{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu/", "slug": "dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu", "url": "https://update.dsesecurity.com/updates/dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu/" }, "title": "Find the resource-disk configuration owner before editing waagent on Ubuntu", "summary": "Why can changing waagent resource-disk or swap settings have no effect on an Ubuntu Cloud Image?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "managed-it", "label": "Managed IT operations", "alt": "A controlled technology lifecycle progressing from assessment to approved production.", "card_url": "https://update.dsesecurity.com/assets/editorial/managed-it-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/managed-it-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:25:07+00:00", "modified_at": "2026-09-10T02:04:57+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 244, "potentially_affected": "Ubuntu Cloud Images that use cloud-init to manage resource-disk configuration and swap.", "dse_recommendation": "Identify which component owns resource-disk and swap configuration before proposing a setting change.", "primary_source": { "name": "Azure Linux VM Agent Overview - Azure Virtual Machines | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/agent-linux", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

On Ubuntu Cloud Images where cloud-init manages the resource disk and swap, Microsoft’s documented waagent resource-disk format, filesystem, mount-point, swap-enable, and swap-size settings have no effect. Those images also default the agent’s provisioning setting to disabled when cloud-init handles provisioning. Elsewhere, waagent can create a swap file on the resource disk, but that disk is temporary and can be emptied during deprovisioning. Microsoft Learn.

\n

Applicability

\n

Use this check when a configuration file appears correct but an Ubuntu VM’s resource-disk layout or swap does not match it. Confirm the image’s actual provisioning arrangement rather than assuming every Linux VM uses the same owner for those tasks.

\n

DSE recommendation

\n

Identify which component owns resource-disk and swap configuration before proposing a setting change. Have the image maintainer review the effective cloud-init configuration and the intended disk use together. Remove ambiguity from the operating procedure by naming the supported configuration path for that image, while preserving a record of any existing setting that was mistakenly treated as authoritative.

\n

Verification

\n

Provision a disposable VM from the exact image version with the proposed configuration. Inspect the resulting mount and swap state and compare them with the intended values. Record the responsible component and sanitized evidence, not just the contents of waagent.conf. Investigate conflicting assumptions before rolling the image forward, and keep persistent application data outside any design that depends on this temporary disk surviving deprovisioning.

\n

Official references

\n

Microsoft Learn: Azure Linux VM Agent overview. Source reviewed September 9, 2026.

", "content_text": "Source facts\nOn Ubuntu Cloud Images where cloud-init manages the resource disk and swap, Microsoft’s documented waagent resource-disk format, filesystem, mount-point, swap-enable, and swap-size settings have no effect. Those images also default the agent’s provisioning setting to disabled when cloud-init handles provisioning. Elsewhere, waagent can create a swap file on the resource disk, but that disk is temporary and can be emptied during deprovisioning. Microsoft Learn.\nApplicability\nUse this check when a configuration file appears correct but an Ubuntu VM’s resource-disk layout or swap does not match it. Confirm the image’s actual provisioning arrangement rather than assuming every Linux VM uses the same owner for those tasks.\nDSE recommendation\nIdentify which component owns resource-disk and swap configuration before proposing a setting change. Have the image maintainer review the effective cloud-init configuration and the intended disk use together. Remove ambiguity from the operating procedure by naming the supported configuration path for that image, while preserving a record of any existing setting that was mistakenly treated as authoritative.\nVerification\nProvision a disposable VM from the exact image version with the proposed configuration. Inspect the resulting mount and swap state and compare them with the intended values. Record the responsible component and sanitized evidence, not just the contents of waagent.conf. Investigate conflicting assumptions before rolling the image forward, and keep persistent application data outside any design that depends on this temporary disk surviving deprovisioning.\nOfficial references\nMicrosoft Learn: Azure Linux VM Agent overview. Source reviewed September 9, 2026.", "content_markdown": "## Source facts\n\nOn Ubuntu Cloud Images where cloud-init manages the resource disk and swap, Microsoft’s documented waagent resource-disk format, filesystem, mount-point, swap-enable, and swap-size settings have no effect. Those images also default the agent’s provisioning setting to disabled when cloud-init handles provisioning. Elsewhere, waagent can create a swap file on the resource disk, but that disk is temporary and can be emptied during deprovisioning. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/agent-linux).\n\n## Applicability\n\nUse this check when a configuration file appears correct but an Ubuntu VM’s resource-disk layout or swap does not match it. Confirm the image’s actual provisioning arrangement rather than assuming every Linux VM uses the same owner for those tasks.\n\n## DSE recommendation\n\nIdentify which component owns resource-disk and swap configuration before proposing a setting change. Have the image maintainer review the effective cloud-init configuration and the intended disk use together. Remove ambiguity from the operating procedure by naming the supported configuration path for that image, while preserving a record of any existing setting that was mistakenly treated as authoritative.\n\n## Verification\n\nProvision a disposable VM from the exact image version with the proposed configuration. Inspect the resulting mount and swap state and compare them with the intended values. Record the responsible component and sanitized evidence, not just the contents of waagent.conf. Investigate conflicting assumptions before rolling the image forward, and keep persistent application data outside any design that depends on this temporary disk surviving deprovisioning.\n\n## Official references\n\n[Microsoft Learn: Azure Linux VM Agent overview](https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/agent-linux). Source reviewed September 9, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu/", "url": "https://update.dsesecurity.com/updates/dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Find the resource-disk configuration owner before editing waagent on Ubuntu", "item": "https://update.dsesecurity.com/updates/dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu/", "url": "https://update.dsesecurity.com/updates/dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu/", "headline": "Find the resource-disk configuration owner before editing waagent on Ubuntu", "description": "Why can changing waagent resource-disk or swap settings have no effect on an Ubuntu Cloud Image?", "abstract": "Why can changing waagent resource-disk or swap settings have no effect on an Ubuntu Cloud Image?", "articleBody": "Source facts\nOn Ubuntu Cloud Images where cloud-init manages the resource disk and swap, Microsoft’s documented waagent resource-disk format, filesystem, mount-point, swap-enable, and swap-size settings have no effect. Those images also default the agent’s provisioning setting to disabled when cloud-init handles provisioning. Elsewhere, waagent can create a swap file on the resource disk, but that disk is temporary and can be emptied during deprovisioning. Microsoft Learn.\nApplicability\nUse this check when a configuration file appears correct but an Ubuntu VM’s resource-disk layout or swap does not match it. Confirm the image’s actual provisioning arrangement rather than assuming every Linux VM uses the same owner for those tasks.\nDSE recommendation\nIdentify which component owns resource-disk and swap configuration before proposing a setting change. Have the image maintainer review the effective cloud-init configuration and the intended disk use together. Remove ambiguity from the operating procedure by naming the supported configuration path for that image, while preserving a record of any existing setting that was mistakenly treated as authoritative.\nVerification\nProvision a disposable VM from the exact image version with the proposed configuration. Inspect the resulting mount and swap state and compare them with the intended values. Record the responsible component and sanitized evidence, not just the contents of waagent.conf. Investigate conflicting assumptions before rolling the image forward, and keep persistent application data outside any design that depends on this temporary disk surviving deprovisioning.\nOfficial references\nMicrosoft Learn: Azure Linux VM Agent overview. Source reviewed September 9, 2026.", "datePublished": "2026-09-10T00:25:07+00:00", "dateModified": "2026-09-10T02:04:57+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-409-find-the-resource-disk-configuration-owner-before-editing-waagent-on-ubuntu/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Find the resource-disk configuration owner before editing waagent on Ubuntu" }, "articleSection": [ "IT" ], "keywords": [ "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 244, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Azure Linux VM Agent Overview - Azure Virtual Machines | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/agent-linux" } } ] } }