Azure · djsly · Dec 16, 2025 · Jan 9, 2026 · awesomenix · Dec 18, 2025
@@ -1,6 +1,27 @@
 #!/bin/bash
 set -x
 mkdir -p /root/AzureCACertificates
+
+IS_MARINER=0
+IS_AZURELINUX=0
+if [[ -f /etc/os-release ]]; then
+        . /etc/os-release
+    if [[ $NAME == *"Mariner"* ]]; then
+        IS_MARINER=1
+    elif [[ $NAME == *"Microsoft Azure Linux"* ]]; then
+        IS_AZURELINUX=1
+    else
+        echo "Unknown Linux distribution"
+        exit 1
+    fi
+else
+    echo "Unsupported operating system"
+    exit 1
+fi
+
+echo "distribution is $distribution"
+echo "Running on $NAME"
+
 # http://168.63.129.16 is a constant for the host's wireserver endpoint
 certs=$(curl "http://168.63.129.16/machine?comp=acmspackage&type=cacertificates&ext=json")
 IFS_backup=$IFS
@@ -17,15 +38,77 @@ cp /root/AzureCACertificates/*.crt /etc/pki/ca-trust/source/anchors/
 
 cloud-init status --wait
 
+function init_mariner_repo_depot {
+    local repodepot_endpoint=$1
+    echo "Adding [extended] repo"
+    cp /etc/yum.repos.d/mariner-extras.repo /etc/yum.repos.d/mariner-extended.repo
+    sed -i -e "s|extras|extended|" /etc/yum.repos.d/mariner-extended.repo
+    sed -i -e "s|Extras|Extended|" /etc/yum.repos.d/mariner-extended.repo
+
+    echo "Adding [nvidia] repo"
+    cp /etc/yum.repos.d/mariner-extras.repo /etc/yum.repos.d/mariner-nvidia.repo
+    sed -i -e "s|extras|nvidia|" /etc/yum.repos.d/mariner-nvidia.repo
+    sed -i -e "s|Extras|Nvidia|" /etc/yum.repos.d/mariner-nvidia.repo
+
+    echo "Adding [cloud-native] repo"
+    cp /etc/yum.repos.d/mariner-extras.repo /etc/yum.repos.d/mariner-cloud-native.repo
+    sed -i -e "s|extras|cloud-native|" /etc/yum.repos.d/mariner-cloud-native.repo
+    sed -i -e "s|Extras|Cloud-Native|" /etc/yum.repos.d/mariner-cloud-native.repo
+
+    echo "Pointing Mariner repos at RepoDepot..."
+    for f in /etc/yum.repos.d/*.repo
+    do
+        sed -i -e "s|https://packages.microsoft.com|${repodepot_endpoint}/mariner/packages.microsoft.com|" $f
+        echo "$f modified."
+    done
+    echo "Mariner repo setup complete."
+}
+
+function init_azurelinux_repo_depot {
+    local repodepot_endpoint=$1
+    repos=("amd" "base" "cloud-native" "extended" "ms-non-oss" "ms-oss" "nvidia")
+
+    # tbd maybe we do this a bit nicer
+    rm -f /etc/yum.repos.d/azurelinux*
+
+    for repo in "${repos[@]}"; do
+        output_file="/etc/yum.repos.d/azurelinux-${repo}.repo"
+        repo_content=(
+            "[azurelinux-official-$repo]"
+            "name=Azure Linux Official $repo \$releasever \$basearch"
+            "baseurl=$repodepot_endpoint/azurelinux/\$releasever/prod/$repo/\$basearch"
+            "gpgkey=file:///etc/pki/rpm-gpg/MICROSOFT-RPM-GPG-KEY"
+            "gpgcheck=1"
+            "repo_gpgcheck=1"
+            "enabled=1"
+            "skip_if_unavailable=True"
+            "sslverify=1"
+        )
+
+        rm -f "$output_file"
+
+        for line in "${repo_content[@]}"; do
+            echo "$line" >> "$output_file"
+        done
+
+        echo "File '$output_file' has been created."
+    done
+}
+
 marinerRepoDepotEndpoint="$(echo "${REPO_DEPOT_ENDPOINT}" | sed 's/\/ubuntu//')"
 if [ -z "$marinerRepoDepotEndpoint" ]; then
   >&2 echo "repo depot endpoint empty while running custom-cloud init script"
 else
-  for f in /etc/yum.repos.d/*.repo
-  do
-      sed -i -e "s|https://packages.microsoft.com|${marinerRepoDepotEndpoint}/mariner/packages.microsoft.com|" "$f"
-      echo "## REPO - $f - MODIFIED"
-  done
+  # logic taken from https://repodepot.azure.com/scripts/cloud-init/setup_repodepot.sh
+  if [ "$IS_MARINER" -eq 1 ]; then
+      echo "Initializing Mariner repo depot settings..."
+      init_mariner_repo_depot ${marinerRepoDepotEndpoint}
+  elif [ "$IS_AZURELINUX" -eq 1 ]; then
+      echo "Initializing Azure Linux repo depot settings..."
+      init_azurelinux_repo_depot ${marinerRepoDepotEndpoint}
+  else
+      echo "No customizations for distribution: $NAME"
+  fi
 fi
 
 # Set the chrony config to use the PHC /dev/ptp0 clock
@@ -58,4 +141,4 @@ EOF
 
 systemctl restart chronyd
 
-#EOF
+#EOF
@@ -2,12 +2,26 @@
 set -x
 mkdir -p /root/AzureCACertificates
 
-# For Flatcar: systemd timer instead of cron, skip cloud-init/apt ops, chronyd service name).
 IS_FLATCAR=0
-if [ -f /etc/os-release ] && grep -qi '^ID=flatcar' /etc/os-release; then
-  IS_FLATCAR=1
+IS_UBUNTU=0
+if [[ -f /etc/os-release ]]; then
+    . /etc/os-release
+    if [[ $NAME == *"Ubuntu"* ]]; then
+        IS_UBUNTU=1
+    elif [[ $ID == *"flatcar"* ]]; then
+        IS_FLATCAR=1
+    else
+        echo "Unknown Linux distribution"
+        exit 1
+    fi
+else
+    echo "Unsupported operating system"
+    exit 1
 fi
 
+echo "distribution is $distribution"
+echo "Running on $NAME"
+
 # http://168.63.129.16 is a constant for the host's wireserver endpoint
 certs=$(curl "http://168.63.129.16/machine?comp=acmspackage&type=cacertificates&ext=json")
 IFS_backup=$IFS
@@ -41,13 +55,168 @@ if [ "$action" = "ca-refresh" ]; then
     exit
 fi
 
-if [ "$IS_FLATCAR" -eq 0 ]; then
+function init_ubuntu_main_repo_depot {
+    local repodepot_endpoint="$1"
+    # Initialize directory for keys
+    mkdir -p /etc/apt/keyrings
+
+    # This copies the updated bundle to the location used by OpenSSL which is commonly used
+    echo "Copying updated bundle to OpenSSL .pem file..."
+    cp /etc/ssl/certs/ca-certificates.crt /usr/lib/ssl/cert.pem
+    echo "Updated bundle copied."
+
+    # Back up sources.list and sources.list.d contents
+    mkdir -p /etc/apt/backup/
+    if [ -f "/etc/apt/sources.list" ]; then
+        mv /etc/apt/sources.list /etc/apt/backup/
+    fi
+    for sources_file in /etc/apt/sources.list.d/*; do
+        if [ -f "$sources_file" ]; then
+            mv "$sources_file" /etc/apt/backup/
+        fi
+    done
+
+    # Set location of sources file
+    . /etc/os-release
+    aptSourceFile="/etc/apt/sources.list.d/ubuntu.sources"
+
+    # Create main sources file
+    cat <<EOF > /etc/apt/sources.list.d/ubuntu.sources
+
+Types: deb
+URIs: ${repodepot_endpoint}/ubuntu
+Suites: ${VERSION_CODENAME} ${VERSION_CODENAME}-updates ${VERSION_CODENAME}-backports ${VERSION_CODENAME}-security
+Components: main universe restricted multiverse
+Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg
+EOF
+
+    # Update the apt sources file using the RepoDepot Ubuntu URL for this cloud. Update it by replacing
+    # all urls with the RepoDepot Ubuntu url
+    ubuntuUrl=${repodepot_endpoint}/ubuntu
+    echo "Converting URLs in $aptSourceFile to RepoDepot URLs..."
+    sed -i "s,https\?://.[^ ]*,$ubuntuUrl,g" $aptSourceFile
+    echo "apt source URLs converted, see new file below:"
+    echo ""
+    echo "-----"
+    cat $aptSourceFile
+    echo "-----"
+    echo ""
+}
+
+function check_url {
+    local url=$1
+    echo "Checking url: $url"
+
+    # Use curl to check the URL and capture both stdout and stderr
+    curl_exit_code=$(curl -s --head --request GET $url)
+    # Check the exit status of curl
+    if [[ $? -ne 0 ]] || echo "$curl_exit_code" | grep -E "404 Not Found" > /dev/null; then
+        echo "ERROR: $url is not available. Please manually check if the url is valid before re-running script"
+        exit 1
+    fi
+}
+
+function write_to_sources_file {
+    local sources_list_d_file=$1
+    local source_uri=$2
+    shift 2
+    local key_paths=("$@")
+
+    sources_file_path="/etc/apt/sources.list.d/${sources_list_d_file}.sources"
+    ubuntuDist=$(lsb_release -c | awk '{print $2}')
+    if [ "$sources_list_d_file" == "microsoft-prod-testing" ]; then
+        ubuntuDist="testing"
+    fi
+
+    tee -a $sources_file_path <<EOF
+
+Types: deb
+URIs: $source_uri
+Suites: $ubuntuDist
+Components: main
+Arch: amd64
+Signed-By: ${key_paths[*]}
+EOF
+}
+
+function add_key_ubuntu {
+    local key_name=$1
+
+    if [[ $no_connectivity == "false" ]]; then
+        key_url="${repodepot_endpoint}/keys/${key_name}"
+        check_url $key_url
+        echo "Adding $key_name key to keyring..."
+        key_data=$(wget -O - $key_url)
+    fi
+    key_path=$(derive_key_paths $key_name)
+    echo "$key_data" | gpg --dearmor | tee $key_path > /dev/null
+    echo "$key_name key added to keyring."
+}
+
+function derive_key_paths {
+    local key_names=("$@")
+    local key_paths=()
+
+    for key_name in "${key_names[@]}"; do
+        key_paths+=("/etc/apt/keyrings/${key_name}.gpg")
+    done
+
+    echo "${key_paths[*]}"
+}
+
+function add_ms_keys {
+    # Add the Microsoft package server keys to keyring.
+    echo "Adding Microsoft keys to keyring..."
+
+    add_key_ubuntu microsoft.asc
+    add_key_ubuntu msopentech.asc
+}
+
+function aptget_update {
+    # If no connectivity, return early and don't bother trying an apt-get update
+    if [[ $no_connectivity == "true" ]]; then
+        return
+    fi
+
+    echo "apt-get updating..."
+    echo "note: depending on how many sources have been added this may take a couple minutes..."
+    if apt-get update | grep -q "404 Not Found"; then
+        echo "ERROR: apt-get update failed to find all sources. Please validate the sources or remove bad sources from your sources and try again."
+        exit 1
+    else
+        echo "apt-get update complete!"
+    fi
+}
+
+function init_ubuntu_pmc_repo_depot {
+    local repodepot_endpoint="$1"
+    # Add Microsoft packages source to the azure specific sources.list.
+    echo "Adding the packages.microsoft.com Ubuntu-$ubuntuRel repo..."
+
+    microsoftPackageSource="$repodepot_endpoint/microsoft/ubuntu/$ubuntuRel/prod"
+    check_url $microsoftPackageSource
+    write_to_sources_file microsoft-prod $microsoftPackageSource $(derive_key_paths microsoft.asc msopentech.asc)
+    write_to_sources_file microsoft-prod-testing $microsoftPackageSource $(derive_key_paths microsoft.asc msopentech.asc)
+    echo "Ubuntu ($ubuntuRel) repo added."
+    echo "Adding packages.microsoft.com keys"
+    add_ms_keys $repodepot_endpoint
+}
+
+if [ "$IS_UBUNTU" -eq 1 ]; then
     (crontab -l ; echo "0 19 * * * $0 ca-refresh") | crontab -
 
     cloud-init status --wait
-    repoDepotEndpoint="${REPO_DEPOT_ENDPOINT}"
-    sudo sed -i "s,http://.[^ ]*,$repoDepotEndpoint,g" /etc/apt/sources.list
-else
+    rootRepoDepotEndpoint="$(echo "${REPO_DEPOT_ENDPOINT}" | sed 's/\/ubuntu//')"
+    # logic taken from https://repodepot.azure.com/scripts/cloud-init/setup_repodepot.sh
+    ubuntuRel=$(lsb_release --release | awk '{print $2}')
+    ubuntuDist=$(lsb_release -c | awk '{print $2}')
+    # initialize archive.ubuntu.com repo
+    init_ubuntu_main_repo_depot ${rootRepoDepotEndpoint}
+    init_ubuntu_pmc_repo_depot ${rootRepoDepotEndpoint}
+    # update apt list
+    echo "Running apt-get update"
+    aptget_update
+elif [ "$IS_FLATCAR" -eq 1 ]; then
     script_path="$(readlink -f "$0")"
     svc="/etc/systemd/system/azure-ca-refresh.service"
     tmr="/etc/systemd/system/azure-ca-refresh.timer"
@@ -79,15 +248,15 @@ fi
 
 # Disable systemd-timesyncd and install chrony and uses local time source
 chrony_conf="/etc/chrony/chrony.conf"
-if [ "$IS_FLATCAR" -eq 0 ]; then
+if [ "$IS_UBUNTU" -eq 1 ]; then
     systemctl stop systemd-timesyncd
     systemctl disable systemd-timesyncd
 
     if [ ! -e "$chrony_conf" ]; then
         apt-get update
         apt-get install chrony -y
     fi
-else
+elif [ "$IS_FLATCAR" -eq 1 ]; then
     rm -f ${chrony_conf}
 fi
 
@@ -139,10 +308,10 @@ refclock PHC /dev/ptp0 poll 3 dpoll -2 offset 0
 makestep 1.0 -1
 EOF
 
-if [ "$IS_FLATCAR" -eq 0 ]; then
+if [ "$IS_UBUNTU" -eq 1 ]; then
     systemctl restart chrony
-else
+elif [ "$IS_FLATCAR" -eq 1 ]; then
     systemctl restart chronyd
 fi
 
-#EOF
+#EOF
@@ -81,7 +81,7 @@ write_files:
   encoding: gzip
   owner: root
   content: !!binary |
-    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
+    H4sIAAAAAAAC/6w52XLjNrbv/IrTbFa83CYpdbq6bpwwHbeXe13VsV2yPfNgOyoIPJIwIgEGAGUrtv59CgA3LXaczDgPCoGz7zj9/l08YjweETX1FGoIH718ljIJYQGxFELHh3+UEo8Oj1BqNmaUaFSed3Y1PP12eH10OEh65uPm68359U3S89gYbm8hHEOMmsZChRIzJArh/v5H0FPkHgBAtH5tTx1ucH746wkkCez7N6OS69LfX0U2fy3Lvj3DrEI+O3ao44xoSuQLuLXsNXIlgP2gUwH+DZ9x8cDhG+PlI6RMaclGpWaC+y3kI9PgKIyZ1xCpCaiyKITUmIIoUBLN+ATUQmnMHYkKfcw8z6F0uQBTEKyydUCDknNDSXBnKN/zKEqtkmCXljIDf6p1cRDH/c//G33+Pup//CHqf45zQqeM4xcq8iIhNFcFoTMywe/0osCEEtpx7nf4qJN/KcH9Pe/s9Go4InRWFklwdnplvpNg507e8R3L9pzkqJLdYNcKF1hJ4BkmEgsIxSXs7H75KTFAd/4B3Pl7t7/d+ff7O3t7FvurSNmfox85yMUGCSOnH1GpfRt14AetZ30I8XfoQ9f3Dr4w9h8zbywkMGAcgqd3rTC3v9wvf4RUtJ4Mnjq3AbtfAjyDwhR2VHx3J+/ueHzH48lO9zQ23z+D/2ICxbXKT40VHW1HxFdxRFHGUfCEj3oZT/w930sFR+eA1iveS5r3VjSnr+RyvG9MCHGpZJwJSrJYTYnEmJKwGxWxJVQWKdEYrt15DROT1EplsfXkOokOHzZqwIxD2uT5E0kLzNeZvCaXyS1CTfokwVP/IGSc6WVtMnfhQwI+JaHEsUQ19dcihmlLZFxy6tKSMz0sbVka5oTxocRCDFMshIYni2NtCObYng6Rp4VgXCd+0HeJ39ZXowkpdDzDhWR8UhnSJfqRKBYm0Z1qKYxKnmYIWsBFgfzq6htYa4xZhlEU+f+xCzqla5UjFQXDNPK9F4R3kRg3FdwUf7+5VaKUFFWUMaVXjWupzWEr5HbqY+Z+hIQKeGjUN0m8lUqUxvtNMq+IF3TxN8WqRFsH2ypURzCboa/0N1LoK0vwlGWY+C/J7MIrqk4ru1Oi4aefTi5O4Wd4G6LnXS8KVAeQ4si7GZypAwieNuNyWaF5VyXTaIH+cTK4Ors4Hx5dHJ+YHrPcdha6wFRb74yBTPPbfquQlpLphXck8kJw5FodgMkmKDmbo1QIEk3royYM8zLT7tS7YhOOafh1ceCC2FWqOnsqRUIi6ZTNMazOo0kx8U4uTp0dHcyNzJJXjdHNQz43GcQncDP4pmzHWHGkSckBFuLYFgED0+SjqeUhA199MF1Z3X05iOPo9je43/8QNIJ8mPhrFDvcSaGrWHfcqZMG0w+gEIHjg60AMMJMPBz4Hczu/4fmz2/i6EVuHbiayLJT/OgU6WxopoxuqSuNLftdixkwW7pkdgBBKbM6hkuZDU1NHVKRYj2xhArCcIokhTCU+HuJSsP/nVxbxL3uXPgFQo6ms93D83PFK1il6TfTwwn4n3qf4FxoOBUlT32TNynOY15m2Vq6O1Ing8HFwMlrpi8uNJA5YRkZZRjBpZtic8JLkmULZwsjmZ4iVChzkrEURjgW0kRwKKtZTVHJCv3S4Ni18INkGodaDFfqW9fa9YVJ+WFq72vrdwGGpWRJ8NFF4ZSNNXzswMxwMSyInqpk1w9+8fece7o87fXLJSp42iLHsi1ZbaYdM6WTYDdTo2H9EggpPAN5mMHOUyEZ1xB8XO60nu6U3Q5x34z1fs6oFEqMdVhIkYYalUnMzQLe4e3XQLW97a9GhJBAsKGzK7Lbamdr2LZUtnw2apl3KOn0AEiefv7ULVzBU2P92/37pa1M3RAgaTo0EI70iu/NMSe5dXg3MbgYUsE5Us3mTC+spcYkU6azrVvGkpZZ4m8vfzNcqNiJaDgt26Btkz+oaKzlz2GammAPalzDytTGugzXRbGWIiWaJMHuw8S8Oi8gbOjudZt9bawk2E1RsjkOG/O1rPY61SeoadtaUEwgDFMkMhcSnq3bg5pAtyKsE2gUIGmKaVeN1ZK4IdM2fzVptjUDq+wzU03DmXHwWy/YV4m/Msk0+P+T7Pobc2TXg6b9Vazb+aTSdDUU/Y04zJXRrFZqxc2/1pkIFmLNz27cWY3kJncjouhWACUK5Brp1EKsCFPoCeqhGzkqcV4Jfi3LbbEvUZeSr9SBpsuGJgwt/W6sumsuNJpSUCBPq7f3VDyYXrCoiyZMydx0YeR1xEyZgpwsQJMZAgEqyiJDyBkvzRxeM2BjWGGOTQP7fb2Bvda01miMCctc1I4ZT4FkTd9oGpntVQbW9K9aCSFBYi6MJiRtTsdS5LAQZTN1A+EpaLkAMiGMR1sb25adypqQVORFhhrf+ds6YfehVeT077yzVuLVqFktPVTUhiIVObgtU1gV8wE6qm0cN9CXDt+NTokfbDKPG9hqkIxbqrFpWdUQ1tbS7cQt1PZhYLUFvkQAtpTLlQRcy7a9N3Osm+5/l3P18nSFYLc12p71hcupaItbX3CpqUl+U2PqMrbFYSbm2hWKWylu2x3tUim4JiMIM/ixEqEH/R9g3/4X9KCzQ9iDZ2jgq9E3E2Vq9w+gNNGlmXkfCNP2UgqhmxfESRvHu3WZHpxcXgyPTy4vrocn58eXF2fn10u/s3Cqgy3e2evOXgPM1kevZh370gT2t6a2V5YiwdNW7ZYbiGtJ/ire6ip0ta749VO7bRie2w7/6YLQzenV6BvsSiRpxvjMbQx6fmVbNafVYOy2uWn1G5M/Sml3UFUcRArlnNFKIp3LN6JplqNsX2s/+4GaU78aTG9vONP33jE6YZngycDhgV2ZwVGptMjhyAQcHB3CykLscKxRJhz1g5CzUPCMcYw0kRPU3j8J1+qFO+/2yulybwfjRHBUU6G9k0ekV5pInQQd43VywY63HU10Ll/R5JiwbAEVKojxW1Tybq+Nve69C35EMuQpkUn/h4Nez7tEqZjSyHViBgJvQHgqcvYHpseYkcUV0uT7Xs/zbs+40iTL7q0JMP26SKwLVK19rYNzGNUZpARzwU0yCZKu3SE3L0YIQy4eYLtz7U6RTqXgCzO8jKvAcCfVT2Qu/DcVp5a30qKoPtPQsFILTtcFTJmyEm7CtW+wdxCieV23Mm4+slbzbuOYOauCowHhov2Xkjdlo8xN4gVPHRmWznAmlKArW/1oe++9L4TIgOsiqpZhphvU279RKZWGnDzWc8ynCr5XQ5uvyGALOdkC36/g+38R/uMb4T963gwXtuluCQjTwzwvlWysHcicuD3uKpgF8Lz3mZiAlsStYnIkqpSYm/ep7UBMaUaV52VikjJZ0RKTiojn5eSxWvDN8AH6vV7U8zypqQkUz5M4ppmgM7j8/yP3iCp00YNCZBl8D6n9DT+CGI8Vauh5OZmh0lhAP+pB2HfruL8W2hKVKTRVOL25pL+An9pIem/k+HcAAAD//5hemP0CHQAA
 
 - path: /opt/azure/containers/reconcilePrivateHosts.sh
   permissions: "0744"