Skip to content

fix: exclude ACL from node-exporter, post-deprovision WALinuxAgent install and allow systemd-sysupdate.service#8036

Merged
cameronmeissner merged 3 commits intomainfrom
aadagarwal/acl-node-exporter
Mar 9, 2026
Merged

fix: exclude ACL from node-exporter, post-deprovision WALinuxAgent install and allow systemd-sysupdate.service#8036
cameronmeissner merged 3 commits intomainfrom
aadagarwal/acl-node-exporter

Conversation

@aadhar-agarwal
Copy link
Contributor

@aadhar-agarwal aadhar-agarwal commented Mar 7, 2026

PR #7704 missed ACL when adding node-exporter, causing exit code 113 (ERR_PACKER_COPY_FILE) on ACL VHD builds. Follows the Flatcar pattern: guard in packer_source.sh, file uploads in ACL packer JSON, and skip in VHD content tests.

PR #7987 added post-deprovision WALinuxAgent install but the guard in packer_source.sh only excluded Flatcar, not ACL. ACL also does not upload these files via its packer JSON, causing the same exit code 113 failure pattern. Adds isACL to the guard and skips testWALinuxAgentInstalled for AzureContainerLinux.

Allowlist systemd-sysupdate.service for ACL in e2e validator - This is a known upstream Flatcar issue. The systemd-sysupdate.timer (OnBootSec=15min) fires the service which exits with "No transfer definitions found" because ACL VHDs don't ship sysupdate transfer configs. Whether the test fails depends on whether the timer fires before the validator checks, making it flaky.

[TEST All VHDs] AKS Linux VHD Build - Msft Tenant - https://msazure.visualstudio.com/CloudNativeCompute/_build/results?buildId=156015154&view=results

What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes #

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Excludes Azure Container Linux (ACL) from node-exporter VHD build steps to prevent Packer file-copy failures introduced when node-exporter was added to the VHD build pipeline.

Changes:

  • Add ACL handling to skip node-exporter file installation/copy steps during VHD build.
  • Update VHD content tests to skip node-exporter assertions on ACL.
  • Update e2e validator documentation/comments to reflect node-exporter installation scope.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 4 comments.

Show a summary per file
File Description
vhdbuilder/packer/vhd-image-builder-acl.json Uploads node-exporter-related scripts/assets into the ACL Packer build context.
vhdbuilder/packer/test/linux-vhd-content-test.sh Skips node-exporter content validation on ACL.
vhdbuilder/packer/packer_source.sh Skips copying node-exporter assets on ACL (avoids ERR_PACKER_COPY_FILE).
vhdbuilder/packer/install-dependencies.sh Updates node-exporter skip comment to include ACL.
e2e/validators.go Updates node-exporter validator comments to reflect supported VHDs.

@aadhar-agarwal aadhar-agarwal force-pushed the aadagarwal/acl-node-exporter branch from 2892cda to ce27b33 Compare March 7, 2026 02:07
@aadhar-agarwal aadhar-agarwal changed the title fix: exclude ACL from node-exporter VHD build fix: exclude ACL from node-exporter and WALinuxAgent VHD build guards Mar 7, 2026
@aadhar-agarwal aadhar-agarwal changed the title fix: exclude ACL from node-exporter and WALinuxAgent VHD build guards fix: exclude ACL from node-exporter and post-deprovision WALinuxAgent install Mar 7, 2026
@aadhar-agarwal aadhar-agarwal marked this pull request as ready for review March 7, 2026 03:00
Copilot AI review requested due to automatic review settings March 7, 2026 03:00
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 6 out of 6 changed files in this pull request and generated 2 comments.

PR #7704 missed ACL when adding node-exporter, causing exit code 113
(ERR_PACKER_COPY_FILE) on ACL VHD builds. Follows the Flatcar pattern:
guard in packer_source.sh, file uploads in ACL packer JSON, and skip
in VHD content tests.

Signed-off-by: Aadhar Agarwal <aadagarwal@microsoft.com>
PR #7987 added post-deprovision WALinuxAgent install but the guard in
packer_source.sh only excluded Flatcar, not ACL. ACL also does not
upload these files via its packer JSON, causing the same exit code 113
failure pattern. Adds isACL to the guard and skips testWALinuxAgentInstalled
for AzureContainerLinux.

Signed-off-by: Aadhar Agarwal <aadagarwal@microsoft.com>
systemd-sysupdate.service is a known upstream Flatcar issue
(flatcar/Flatcar#1979). The timer (OnBootSec=15min) fires the service
which exits with 'No transfer definitions found' because ACL VHDs don't
ship sysupdate transfer configs. Whether it fails depends on whether
the timer fires before the validator checks, making it flaky.

Add it to the unitFailureAllowList scoped to config.OSACL.

Signed-off-by: Aadhar Agarwal <aadagarwal@microsoft.com>
Copilot AI review requested due to automatic review settings March 9, 2026 18:27
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 6 out of 6 changed files in this pull request and generated no new comments.

@aadhar-agarwal aadhar-agarwal changed the title fix: exclude ACL from node-exporter and post-deprovision WALinuxAgent install fix: exclude ACL from node-exporter, post-deprovision WALinuxAgent install and allow systemd-sysupdate.service Mar 9, 2026
@cameronmeissner cameronmeissner merged commit 916cc6a into main Mar 9, 2026
39 of 50 checks passed
@cameronmeissner cameronmeissner deleted the aadagarwal/acl-node-exporter branch March 9, 2026 19:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants