Skip to content

Update harden-a-linux-image-to-remove-azure-guest-agent.md #127111

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

shawntr
Copy link

@shawntr shawntr commented Jun 12, 2025

As previously written lines 60 and 61 would delete /etc and /var/log as can be seen below:

sudo chroot /mnt/dev/$imagedevice/ rm -rf /etc/ walinuxagent.conf
sudo chroot /mnt/dev/$imagedevice/ rm -rf /var/log/ walinuxagent.log

Additionally, the conf and log files should be waagent.conf and waagent.log.

Commands should be ran removing the space between the directory and conf and log file so that /etc and /var/log are not deleted and the proper file names used:

sudo chroot /mnt/dev/$imagedevice/ rm -rf /etc/waagent.conf
sudo chroot /mnt/dev/$imagedevice/ rm -rf /var/log/waagent.log

As previously written lines 60 and 61 would delete /etc and /var/log as can be seen below:

sudo chroot /mnt/dev/$imagedevice/ rm -rf /etc/ walinuxagent.conf
sudo chroot /mnt/dev/$imagedevice/ rm -rf /var/log/ walinuxagent.log

Commands should be ran removing the space between the directory and conf and log file.
Copy link
Contributor

@shawntr : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change. @vvenug

Copy link
Contributor

Learn Build status updates of commit 2f23e36:

✅ Validation status: passed

File Status Preview URL Details
articles/confidential-computing/harden-a-linux-image-to-remove-azure-guest-agent.md ✅Succeeded

For more details, please refer to the build report.

@mitchcr
Copy link
Contributor

mitchcr commented Jun 12, 2025

Also, the configuration name for the agent is waagent.conf so the correct lines should be:
sudo chroot /mnt/dev/$imagedevice/ rm -rf /etc/waagent.conf
sudo chroot /mnt/dev/$imagedevice/ rm -rf /var/log/waagent.log

With the curent lines you're asking our customers to delete the configuration files (all of them) and log files.

sudo chroot /mnt/dev/$imagedevice/ rm -rf /var/lib/waagent
    sudo chroot /mnt/dev/$imagedevice/ rm -rf /etc/waagent.conf
    sudo chroot /mnt/dev/$imagedevice/ rm -rf /var/log/waagent.log
Copy link
Contributor

Learn Build status updates of commit 89961be:

✅ Validation status: passed

File Status Preview URL Details
articles/confidential-computing/harden-a-linux-image-to-remove-azure-guest-agent.md ✅Succeeded

For more details, please refer to the build report.

@v-dirichards
Copy link
Contributor

@FuzziWumpus @akashdubey-ms

Can you review the proposed changes?

Important: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

@prmerger-automator prmerger-automator bot added the aq-pr-triaged tracking label for the PR review team label Jun 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants