feat: enable cloud-init write_files module for OSGuard images

   Enable the write_files cloud-init module in OSGuard 10-users-ssh-enable.cfg
   so that custom data write_files entries are delivered during provisioning.
   Add IsOSGuard template function to guard future /usr/ path entries, since
   OSGuard has /usr/ mounted read-only via dm-verity. Add regression test
   ensuring no write_files entries target /usr/ paths for OSGuard.

Author: awesomenix

e2e/scenario_test.go

@@ -25,7 +25,6 @@ func Test_AzureLinux3OSGuard(t *testing.T) {
 			VHD:     config.VHDAzureLinux3OSGuard,
 			BootstrapConfigMutator: func(nbc *datamodel.NodeBootstrappingConfiguration) {
 				nbc.AgentPoolProfile.LocalDNSProfile = nil
-				nbc.EnableScriptlessCSECmd = false
 			},
 			Validator: func(ctx context.Context, s *Scenario) {},
 			VMConfigMutator: func(vmss *armcompute.VirtualMachineScaleSet) {
@@ -2034,7 +2033,6 @@ func Test_AzureLinux3OSGuard_PMC_Install(t *testing.T) {
 			VHD:     config.VHDAzureLinux3OSGuard,
 			BootstrapConfigMutator: func(nbc *datamodel.NodeBootstrappingConfiguration) {
 				nbc.AgentPoolProfile.LocalDNSProfile = nil
-				nbc.EnableScriptlessCSECmd = false
 			},
 			Validator: func(ctx context.Context, s *Scenario) {},
 			VMConfigMutator: func(vmss *armcompute.VirtualMachineScaleSet) {

parts/linux/cloud-init/artifacts/azlosguard/10-users-ssh-enable.cfg

@@ -2,6 +2,7 @@ users:
   - default
 
 cloud_init_modules:
+  - write_files
   - users_groups
   - ssh
 

parts/linux/cloud-init/nodecustomdata.yml

@@ -10,6 +10,12 @@ bootcmd:
   done
 
 write_files:
+# IMPORTANT: OSGuard images have /usr/ mounted read-only (dm-verity).
+# All write_files entries must target /opt/ or /etc/ paths only.
+# If a /usr/ path is ever needed for non-OSGuard distros, guard it with:
+#   {{ if not IsAzlOSGuard }}
+#   - path: /usr/...
+#   {{ end }}
 {{if EnableScriptlessCSECmd}}
 - path: /opt/azure/containers/scriptless-cse-overrides.txt
   permissions: "0644"
@@ -28,7 +34,14 @@ write_files:
     {{GetVariableProperty "cloudInitData" "provisionSource"}}
 
 
-{{if IsMariner}}
+{{if IsAzlOSGuard}}
+- path: {{GetCSEHelpersScriptDistroFilepath}}
+  permissions: "0744"
+  encoding: gzip
+  owner: root
+  content: !!binary |
+    {{GetVariableProperty "cloudInitData" "provisionSourceAzlOSGuard"}}
+{{- else if IsMariner}}
 - path: {{GetCSEHelpersScriptDistroFilepath}}
   permissions: "0744"
   encoding: gzip
@@ -88,7 +101,14 @@ write_files:
   content: !!binary |
     {{GetVariableProperty "cloudInitData" "provisionSendLogs"}}
 
-{{if IsMariner}}
+{{if IsAzlOSGuard}}
+- path: {{GetCSEInstallScriptDistroFilepath}}
+  permissions: "0744"
+  encoding: gzip
+  owner: root
+  content: !!binary |
+    {{GetVariableProperty "cloudInitData" "provisionInstallsAzlOSGuard"}}
+{{- else if IsMariner}}
 - path: {{GetCSEInstallScriptDistroFilepath}}
   permissions: "0744"
   encoding: gzip
@@ -176,7 +196,8 @@ write_files:
   content: !!binary |
     {{GetVariableProperty "cloudInitData" "migPartitionScript"}}
 
-{{if IsMariner}}
+{{if IsAzlOSGuard}}
+{{- else if IsMariner}}
 - path: /opt/azure/containers/mariner-package-update.sh
   permissions: "0544"
   encoding: gzip

pkg/agent/baker.go

@@ -700,6 +700,10 @@ func getContainerServiceFuncMap(config *datamodel.NodeBootstrappingConfiguration
 		"IsKata": func() bool {
 			return profile.Distro.IsKataDistro()
 		},
+		"IsAzlOSGuard": func() bool {
+			return profile.Distro.IsAzureLinuxOSGuardDistro() ||
+				profile.Distro == datamodel.CustomizedImageLinuxGuard
+		},
 		"IsCustomImage": func() bool {
 			return profile.Distro == datamodel.CustomizedImage ||
 				profile.Distro == datamodel.CustomizedImageKata ||

pkg/agent/baker_test.go

@@ -1528,6 +1528,18 @@ oom_score = -999
 				Expect(exist).To(BeFalse())
 			},
 		),
+		Entry("CustomizedImageLinuxGuard write_files should not target /usr/ paths", "CustomizedImageLinuxGuard", "1.24.2",
+			func(c *datamodel.NodeBootstrappingConfiguration) {
+				c.ContainerService.Properties.AgentPoolProfiles[0].KubernetesConfig = &datamodel.KubernetesConfig{
+					ContainerRuntime: datamodel.Containerd,
+				}
+				c.ContainerService.Properties.AgentPoolProfiles[0].Distro = datamodel.CustomizedImageLinuxGuard
+			}, func(o *nodeBootstrappingOutput) {
+				for path := range o.files {
+					Expect(path).NotTo(HavePrefix("/usr/"), "OSGuard has /usr/ read-only (dm-verity), write_files must not target /usr/ paths: %s", path)
+				}
+			},
+		),
 		Entry("Flatcar", "Flatcar", "1.31.0", func(config *datamodel.NodeBootstrappingConfiguration) {
 			config.OSSKU = datamodel.OSSKUFlatcar
 			config.ContainerService.Properties.AgentPoolProfiles[0].Distro = datamodel.AKSFlatcarGen2

pkg/agent/const.go

@@ -49,10 +49,12 @@ const (
 	kubernetesCSEHelpersScript            = "linux/cloud-init/artifacts/cse_helpers.sh"
 	kubernetesCSEHelpersScriptUbuntu      = "linux/cloud-init/artifacts/ubuntu/cse_helpers_ubuntu.sh"
 	kubernetesCSEHelpersScriptMariner     = "linux/cloud-init/artifacts/mariner/cse_helpers_mariner.sh"
+	kubernetesCSEHelpersScriptAzlOSGuard  = "linux/cloud-init/artifacts/azlosguard/cse_helpers_osguard.sh"
 	kubernetesCSEHelpersScriptFlatcar     = "linux/cloud-init/artifacts/flatcar/cse_helpers_flatcar.sh"
 	kubernetesCSEInstall                  = "linux/cloud-init/artifacts/cse_install.sh"
 	kubernetesCSEInstallUbuntu            = "linux/cloud-init/artifacts/ubuntu/cse_install_ubuntu.sh"
 	kubernetesCSEInstallMariner           = "linux/cloud-init/artifacts/mariner/cse_install_mariner.sh"
+	kubernetesCSEInstallAzlOSGuard        = "linux/cloud-init/artifacts/azlosguard/cse_install_osguard.sh"
 	kubernetesCSEInstallFlatcar           = "linux/cloud-init/artifacts/flatcar/cse_install_flatcar.sh"
 	kubernetesCSEConfig                   = "linux/cloud-init/artifacts/cse_config.sh"
 	kubernetesCSESendLogs                 = "linux/cloud-init/artifacts/cse_send_logs.py"

pkg/agent/testdata/CustomizedImageLinuxGuard/CustomData

@@ -25,8 +25,7 @@ write_files:
   encoding: gzip
   owner: root
   content: !!binary |
-    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
-
+    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
 
 
 
@@ -64,8 +63,7 @@ write_files:
   encoding: gzip
   owner: root
   content: !!binary |
-    H4sIAAAAAAAC/+xce3PbOJL/X5+ih9FObM9QDyeTmvWu5laRFMcVWVbpkbmtTJYFkZCEEUUwAOjYcXSf/QrgC3xJsjN7e3e1+4ezIoBGv9C/7iY4z75rLojXXCC+rtUY3tJb3KOeQMTDzDk5hYcaAADyhbXCwvIDtsLQbsFP8KLVgi1d3Jt2Mr22q9WIxwVy3T72ebL6MyLCWlJmSTIutTdcPWZYsHt761icuNgT0D6XdM9/AjtgLphLPh3CWgifXzSbPrI3aIV5Y0tsRjldioZNt02bekuyagaLwBNBs/4wfz0fzebWZDAcdKeDXbLMTJaZPqNOw8EL+AWaYuvvnfL1K+A7IqA+mEys66k1ntz0rf7gtdW/+XU0vOn2rdnV9eBmPsvKQ5bWEhE3YBheSZHaLXD8zQpM8g1bjt9dWt1+33rTvRrWYqNsEdv82h0SL7jrrqQO19R1MhYLfAcJnCXbHc+s+bjfnQ0S/tUaf7OyXMJF5wT5PmJbysxAEJfDgnjOn03H4+FPG5k2ZoIsiY0E5mBjf23adLulHtgrRgPfdInAYJMljyjY1PMEQ/YGbPnXJQuTBZ4gWwx4IdDCxRywWAtKXVi5AReYLblpu0QJJagPxCPC5Pdc4K25xq6PGQfiUUGW96ZcxoFQNc9nNBD4HIjPsQDiR9S9ZfR/fv8ELln4aGv6nz8FyCXiXj2If0TUtjTwBHiSi1Ayn6y+AKc2EsDv+TLSBb/nXCAB8pfpSkPA3ZdIaA8LGwmT+thbcAe+EB+Yt4rob7bUgZVtwxZtMDibLVciMrRd8miKImeuMXIw42b9JPDQFoPJTqORLXUCF3MT3wmG9PHT0J4utZELN9P3g8n06makniW/OvWTFcM+9K+ms8nV6/jMQBMLu3lmMuxixPFXsAMB5hLOwXTA6Binisrr4c3rN/PpwIqJGe3Gy8ZPRmbwPB09b/zUODcAsn72Q+fEWLh0sQw4Pu/UHwoLd9F2ZAkfwKg/JMzvDOiAcX7eaL004KP07tLxl+H4X0Cssaco5baXO78I98Aux2VTEg41BlP+QI6EBJaktpfZg8wQ9mmBXOTZRxL8ZukN9MVb8s6LRqvRfmlkN11SpmJIFKuAeFB/iNd+OPu4+ws4NCFKlvBdEnIiCIAXLWjDq1YL6hqhHDfyf7/TgHnItYULpulR00crzMAMMusyK7Kh7Go0nXWHw0wsjkSR/zjUw/8MRYaxSHLtEC5DCyh1fkbCXjt0VTKPy/hUnLQkEjjDQN31xa9ErK9jYBhvVgmM7sfLb0VKCUDStjEu5rBJDWXB6eb135X+h1fT2UEgbEdAaPvV5FXoQb5ochowG3P1tOE0j9k3PMP2moIhYfQDYva6g7bOq5c/IrYN/66XHw+paa9+QGAuiLeCLSKeIRVVwXBWODNapkZr327KDb7n6RYNxG34Cit/BabpYAXbBRs25HA+tbgcX1rvBn8/PpmptKEinyhDMInfjnxYNN6BbR+ZtiTnZnzdm2CfciIou09OTKTA95hxQr2OUX9o7wwNGqkveMcwKfQJu7gYCPviIrSkyoKOs27ouiU0fMQE75hGiVzWZyLWltxdhhv57844LkVTIcxcPsXz4CN8/310ROpZzRjSgWQyYH6C5//1PBfoQl1FpKw/QmdZvg7p7pD+dM6O0GNFyB3dEoegbLxFDvXce/DUkLXyV9YG3zO5l4/EumMk0kaPeTOc2vCDRcj7duMQBqYPRv3EIUwlaEb9oYLizjg1aqV7R+pU6JvfPKfqiAX5S/d12w8sFRTrJysseuN5l9nrUwBtCsM+DecY+sqIhTA0WlFiKKfooBqTV4ip4m4RMTX6dz+/sl69NKLMq5SGjNp7afAFR0Yxdws9fO5tPPrZg954DnI6EdgWAcMXUH+I99kZGlkRMK807cohQSZlyDFXoanw9/l5Ky9wOe2XT6D9MqVdUMXo/VX/qqs0BxyLwAfCwaMCeOD7lAnsAPVgrghBkad9OsoDrqZb4GTlYcdc3Heq/T3FYwffYpf6mDUc+tlzKXIakSOH2cvWDwRu2oGDmlIQ3kyIZjWya9YfEh/ZQVPCdDK1cIp2taKfR0xaAXM7xj+XveaLxfLnVy9sOwwYWeCVqYC1JC5Os4NqRRaGJPu7bCwM/eCPxl/CxyGWXIVpP067RqFaI6gZoS3WEZgso6aIKw+CNmlnwPkvUuFNL3BdDZmMfxBiFMKB9EloRXEs4/3RWDsaC2P+FnlohZ3L8Txie0i4yCcMvHOSO3emg2+JjU3fDVYk3d5BAtnYE5iZKz8wQ+LMfGnalOHDs3xGfUawQOw+nWyvtia+UweTqaen2lFLNMU//O3jztA6biF+XYfiDe788Wb1htFtD9lrnMiXwFHzFrGmSxbNTbDALhbNjHw8rQE1w6ga8KRUgaeZajA+In3COkaT+qKZNXAznsANvYIselLBM0qqx5xe1DwZ4JArMfQeSEzsR+Ab4vsy7TAyFNgWTLaEFKDrD5oEu9PMZJt6gngB1qvMVHC8eENc3KmfLImnuNcJGWBu0Z2DfbGGNphxLqAzfmaA6TPiCTA/BUToB+FUHsZ4AyOjuA9gflGbhaO7InikinqDiFSsoOp0CilsRnMOXhgVtfZ1d9S9HPTjODL4z3FSequmZK7uDiPAiluCWvgWezJZ676bNnrTQSMySnbvRtI7XkSOIB1YSmSAUTkGutyFeFXVGzjK5qpzsIvb4uEBU1VGcp4OpeNaLlbMZLZHrszB+URx40AE68gXCtrD0seoaRYocFeSph5iq2TJfn4ux5ewwSkju1rNdjHy5v7leN5n5BazVH9ys8kS6pfjudUfTGegosXKD74tAEXWLYs9RsaykVf1GOkJNyKXMHerlY0XZrQyg2YyeDIPC8xNm5Gwa9upP0QLU6CLDuhtXG3ldR4qcsAYZRcwovHOwH1skyXBjtJE2W4xP7AIBBAhAx/DnwLCsNOAwR1R7QpZLQGW1LXIp85JW3eXkIso+Mp1udCgyCBfmCssslVt3PE7b6mm33krvzQ+l+2M0rGDPUGQO2b0ljiYySOtF2Cbn/n7MhtQqeQoTb2ZWqPu9WCXU3U2iS1qXJG4me60B1ZibztgDHuiJKHWZ1VkypEyx93eu+6l1iAPR1dYDJEsWMebVSSblPpdIikY9VRsAwz0JWDYRDYz7URfMm9QCjP9rW2AUac8/GslHqa6mNb77uSqO5plXTdWaf1EGbye4xSilr8DhmnIUNDW8w+SesdezhK/jDi6gHzLIV8eP/Qmg/5gNLvqDq3x5Ob9VX8wsV5fjaz+1SQSwF7Lis6cAKNUXMg/x62LmB5vVrLQ7/riEosDmjU0ZH4fH+csvJTtW5pTux6Y3FtCM+BMvWzdrzmjvkeiZhW/2sF6F6Z08h9buAcO1V4VRcmhUka6Lq+Id/PXg+FgVkwGqonawj2CaG82zBJNZZxRqiQbyhJDYnKu6JDB0ZLA3qm3849joLccwjr1c63a/065ff2hMG1XFbP70SRwCMO2RGAoWw4OxWHNje+SvoxeoxQ7D9/Js1fKS3Mc94VXX6r40qaobZc08JzwJU6R4I9qCoJb5BJH6wXpKUUlsyWokSh/B0tGtwWKgEQpH41GI4HMwuskS5KyFClLtTIq7GTo+xulyklz4Bi4DvN8lBYyZJLCA3hg25jzZeC69/uox8XsXpDU0t/XlAouGPLHjC6Jiyd4RbjQ+t+Ligkdo942SqLBuYLYf2PsvwpjU93m+/OFt7il+5RDRwJK88kw7fTTMTy//c354eS3xm/OD6dnz+ErcOzAc978x22zKX+uMXLA9GLuHsdh2XFzsMBsSzycTw/C1817ATlbsocnRSHFzaQ7tcbz4bAMkfNFaSbV/b+ZzMjYmEPBqkBwMMmpLypXlqQ/B/irzE1ynhE3v6dvb+bDvjUYvbmZ9AYK8a3xdS+G/J0B33XAECzABnyEPe7lurBA9kYP6CkbkFhRRd6AufEkJBLTJaztK03mzE2BRI9Y+5ClkpFE8/K5avOySPc/AvKcELUj74ylSy9jVAmQJlCPPRYp5mTytXxrNGnj5itiHUaSKvtxfcBobMzwktx1cq0xq+CQ5lmEVd/Sdgs32z2u73ZUz40slf2k7WZUJuOviYfYfZQpFZveJSeu0uenekaRJhq5qjsOrgXCkQcqfhImy5uiGVWWxeBWaSe05K18kY10ZeDG3ZcU0ZAvQDXOclKZJnJdM5KNx3hW9A74CujzBp4/hIatn+8UxFEmwHwPX0Eg4lai20ORpSPbqsoFw0y6whwS64q2LtNtu6ynGhUeJAoRcjsb2WvsSC8FGUl+TE5eSRcndYoyEZ/WuY1qzOTdWPTuIc2wygfyrJWylHNB4w9ptj/p1Ge6qgcO/xOa7aV1xf+6BnruNZIM6ovohVjc5zCSRkchxMXzS5uy5SFnV6uVe8+TkCkZy2BT/eHFhXkAoXa5JK8kMsYVazwQ9UOzJDvFaHzUW4vo3FoetbBP7XWngBfPzi7i3NIHEymIkdR63d7bQZihFSA1T3VnnOVPUvPI1yoaMmEnyvdjRRwLTHobq+QzhKJBXyQGTT9DuEa/U3ZNPMrGSNjrdPZJ5eWnsBozwVy2T/Pk3lLxhtw9jsp5RKV3M5p1r0aDST+pwqbSEpGf1qvGI5nwLXI1Tm5uMWPEwXHTaT4Z5qr2uHOkotPehWUJS17v8rDFS+EQvVxzNBWs8hWcnj/EsTXPgt441Dkot3GYRVWYLipgKjV+tABlLqqrKnHX/ZaLGpOF/lm6KqpYOGZAPD8QFweNYBwDGgnXk/ALjEb+sx8D8k+eRDY+/VktqSZE5dARfvskXp6KjLq7DF5bb66Gg0d4SkVYTGrDb7Z0Wcew5OzkmuNHhMrcRdnqaJgUe/tC3YvDoS7qByaEk0LLptutrIfNW11f3/8CSa6WC2M5SvUTbVlcNmgNOFANuBdJ9+vr7devz7XxH/QGXaZDr6JsdrdiUM3L1Wq0Gi0jQyyaktoiAZkcdVm0MHjeeA7Pf/P0Bt05fAUfcYHB5E4jwh4Hc8KwU0r2gAM8biOOt7eY9ejWRwyXqMQ4uF9IZ434JcNIYJa6139kb5kWpqgbky0jvNv8Id083UfNqBeUUZWyR+szZbXmQGnmkpVyB1spD+awlVs0tnKP8I35mqzWqoco7DUcgWGN5J5SzMJUIM9BLvW0iNyovO5JSqFEY/wgiB5bBD4FSGr6RarwWb9QyO0B6ZKqLvcVqnWEiIfuWRWZK9y48rJQ1d979+p/Cq7K+HlsXlbV23mqLOVYX+wNlI4f46+wJ+X7f+NuXx7jbhXdh6hNpEWFPbf9jvCUb3CKf6WD5wuPNHcqC7RJ7pR9E9mpn7h8EV/rBpOByU/1eb2b/mDUvS5MtJOJGqvJN7nt/Mi4O+u9Td9wqmqvHZd7mXnhG8aoJiwfuejod9LiOrF87hMKxApC32wgLY+ec4lr6b24lBd4n7yceyhqdmfm2NO0mr0CU1V7ltA0CtrLUH1MQbk3CCYuWO0xaVuqKpjV0rZ8yUem+/pXuYDXKdXF2aOsHDWo8v2pYmgt3alSxua3VmaJ5KWZU5kLVBtvPhmWGU5/G59eTiqPni5daTWfAUaYvldQM/ZvdRJ9O7dAHFsBcyvpnD7Go3IF8ux63CkFVEn42bOz5m7/Ry6vWmBUm7dQj8+uxzsDKjesDj2lF/VKiv3Oo7mRDoE9HjA8CTw78YDJfNTLBGkVyQ1jl45my+awai4O7IoBPE+78n2E1mVigWeXdR2KtBIaqUcUuUomhUOJJ+TJpS6QmRypuki3GZFI1auBRKULaYtUx6ZMrqxrZHYuANK+jCS3U5FqFcrtaQw9wTilmDnrTi4HsxQrHtqhy+kl9Qnh3cn1q5enBpj4E7TL3mOr6xpZYuG3iu1Gq9Eymf3nc/2/n7B35k/lKav2cWH2XkJ4Msdzqzvpvc1/vPpMfWkKlIH6XDScO59MBqNZ/lZYtpWkNLyniZQnUj9RK0ytgRT1RNrpvSk1JZ7QbD4/1VvbveGgOxr0rYJNctqqlQpRf8g9+ZN5toP9hMsHwoWZL1xzpEODVa2vDC4CsRUWYbaQ0UQlpdLPtIrtDxlHG1WfoerfuRj192/71vDmcqoO47g7e1tkNjmv4+5sNpiMOkbCsXXWyBREmaM97ZycVgWudMnntYwKV2+mHfUJt6wLZGjKfJ1SJP1D58Soy3nGqfYRnYfhr/DXpEotgQIDTHHvY1iCSeI33Hn5sp9T5u461B+eZTn58LePOzBXAlqlpzQrd/1EFbVLMP7EfwsvRBapGWWXLrQ7F1oRqTVWslE16e+FV6ILg9UlsLr2HNW9yinjOxIXhdBdehPsjw35+1ormZuJI1rKtDww6iZ3A8JCKPoaJ48djUOf5yQuX4w/Z+EFG/rZlGntiiEH8yNE3NVqzwY3b2r/HQAA//+D4Z3tUE4AAA==
-
+    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
 
 - path: /opt/azure/containers/provision_configs.sh
   permissions: "0744"
@@ -131,27 +129,6 @@ write_files:
     H4sIAAAAAAAC/4SS0YubQBDG3/0rvpp76BVTa3ulXI4+lN41CE0MJelrWddRh5pd2V1tQsj/XjRcIiSgDMLOzu+bj5mdvAlTVmEqbOl5k2Wyfpnhe2MMKVftAyxbzlig4tQIs8eWi2ktjKMMb0vnajsLw4Jd2aTvpd6Gy9/xc/wtvFTdQwqltMM/bf6iNromU+2RkhSNJegcriToxmWi05yvNsgMt2TQkrGslTdZJ8/JDBtLw+avfpxGpnuN7oIdawWROzJ9TqS6JbC1TfdHzjvK4C3i+Z/Vr+RH/PPl690hOnpSWMLdYZA/ghU8APAX8Twq/Pv+0H2qH8jUbrnzg6ksGNFjcBVn4OnpLPRxVOgh6OMW/GkMfgxuNn0Y4z7for6MUR8GFE6zenchSJYafrd4gVZUfFotK+uEktQ9hJwr8i/1O3aIhkbICuldNZb8PwAA//+R/AassAIAAA==
 
 
-- path: /opt/azure/containers/ubuntu-snapshot-update.sh
-  permissions: "0544"
-  encoding: gzip
-  owner: root
-  content: !!binary |
-    H4sIAAAAAAAC/8RYf2/bNhD9X5/iygmNg1VWnGDd6lTDusTZghVN0ToYBscTaOlsc5FJlaTctI732QdSsvxLdpzM2P6yZB3f3b07Hp/0zTM/U9LvMe4jH0OPqqHjKNTgCeAi4wp1fouO87F1dv3hsv1H+P5N++zX8Ozq3cXlL+H55YfAH1PpJ6znK4wyyfQXL6U6Gjq/Xf/cys0CUtrcZj1MUNvfSPA+G5DcsP02IL5ItY3GPtUJeN7cDtzJHHFKnPPWxZvrt+2w9e78/dXlu3ZAFKepGgpdz3oZ11k9EiPiOBmnWiOPMQ6zdCBpjLVDmDgAErVkqILGkQPQFxIYMA5uTeEnaIBbPD48hVg4AABzIK8AAm8Mz59DTyK9tSasDx1wGXj4qQSA7inoIXJrYL1mkkPD3mKiEFSCmMJ39o8+cwBiwdEBwGgooHWHUaYxXvAOM+8uA81GqJyp4wyQo6QaQyUyGaEKE6Z0kShAIiKaAPI4FYzrgLgNsvD/QCQx8tBiaTpKA+IeLz6PRIwhpyMMiHtCHPtkdBszCV4KxJ1sbI0pmbNC3MnM/5RAYO5XKzglK1wBRFTD69fQurqAH7e78ovE6yZx4sTYg6HWqWr6/oJnP28N352sJj0Fd1ImOoURZRwkKi1ZpDH+t3helsZUo9o3LmScjVEq3FuA+wKEUZboPce2R8gejW5TIfVaRUoC9ultNhn33lYl8N76YB7qPP3W1UU5rva3NSsD3G0XPrz0wQ23g/c1Th/h9glrqxruMYk+afXT9sEOwA+2/GMwnlKJbY3cZ/kp9ogepqmuGyFCnHMmm82WjprNvK9NVz9mA5yuIaTUFICQUxtgvtXM4U8SNkawaorxAeQ6KJNUM8FhduLHoLIoQqX6WZJ8IUYMGMrLs//zkCUIHXgGXn9ZQ5nTttA2pcuD3ynTxpkRRO23H6EnhFZa0jRlfHBQGuei5cTeW71ir3ipFNzaUChtLg/nGsD7angqjSrO+zztiHIuNAxQW0QwxmRuc8d0oZ9mdVz0m0O45V8E7kFLOOg0szRF2ewemOtEfLbXhznAmgRya24hS+dhLIZuJPJfSvCU6mFAJvURahpTTes2dFsh1Tkw6lVy1Khu6vRrJvHGiFLflNWbldXLfXul74PulKyRtja1N3GXG0JpCEyBIVOhfgHqlqWw1FQrtB7NVegWwCZUBVRsqUxK5Pr/obJwvplLbrhcC3FzI+aWa8lXIDjl0pncrShZsKv7Nfopj6EqGrMMFB3hC1NlOya0yKtLltHm5V0o8WwDGRrDGY2hxFSECuWYRfhfls/49Qq/88qlko3Nmw1LQ4kDvAvIn7Va4+im3jnyXnUnjRcn003Xh/e1xvfHN/Vao/PSe9W9P7aP7k86R43u4bZFr45v6o2XP2w0OXTJaldtptDU17wndswQfsgy+Bvc1YyhW92elwMuJALjY5qweHljg8GFAtf07DavJe6WPiBkqWPss4U3yoq3udUZtp2hygw3p7Q01zKFUGiA2UcAa0zWZesOuDuztcbBg6tK4bFwYCWqF0pMkCoEL1J501e+zxsSl3xOyYZBQxalUDGb8M4IPXjzvh3OPsvsqHhmhXwGNNXhAHWYi87Kki2bQJ+yBONNp3cJvP6VphJ83ewBB/a3HGDFSELwPDFG+VkyjRUTbT6s8lm1y0kTVNRhQcqVbVnQEolRmuCqejPizZ2E4cer6w9nrfMwbH6bfy+aOk7eCGC/kdmo/EhwTRlHqfxUijFTTPCiX8KYKS1FXQ1zNQjE/Yn8EwAA//9+7Buz7xMAAA==
-
-- path: /etc/systemd/system/snapshot-update.service
-  permissions: "0644"
-  encoding: gzip
-  owner: root
-  content: !!binary |
-    H4sIAAAAAAAC/yzMvQ3CQAxA4f6myALhJrgOJjhSRSnMYSlubMs/CJgeEaV7xdO3LkyxlSv6MNIg4dYZ1HeJadEnBE4d7UUDS1nP2sr9o9iE8b+V2xtHD7BoVTQqfNOwDuEAYjSv+UiOnP1k5zzYi++/AAAA//9JR72LfAAAAA==
-
-- path: /etc/systemd/system/snapshot-update.timer
-  permissions: "0644"
-  encoding: gzip
-  owner: root
-  content: !!binary |
-    H4sIAAAAAAAC/0TMPapCMRBA4X5WkQ28hy4ghRcbqwv+YBFSDMmgA8kkZCbC3b2Ihe058IWbsEU4kqbB3biJP09Rp4Jdn83c7BmN3He7ToNb5oSlbADhypVGhFWW1uxCye93lQVW+aiHZPyiX4VwEjUsJcIdxSgvm6+zGP9NpfFvOB5k7wAAAP//XnoOYJAAAAA=
-
 
 - path: /opt/azure/containers/bind-mount.sh
   permissions: "0544"