#

# Microsoft Azure Linux Agent Configuration

#

# Enable extension handling. Do not disable this unless you do not need password reset,

# backup, monitoring, or any extension handling whatsoever.

Extensions.Enabled=y

# Which provisioning agent to use. Supported values are "auto" (default), "waagent",

# "cloud-init", or "disabled".

Provisioning.Agent=auto

# Password authentication for root account will be unavailable.

Provisioning.DeleteRootPassword=y

# Generate fresh host key pair.

Provisioning.RegenerateSshHostKeyPair=y

# Supported values are "rsa", "dsa", "ecdsa", "ed25519", and "auto".

# The "auto" option is supported on OpenSSH 5.9 (2011) and later.

Provisioning.SshHostKeyPairType=rsa

# Monitor host name changes and publish changes via DHCP requests.

Provisioning.MonitorHostName=y

# Decode CustomData from Base64.

Provisioning.DecodeCustomData=n

# Execute CustomData after provisioning.

Provisioning.ExecuteCustomData=n

# Algorithm used by crypt when generating password hash.

#Provisioning.PasswordCryptId=6

# Length of random salt used when generating password hash.

#Provisioning.PasswordCryptSaltLength=10

# Format if unformatted. If 'n', resource disk will not be mounted.

ResourceDisk.Format=y

# File system on the resource disk

# Typically ext3 or ext4. FreeBSD images should use 'ufs' here.

ResourceDisk.Filesystem=ufs

# Mount point for the resource disk

ResourceDisk.MountPoint=/mnt/resource

# Create and use swapfile on resource disk.

ResourceDisk.EnableSwap=y

# Size of the swapfile.

ResourceDisk.SwapSizeMB=16384

# Comma-separated list of mount options. See mount(8) for valid options.

ResourceDisk.MountOptions=None

# Enable verbose logging (y|n)

Logs.Verbose=n

# Enable Console logging, default is y

# Logs.Console=y

# Is FIPS enabled

OS.EnableFIPS=n

# Root device timeout in seconds.

OS.RootDeviceScsiTimeout=300

# If "None", the system default version is used.

OS.OpensslPath=None

# Set the path to SSH keys and configuration files

OS.SshDir=/etc/ssh

OS.PasswordPath=/etc/master.passwd

OS.SudoersDir=/usr/local/etc/sudoers.d

# If set, agent will use proxy server to access internet

#HttpProxy.Host=None

#HttpProxy.Port=None

# Detect Scvmm environment, default is n

# DetectScvmmEnv=n

#

# Lib.Dir=/var/lib/waagent

#

# DVD.MountPoint=/mnt/cdrom/secure

#

# Pid.File=/var/run/waagent.pid

#

# Extension.LogDir=/var/log/azure

#

# Home.Dir=/home

# Enable RDMA management and set up, should only be used in HPC images

# OS.EnableRDMA=y

# Enable or disable goal state processing auto-update, default is enabled

# When turned off, it remains on latest version installed on the vm

# Added this new option AutoUpdate.UpdateToLatestVersion in place of AutoUpdate.Enabled, and encourage users to transition to this new option

# See wiki[https://github.com/Azure/WALinuxAgent/wiki/FAQ#autoupdateenabled-vs-autoupdateupdatetolatestversion] for more details

# AutoUpdate.UpdateToLatestVersion=y

# Determine the update family, this should not be changed

# AutoUpdate.GAFamily=Prod

# Determine if the overprovisioning feature is enabled. If yes, hold extension

# handling until inVMArtifactsProfile.OnHold is false.

# Default is enabled

# EnableOverProvisioning=y

# Allow fallback to HTTP if HTTPS is unavailable

# Note: Allowing HTTP (vs. HTTPS) may cause security risks

# OS.AllowHTTP=n

# Add firewall rules to protect access to Azure host node services

OS.EnableFirewall=y