feat: enable cloud-init write_files module for OSGuard images

   Enable the write_files cloud-init module in OSGuard 10-users-ssh-enable.cfg
   so that custom data write_files entries are delivered during provisioning.
   Add IsOSGuard template function to guard future /usr/ path entries, since
   OSGuard has /usr/ mounted read-only via dm-verity. Add regression test
   ensuring no write_files entries target /usr/ paths for OSGuard.

Author: awesomenix

e2e/scenario_test.go

@@ -25,7 +25,6 @@ func Test_AzureLinux3OSGuard(t *testing.T) {
 			VHD:     config.VHDAzureLinux3OSGuard,
 			BootstrapConfigMutator: func(nbc *datamodel.NodeBootstrappingConfiguration) {
 				nbc.AgentPoolProfile.LocalDNSProfile = nil
-				nbc.EnableScriptlessCSECmd = false
 			},
 			Validator: func(ctx context.Context, s *Scenario) {},
 			VMConfigMutator: func(vmss *armcompute.VirtualMachineScaleSet) {
@@ -1431,7 +1430,7 @@ func Test_AzureLinuxV3_MA35D(t *testing.T) {
 			},
 		},
 		// No MA35D GPU capacity in West US, so using East US
-		Location: "eastus",
+		Location:         "eastus",
 		K8sSystemPoolSKU: "Standard_D2s_v3",
 	})
 }
@@ -1459,7 +1458,7 @@ func Test_AzureLinuxV3_MA35D_Scriptless(t *testing.T) {
 			},
 		},
 		// No MA35D GPU capacity in West US, so using East US
-		Location: "eastus",
+		Location:         "eastus",
 		K8sSystemPoolSKU: "Standard_D2s_v3",
 	})
 }
@@ -2032,7 +2031,6 @@ func Test_AzureLinux3OSGuard_PMC_Install(t *testing.T) {
 			VHD:     config.VHDAzureLinux3OSGuard,
 			BootstrapConfigMutator: func(nbc *datamodel.NodeBootstrappingConfiguration) {
 				nbc.AgentPoolProfile.LocalDNSProfile = nil
-				nbc.EnableScriptlessCSECmd = false
 			},
 			Validator: func(ctx context.Context, s *Scenario) {},
 			VMConfigMutator: func(vmss *armcompute.VirtualMachineScaleSet) {

parts/linux/cloud-init/artifacts/azlosguard/10-users-ssh-enable.cfg

@@ -2,6 +2,7 @@ users:
   - default
 
 cloud_init_modules:
+  - write_files
   - users_groups
   - ssh
 

parts/linux/cloud-init/nodecustomdata.yml

@@ -10,6 +10,12 @@ bootcmd:
   done
 
 write_files:
+# IMPORTANT: OSGuard images have /usr/ mounted read-only (dm-verity).
+# All write_files entries must target /opt/ or /etc/ paths only.
+# If a /usr/ path is ever needed for non-OSGuard distros, guard it with:
+#   {{ if not IsAzlOSGuard }}
+#   - path: /usr/...
+#   {{ end }}
 {{if EnableScriptlessCSECmd}}
 - path: /opt/azure/containers/scriptless-cse-overrides.txt
   permissions: "0644"
@@ -28,7 +34,14 @@ write_files:
     {{GetVariableProperty "cloudInitData" "provisionSource"}}
 
 
-{{if IsMariner}}
+{{if IsAzlOSGuard}}
+- path: {{GetCSEHelpersScriptDistroFilepath}}
+  permissions: "0744"
+  encoding: gzip
+  owner: root
+  content: !!binary |
+    {{GetVariableProperty "cloudInitData" "provisionSourceAzlOSGuard"}}
+{{- else if IsMariner}}
 - path: {{GetCSEHelpersScriptDistroFilepath}}
   permissions: "0744"
   encoding: gzip
@@ -88,7 +101,14 @@ write_files:
   content: !!binary |
     {{GetVariableProperty "cloudInitData" "provisionSendLogs"}}
 
-{{if IsMariner}}
+{{if IsAzlOSGuard}}
+- path: {{GetCSEInstallScriptDistroFilepath}}
+  permissions: "0744"
+  encoding: gzip
+  owner: root
+  content: !!binary |
+    {{GetVariableProperty "cloudInitData" "provisionInstallsAzlOSGuard"}}
+{{- else if IsMariner}}
 - path: {{GetCSEInstallScriptDistroFilepath}}
   permissions: "0744"
   encoding: gzip
@@ -176,7 +196,8 @@ write_files:
   content: !!binary |
     {{GetVariableProperty "cloudInitData" "migPartitionScript"}}
 
-{{if IsMariner}}
+{{if IsAzlOSGuard}}
+{{- else if IsMariner}}
 - path: /opt/azure/containers/mariner-package-update.sh
   permissions: "0544"
   encoding: gzip

pkg/agent/baker.go

@@ -700,6 +700,10 @@ func getContainerServiceFuncMap(config *datamodel.NodeBootstrappingConfiguration
 		"IsKata": func() bool {
 			return profile.Distro.IsKataDistro()
 		},
+		"IsAzlOSGuard": func() bool {
+			return profile.Distro.IsAzureLinuxOSGuardDistro() ||
+				profile.Distro == datamodel.CustomizedImageLinuxGuard
+		},
 		"IsCustomImage": func() bool {
 			return profile.Distro == datamodel.CustomizedImage ||
 				profile.Distro == datamodel.CustomizedImageKata ||

pkg/agent/baker_test.go

@@ -1528,6 +1528,18 @@ oom_score = -999
 				Expect(exist).To(BeFalse())
 			},
 		),
+		Entry("CustomizedImageLinuxGuard write_files should not target /usr/ paths", "CustomizedImageLinuxGuard", "1.24.2",
+			func(c *datamodel.NodeBootstrappingConfiguration) {
+				c.ContainerService.Properties.AgentPoolProfiles[0].KubernetesConfig = &datamodel.KubernetesConfig{
+					ContainerRuntime: datamodel.Containerd,
+				}
+				c.ContainerService.Properties.AgentPoolProfiles[0].Distro = datamodel.CustomizedImageLinuxGuard
+			}, func(o *nodeBootstrappingOutput) {
+				for path := range o.files {
+					Expect(path).NotTo(HavePrefix("/usr/"), "OSGuard has /usr/ read-only (dm-verity), write_files must not target /usr/ paths: %s", path)
+				}
+			},
+		),
 		Entry("Flatcar", "Flatcar", "1.31.0", func(config *datamodel.NodeBootstrappingConfiguration) {
 			config.OSSKU = datamodel.OSSKUFlatcar
 			config.ContainerService.Properties.AgentPoolProfiles[0].Distro = datamodel.AKSFlatcarGen2

pkg/agent/const.go

@@ -49,10 +49,12 @@ const (
 	kubernetesCSEHelpersScript            = "linux/cloud-init/artifacts/cse_helpers.sh"
 	kubernetesCSEHelpersScriptUbuntu      = "linux/cloud-init/artifacts/ubuntu/cse_helpers_ubuntu.sh"
 	kubernetesCSEHelpersScriptMariner     = "linux/cloud-init/artifacts/mariner/cse_helpers_mariner.sh"
+	kubernetesCSEHelpersScriptAzlOSGuard  = "linux/cloud-init/artifacts/azlosguard/cse_helpers_osguard.sh"
 	kubernetesCSEHelpersScriptFlatcar     = "linux/cloud-init/artifacts/flatcar/cse_helpers_flatcar.sh"
 	kubernetesCSEInstall                  = "linux/cloud-init/artifacts/cse_install.sh"
 	kubernetesCSEInstallUbuntu            = "linux/cloud-init/artifacts/ubuntu/cse_install_ubuntu.sh"
 	kubernetesCSEInstallMariner           = "linux/cloud-init/artifacts/mariner/cse_install_mariner.sh"
+	kubernetesCSEInstallAzlOSGuard        = "linux/cloud-init/artifacts/azlosguard/cse_install_osguard.sh"
 	kubernetesCSEInstallFlatcar           = "linux/cloud-init/artifacts/flatcar/cse_install_flatcar.sh"
 	kubernetesCSEConfig                   = "linux/cloud-init/artifacts/cse_config.sh"
 	kubernetesCSESendLogs                 = "linux/cloud-init/artifacts/cse_send_logs.py"

pkg/agent/testdata/CustomizedImageLinuxGuard/CustomData

@@ -25,8 +25,7 @@ write_files:
   encoding: gzip
   owner: root
   content: !!binary |
-    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
-
+    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
 
 
 
@@ -64,8 +63,7 @@ write_files:
   encoding: gzip
   owner: root
   content: !!binary |
-    H4sIAAAAAAAC/+xce3PbOJL/X5+ih9FObM9QDyeTmvWu5laRFMcVWVbpkbmtTJYFkZCEEUUwAOjYcXSf/QrgC3xJsjN7e3e1+4ezIoBGv9C/7iY4z75rLojXXCC+rtUY3tJb3KOeQMTDzDk5hYcaAADyhbXCwvIDtsLQbsFP8KLVgi1d3Jt2Mr22q9WIxwVy3T72ebL6MyLCWlJmSTIutTdcPWZYsHt761icuNgT0D6XdM9/AjtgLphLPh3CWgifXzSbPrI3aIV5Y0tsRjldioZNt02bekuyagaLwBNBs/4wfz0fzebWZDAcdKeDXbLMTJaZPqNOw8EL+AWaYuvvnfL1K+A7IqA+mEys66k1ntz0rf7gtdW/+XU0vOn2rdnV9eBmPsvKQ5bWEhE3YBheSZHaLXD8zQpM8g1bjt9dWt1+33rTvRrWYqNsEdv82h0SL7jrrqQO19R1MhYLfAcJnCXbHc+s+bjfnQ0S/tUaf7OyXMJF5wT5PmJbysxAEJfDgnjOn03H4+FPG5k2ZoIsiY0E5mBjf23adLulHtgrRgPfdInAYJMljyjY1PMEQ/YGbPnXJQuTBZ4gWwx4IdDCxRywWAtKXVi5AReYLblpu0QJJagPxCPC5Pdc4K25xq6PGQfiUUGW96ZcxoFQNc9nNBD4HIjPsQDiR9S9ZfR/fv8ELln4aGv6nz8FyCXiXj2If0TUtjTwBHiSi1Ayn6y+AKc2EsDv+TLSBb/nXCAB8pfpSkPA3ZdIaA8LGwmT+thbcAe+EB+Yt4rob7bUgZVtwxZtMDibLVciMrRd8miKImeuMXIw42b9JPDQFoPJTqORLXUCF3MT3wmG9PHT0J4utZELN9P3g8n06makniW/OvWTFcM+9K+ms8nV6/jMQBMLu3lmMuxixPFXsAMB5hLOwXTA6Binisrr4c3rN/PpwIqJGe3Gy8ZPRmbwPB09b/zUODcAsn72Q+fEWLh0sQw4Pu/UHwoLd9F2ZAkfwKg/JMzvDOiAcX7eaL004KP07tLxl+H4X0Cssaco5baXO78I98Aux2VTEg41BlP+QI6EBJaktpfZg8wQ9mmBXOTZRxL8ZukN9MVb8s6LRqvRbhnZTZeUqRgSxSogHtQf4rUfzj7u/gIOTYiSJXyXhJwIAuBFC9rwqtWCukYox4383+80YB5ybeGCaXrU9NEKMzCDzLrMimwouxpNZ93hMBOLI1HkPw718D9DkWEsklw7hMvQAkqdn5Gw1w5dlczjMj4VJy2JBM4wUHd98SsR6+sYGMabVQKj+/HyW5FSApC0bYyLOWxSQ1lwunn9d6X/4dV0dhAI2xEQ2n41eRV6kC+anAbMxlw9bTjNY/YNz7C9pmBIGP2AmL3uoK3z6uWPiG3Dv+vlx0Nq2qsfEJgL4q1gi4hnSEVVMJwVzoyWqdHat5tyg+95ukUDcRu+wspfgWk6WMF2wYYNOZxPLS7Hl9a7wd+PT2YqbajIJ8oQTOK3Ix8WjXdg20emLcm5GV/3JtinnAjK7pMTEynwPWacUK9j1B/aO0ODRuoL3jFMCn3CLi4Gwr64CC2psqDjrBu6bgkNHzHBO6ZRIpf1mYi1JXeX4Ub+uzOOS9FUCDOXT/E8+Ajffx8dkXpWM4Z0IJkMmJ/g+X89zwW6UFcRKeuP0FmWr0O6O6Q/nbMj9FgRcke3xCEoG2+RQz33Hjw1ZK38lbXB90zu5SOx7hiJtNFj3gynNvxgEfK+3TiEgemDUT9xCFMJmlF/qKC4M06NWunekToV+uY3z6k6YkH+0n3d9gNLBcX6yQqL3njeZfb6FECbwrBPwzmGvjJiIQyNVpQYyik6qMbkFWKquFtETI3+3c+vrFcvjSjzKqUho/ZeGnzBkVHM3UIPn3sbj372oDeeg5xOBLZFwPAF1B/ifXaGRlYEzCtNu3JIkEkZcsxVaCr8fX7eygtcTvvlE2i/TGkXVDF6f9W/6irNAcci8IFw8KgAHvg+ZQI7QD2YK0JQ5GmfjvKAq+kWOFl52DEX951qf0/x2MG32KU+Zg2HfvZcipxG5Mhh9rL1A4GbduCgphSENxOiWY3smvWHxEd20JQwnUwtnKJdrejnEZNWwNyO8c9lr/lisfz51QvbDgNGFnhlKmAtiYvT7KBakYUhyf4uGwtDP/ij8ZfwcYglV2Haj9OuUajWCGpGaIt1BCbLqCniyoOgTdoZcP6LVHjTC1xXQybjH4QYhXAgfRJaURzLeH801o7Gwpi/RR5aYedyPI/YHhIu8gkD75zkzp3p4FtiY9N3gxVJt3eQQDb2BGbmyg/MkDgzX5o2ZfjwLJ9RnxEsELtPJ9urrYnv1MFk6umpdtQSTfEPf/u4M7SOW4hf16F4gzt/vFm9YXTbQ/YaJ/IlcNS8RazpkkVzEyywi0UzIx9Pa0DNMKoGPClV4GmmGoyPSJ+wjtGkvmhmDdyMJ3BDryCLnlTwjJLqMacXNU8GOORKDL0HEhP7EfiG+L5MO4wMBbYFky0hBej6gybB7jQz2aaeIF6A9SozFRwv3hAXd+onS+Ip7nVCBphbdOdgX6yhDWacC+iMnxlg+ox4AsxPARH6QTiVhzHewMgo7gOYX9Rm4eiuCB6pot4gIhUrqDqdQgqb0ZyDF0ZFrX3dHXUvB/04jgz+c5yU3qopmau7wwiw4pagFr7FnkzWuu+mjd500IiMkt27kfSOF5EjSAeWEhlgVI6BLnchXlX1Bo6yueoc7OK2eHjAVJWRnKdD6biWixUzme2RK3NwPlHcOBDBOvKFgvaw9DFqmgUK3JWkqYfYKlmyn5/L8SVscMrIrlazXYy8uX85nvcZucUs1Z/cbLKE+uV4bvUH0xmoaLHyg28LQJF1y2KPkbFs5FU9RnrCjcglzN1qZeOFGa3MoJkMnszDAnPTZiTs2nbqD9HCFOiiA3obV1t5nYeKHDBG2QWMaLwzcB/bZEmwozRRtlvMDywCAUTIwMfwp4Aw7DRgcEdUu0JWS4AldS3yqXPS1t0l5CIKvnJdLjQoMsgX5gqLbFUbd/zOW6rpd97KL43PZTujdOxgTxDkjhm9JQ5m8kjrBdjmZ/6+zAZUKjlKU2+m1qh7PdjlVJ1NYosaVyRupjvtgZXY2w4Yw54oSaj1WRWZcqTMcbf3rnupNcjD0RUWQyQL1vFmFckmpX6XSApGPRXbAAN9CRg2kc1MO9GXzBuUwkx/axtg1CkP/1qJh6kupvW+O7nqjmZZ141VWj9RBq/nOIWo5e+AYRoyFLT1/IOk3rGXs8QvI44uIN9yyJfHD73JoD8Yza66Q2s8uXl/1R9MrNdXI6t/NYkEsNeyojMnwCgVF/LPcesipseblSz0u764xOKAZg0Nmd/HxzkLL2X7lubUrgcm95bQDDhTL1v3a86o75GoWcWvdrDehSmd/McW7oFDtVdFUXKolJGuyyvi3fz1YDiYFZOBaqK2cI8g2psNs0RTGWeUKsmGssSQmJwrOmRwtCSwd+rt/OMY6C2HsE79XKv2v1NuX38oTNtVxex+NAkcwrAtERjKloNDcVhz47ukL6PXKMXOw3fy7JXy0hzHfeHVlyq+tClq2yUNPCd8iVMk+KOaguAWucTRekF6SlHJbAlqJMrfwZLRbYEiIFHKR6PRSCCz8DrJkqQsRcpSrYwKOxn6/kapctIcOAauwzwfpYUMmaTwAB7YNuZ8Gbju/T7qcTG7FyS19Pc1pYILhvwxo0vi4gleES60/veiYkLHqLeNkmhwriD23xj7r8LYVLf5/nzhLW7pPuXQkYDSfDJMO/10DM9vf3N+OPmt8Zvzw+nZc/gKHDvwnDf/cdtsyp9rjBwwvZi7x3FYdtwcLDDbEg/n04PwdfNeQM6W7OFJUUhxM+lOrfF8OCxD5HxRmkl1/28mMzI25lCwKhAcTHLqi8qVJenPAf4qc5OcZ8TN7+nbm/mwbw1Gb24mvYFCfGt83Yshf2fAdx0wBAuwAR9hj3u5LiyQvdEDesoGJFZUkTdgbjwJicR0CWv7SpM5c1Mg0SPWPmSpZCTRvHyu2rws0v2PgDwnRO3IO2Pp0ssYVQKkCdRjj0WKOZl8Ld8aTdq4+YpYh5Gkyn5cHzAaGzO8JHedXGvMKjikeRZh1be03cLNdo/rux3VcyNLZT9puxmVyfhr4iF2H2VKxaZ3yYmr9PmpnlGkiUau6o6Da4Fw5IGKn4TJ8qZoRpVlMbhV2gkteStfZCNdGbhx9yVFNOQLUI2znFSmiVzXjGTjMZ4VvQO+Avq8gecPoWHr5zsFcZQJMN/DVxCIuJXo9lBk6ci2qnLBMJOuMIfEuqKty3TbLuupRoUHiUKE3M5G9ho70ktBRpIfk5NX0sVJnaJMxKd1bqMaM3k3Fr17SDOs8oE8a6Us5VzQ+EOa7U869Zmu6oHD/4Rme2ld8b+ugZ57jSSD+iJ6IRb3OYyk0VEIcfH80qZsecjZ1Wrl3vMkZErGMthUf3hxYR5AqF0uySuJjHHFGg9E/dAsyU4xGh/11iI6t5ZHLexTe90p4MWzs4s4t/TBRApiJLVet/d2EGZoBUjNU90ZZ/mT1DzytYqGTNiJ8v1YEccCk97GKvkMoWjQF4lB088QrtHvlF0Tj7IxEvY6nX1SefkprMZMMJft0zy5t1S8IXePo3IeUendjGbdq9Fg0k+qsKm0ROSn9arxSCZ8i1yNk5tbzBhxcNx0mk+Guao97hyp6LR3YVnCkte7PGzxUjhEL9ccTQWrfAWn5w9xbM2zoDcOdQ7KbRxmURWmiwqYSo0fLUCZi+qqStx1v+WixmShf5auiioWjhkQzw/ExUEjGMeARsL1JPwCo5H/7MeA/JMnkY1Pf1ZLqglROXSE3z6Jl6cio+4ug9fWm6vh4BGeUhEWk9rwmy1d1jEsOTu55vgRoTJ3UbY6GibF3r5Q9+JwqIv6gQnhpNCy6XYr62HzVtfX979AkqvlwliOUv1EWxaXDVoDDlQD7kXS/fp6+/Xrc238B71Bl+nQqyib3a0YVPNytRqtRsvIEIumpLZIQCZHXRYtDJ43nsPz3zy9QXcOX8FHXGAwudOIsMfBnDDslJI94ACP24jj7S1mPbr1EcMlKjEO7hfSWSN+yTASmKXu9R/ZW6aFKerGZMsI7zZ/SDdP91Ez6gVlVKXs0fpMWa05UJq5ZKXcwVbKgzls5RaNrdwjfGO+Jqu16iEKew1HYFgjuacUszAVyHOQSz0tIjcqr3uSUijRGD8IoscWgU8Bkpp+kSp81i8UcntAuqSqy32Fah0h4qF7VkXmCjeuvCxU9ffevfqfgqsyfh6bl1X1dp4qSznWF3sDpePH+CvsSfn+37jbl8e4W0X3IWoTaVFhz22/IzzlG5ziX+ng+cIjzZ3KAm2SO2XfRHbqJy5fxNe6wWRg8lN9Xu+mPxh1rwsT7WSixmryTW47PzLuznpv0zecqtprx+VeZl74hjGqCctHLjr6nbS4Tiyf+4QCsYLQNxtIy6PnXOJaei8u5QXeJy/nHoqa3Zk59jStZq/AVNWeJTSNgvYyVB9TUO4NgokLVntM2paqCma1tC1f8pHpvv5VLuB1SnVx9igrRw2qfH+qGFpLd6qUsfmtlVkieWnmVOYC1cabT4ZlhtPfxqeXk8qjp0tXWs1ngBGm7xXUjP1bnUTfzi0Qx1bA3Eo6p4/xqFyBPLsed0oBVRJ+9uysudv/kcurFhjV5i3U47Pr8c6Ayg2rQ0/pRb2SYr/zaG6kQ2CPBwxPAs9OPGAyH/UyQVpFcsPYpaPZsjmsmosDu2IAz9OufB+hdZlY4NllXYcirYRG6hFFrpJJ4VDiCXlyqQtkJkeqLtJtRiRS9WogUelC2iLVsSmTK+samZ0LgLQvI8ntVKRahXJ7GkNPME4pZs66k8vBLMWKh3bocnpJfUJ4d3L96uWpASb+BO2y99jqukaWWPitYrvRarRMZv/5XP/vJ+yd+VN5yqp9XJi9lxCezPHc6k56b/Mfrz5TX5oCZaA+Fw3nzieTwWiWvxWWbSUpDe9pIuWJ1E/UClNrIEU9kXZ6b0pNiSc0m89P9dZ2bzjojgZ9q2CTnLZqpULUH3JP/mSe7WA/4fKBcGHmC9cc6dBgVesrg4tAbIVFmC1kNFFJqfQzrWL7Q8bRRtVnqPp3Lkb9/du+Nby5nKrDOO7O3haZTc7ruDubDSajjpFwbJ01MgVR5mhPOyenVYErXfJ5LaPC1ZtpR33CLesCGZoyX6cUSf/QOTHqcp5xqn1E52H4K/w1qVJLoMAAU9z7GJZgkvgNd16+7OeUubsO9YdnWU4+/O3jDsyVgFbpKc3KXT9RRe0SjD/x38ILkUVqRtmlC+3OhVZEao2VbFRN+nvhlejCYHUJrK49R3Wvcsr4jsRFIXSX3gT7Y0P+vtZK5mbiiJYyLQ+MusndgLAQir7GyWNH49DnOYnLF+PPWXjBhn42ZVq7YsjB/AgRd7Xas8HNm9p/BwAA//+3c059UE4AAA==
-
+    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
 
 - path: /opt/azure/containers/provision_configs.sh
   permissions: "0744"
@@ -131,27 +129,6 @@ write_files:
     H4sIAAAAAAAC/4SS0YubQBDG3/0rvpp76BVTa3ulXI4+lN41CE0MJelrWddRh5pd2V1tQsj/XjRcIiSgDMLOzu+bj5mdvAlTVmEqbOl5k2Wyfpnhe2MMKVftAyxbzlig4tQIs8eWi2ktjKMMb0vnajsLw4Jd2aTvpd6Gy9/xc/wtvFTdQwqltMM/bf6iNromU+2RkhSNJegcriToxmWi05yvNsgMt2TQkrGslTdZJ8/JDBtLw+avfpxGpnuN7oIdawWROzJ9TqS6JbC1TfdHzjvK4C3i+Z/Vr+RH/PPl690hOnpSWMLdYZA/ghU8APAX8Twq/Pv+0H2qH8jUbrnzg6ksGNFjcBVn4OnpLPRxVOgh6OMW/GkMfgxuNn0Y4z7for6MUR8GFE6zenchSJYafrd4gVZUfFotK+uEktQ9hJwr8i/1O3aIhkbICuldNZb8PwAA//+R/AassAIAAA==
 
 
-- path: /opt/azure/containers/ubuntu-snapshot-update.sh
-  permissions: "0544"
-  encoding: gzip
-  owner: root
-  content: !!binary |
-    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
-
-- path: /etc/systemd/system/snapshot-update.service
-  permissions: "0644"
-  encoding: gzip
-  owner: root
-  content: !!binary |
-    H4sIAAAAAAAC/yzMvQ3CQAxA4f6myALhJrgOJjhSRSnMYSlubMs/CJgeEaV7xdO3LkyxlSv6MNIg4dYZ1HeJadEnBE4d7UUDS1nP2sr9o9iE8b+V2xtHD7BoVTQqfNOwDuEAYjSv+UiOnP1k5zzYi++/AAAA//9JR72LfAAAAA==
-
-- path: /etc/systemd/system/snapshot-update.timer
-  permissions: "0644"
-  encoding: gzip
-  owner: root
-  content: !!binary |
-    H4sIAAAAAAAC/0TMPapCMRBA4X5WkQ28hy4ghRcbqwv+YBFSDMmgA8kkZCbC3b2Ihe058IWbsEU4kqbB3biJP09Rp4Jdn83c7BmN3He7ToNb5oSlbADhypVGhFWW1uxCye93lQVW+aiHZPyiX4VwEjUsJcIdxSgvm6+zGP9NpfFvOB5k7wAAAP//XnoOYJAAAAA=
-
 
 - path: /opt/azure/containers/bind-mount.sh
   permissions: "0544"