviewed 51 out of 78 changed files in this pull request and generated 11 comments.

parts/linux/cloud-init/artifacts/cse_install.sh

vhdbuilder/packer/vhd-image-builder-mariner.json

vhdbuilder/packer/vhd-image-builder-cvm.json

parts/linux/cloud-init/artifacts/cse_install.sh

vhdbuilder/packer/cleanup-vhd.sh

vhdbuilder/packer/vhd-image-builder-mariner-cvm.json

vhdbuilder/packer/vhd-image-builder-mariner-arm64.json

vhdbuilder/packer/vhd-image-builder-base.json

vhdbuilder/packer/vhd-image-builder-arm64-gen2.json

Copilot

Pull request overview

Copilot reviewed 51 out of 78 changed files in this pull request and generated 3 comments.

parts/linux/cloud-init/artifacts/cse_install.sh

vhdbuilder/packer/cleanup-vhd.sh

Copilot

Pull request overview

Copilot reviewed 51 out of 78 changed files in this pull request and generated 4 comments.

parts/common/components.json

vhdbuilder/packer/install-dependencies.sh

vhdbuilder/packer/test/linux-vhd-content-test.sh

vhdbuilder/packer/pre-install-dependencies.sh

Copilot

Pull request overview

Copilot reviewed 50 out of 75 changed files in this pull request and generated no new comments.

awesomenix · 2026-03-02T23:40:13Z

parts/linux/cloud-init/artifacts/cse_install.sh

+
+    # Step 1: Get the goalstate to find the ExtensionsConfig URL
+    local goalstate
+    goalstate=$(retrycmd_if_failure 10 5 60 curl -sSf -H "x-ms-agent-name: WALinuxAgent" -H "x-ms-version: 2012-11-30" "${wireserverURL}/machine/?comp=goalstate") || {


curl has its own retries mechanism, look at the repo and search for --retries

awesomenix · 2026-03-02T23:40:58Z

parts/linux/cloud-init/artifacts/cse_install.sh

+# GAFamily is the exact version the waagent daemon targets during auto-update.
+# Installing it during VHD build lets the daemon pick it up locally without
+# downloading from the network at provisioning time.
+installWALinuxAgent() {


i see lot of python used in this function. Why not move all the functionality into a python script and call it? Just makes it easier to read and maintain.

awesomenix · 2026-03-02T23:42:41Z

vhdbuilder/packer/cleanup-vhd.sh

+if [ "$OS_ID" != "FLATCAR" ] && [ "$OS_VARIANT_ID" != "OSGUARD" ]; then
+    WALINUXAGENT_DOWNLOAD_DIR="/opt/walinuxagent/downloads"
+    WALINUXAGENT_WIRESERVER_URL="http://168.63.129.16:80"
+    cat > /opt/azure/containers/post-deprovision-walinuxagent.sh << WALINUXAGENT_SCRIPT


can you create this file in the repo directly (check it in) instead of creating one on the fly

awesomenix · 2026-03-02T23:43:34Z

vhdbuilder/packer/vhd-image-builder-base.json

@@ -784,7 +784,7 @@
      "inline": [
        "sudo /bin/bash -eux /home/packer/cis.sh",
        "sudo /bin/bash -eux /opt/azure/containers/cleanup-vhd.sh",
-        "sudo /usr/sbin/waagent -force -deprovision+user && export HISTSIZE=0 && sync || exit 125"
+        "sudo /bin/bash -c '/usr/sbin/waagent -force -deprovision+user && export HISTSIZE=0 && sync && if [ -f /opt/azure/containers/post-deprovision-walinuxagent.sh ]; then /bin/bash -eu /opt/azure/containers/post-deprovision-walinuxagent.sh && rm -f /opt/azure/containers/post-deprovision-walinuxagent.sh; fi' || exit 125"


move the whole command into deprovision script for easier debugging

mxj220 added 10 commits February 26, 2026 16:37

install waagent via manifest

8eed1ac

replace unzip

59ea521

exclude flatcar and osguard

5549b6a

change installed version

059b354

after deprovision

e95b8b1

sudo

b5b93f1

fix test

a8c8cf4

fix test for azlinux

41543df

fix test for installed files

15b18b6

remove unneeded renovate/components blocks

f1177c2

Copilot AI review requested due to automatic review settings February 27, 2026 21:37

mxj220 requested review from AbelHu, Devinwong, YaoC, awesomenix, calvin197, cameronmeissner, djsly, ganeshkumarashok, juan-lee, junjiezhang1997, lilypan26, pdamianov-dev, phealy, r2k1, timmy-wright, yewmsft and zachary-bailey as code owners February 27, 2026 21:37

Copilot started reviewing on behalf of mxj220 February 27, 2026 21:38 View session

Copilot AI reviewed Feb 27, 2026

View reviewed changes

Copilot started reviewing on behalf of mxj220 February 27, 2026 22:04 View session

Copilot AI reviewed Feb 27, 2026

View reviewed changes

robust GAFamily check

03f5267

mxj220 temporarily deployed to test February 27, 2026 22:28 — with GitHub Actions Inactive

cleanup sas creds

cbfc811

Copilot AI review requested due to automatic review settings March 2, 2026 18:24

mxj220 had a problem deploying to test March 2, 2026 18:24 — with GitHub Actions Failure

Copilot started reviewing on behalf of mxj220 March 2, 2026 18:24 View session

Copilot AI reviewed Mar 2, 2026

View reviewed changes

parts/linux/cloud-init/artifacts/cse_install.sh Outdated Show resolved Hide resolved

parts/linux/cloud-init/artifacts/cse_install.sh Outdated Show resolved Hide resolved

vhdbuilder/packer/cleanup-vhd.sh Show resolved Hide resolved

restore resolv.conf, use curl -Ssf

71b7c9d

mxj220 had a problem deploying to test March 2, 2026 19:21 — with GitHub Actions Failure

makegen

f13e689

Copilot AI review requested due to automatic review settings March 2, 2026 19:30

mxj220 had a problem deploying to test March 2, 2026 19:30 — with GitHub Actions Failure

Copilot started reviewing on behalf of mxj220 March 2, 2026 19:30 View session

Copilot AI reviewed Mar 2, 2026

View reviewed changes

move out of components.json

4e48098

mxj220 requested review from sulixu and surajssd as code owners March 2, 2026 21:03

mxj220 temporarily deployed to test March 2, 2026 21:03 — with GitHub Actions Inactive

mxj220 changed the title ~~feat: install waagent via manifest~~ feat: install waagent via wireserver Mar 2, 2026

remove from diff

6696a63

Copilot AI review requested due to automatic review settings March 2, 2026 21:13

mxj220 temporarily deployed to test March 2, 2026 21:13 — with GitHub Actions Inactive

Copilot started reviewing on behalf of mxj220 March 2, 2026 21:14 View session

Copilot AI reviewed Mar 2, 2026

View reviewed changes

awesomenix reviewed Mar 2, 2026

View reviewed changes

Conversation

mxj220 commented Feb 27, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

awesomenix Mar 2, 2026

Choose a reason for hiding this comment

Uh oh!

awesomenix Mar 2, 2026

Choose a reason for hiding this comment

Uh oh!

awesomenix Mar 2, 2026

Choose a reason for hiding this comment

Uh oh!

awesomenix Mar 2, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants