fix: update AzureContainerLinux image reference (#8446)

Signed-off-by: Aadhar Agarwal <aadagarwal@microsoft.com>

Author: aadhar-agarwal

.pipelines/.vsts-vhd-builder-release.yaml

@@ -869,9 +869,9 @@ stages:
               echo '##vso[task.setvariable variable=ENABLE_FIPS]false'
               echo '##vso[task.setvariable variable=ENABLE_TRUSTED_LAUNCH]True'
               echo '##vso[task.setvariable variable=ENABLE_CGROUPV2]True'
-              echo '##vso[task.setvariable variable=SIG_SOURCE_GALLERY_UNIQUE_NAME]035db282-f1c8-4ce7-b78f-2a7265d5398c-ACLDEVEL'
-              echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_NAME]aclpreview'
-              echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_VERSION]0.20260318.1072691'
+              echo '##vso[task.setvariable variable=SIG_SOURCE_GALLERY_UNIQUE_NAME]b3e01d89-bd55-414f-bbb4-cdfeb2628caa-ACL'
+              echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_NAME]acl'
+              echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_VERSION]3.0.20260401'
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
@@ -893,9 +893,9 @@ stages:
               echo '##vso[task.setvariable variable=ENABLE_FIPS]false'
               echo '##vso[task.setvariable variable=ENABLE_TRUSTED_LAUNCH]True'
               echo '##vso[task.setvariable variable=ENABLE_CGROUPV2]True'
-              echo '##vso[task.setvariable variable=SIG_SOURCE_GALLERY_UNIQUE_NAME]035db282-f1c8-4ce7-b78f-2a7265d5398c-ACLDEVEL'
-              echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_NAME]aclpreview-arm64'
-              echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_VERSION]0.20260318.1072692'
+              echo '##vso[task.setvariable variable=SIG_SOURCE_GALLERY_UNIQUE_NAME]b3e01d89-bd55-414f-bbb4-cdfeb2628caa-ACL'
+              echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_NAME]acl-arm64'
+              echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_VERSION]3.0.20260401'
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:

.pipelines/.vsts-vhd-builder.yaml

@@ -216,9 +216,9 @@ stages:
             echo '##vso[task.setvariable variable=ENABLE_FIPS]false'
             echo '##vso[task.setvariable variable=ENABLE_TRUSTED_LAUNCH]True'
             echo '##vso[task.setvariable variable=ENABLE_CGROUPV2]True'
-            echo '##vso[task.setvariable variable=SIG_SOURCE_GALLERY_UNIQUE_NAME]035db282-f1c8-4ce7-b78f-2a7265d5398c-ACLDEVEL'
-            echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_NAME]aclpreview'
-            echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_VERSION]0.20260318.1072691'
+            echo '##vso[task.setvariable variable=SIG_SOURCE_GALLERY_UNIQUE_NAME]b3e01d89-bd55-414f-bbb4-cdfeb2628caa-ACL'
+            echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_NAME]acl'
+            echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_VERSION]3.0.20260401'
           displayName: Setup Build Variables
         - template: ./templates/.builder-release-template.yaml
           parameters:
@@ -237,9 +237,9 @@ stages:
             echo '##vso[task.setvariable variable=ENABLE_FIPS]false'
             echo '##vso[task.setvariable variable=ENABLE_TRUSTED_LAUNCH]True'
             echo '##vso[task.setvariable variable=ENABLE_CGROUPV2]True'
-            echo '##vso[task.setvariable variable=SIG_SOURCE_GALLERY_UNIQUE_NAME]035db282-f1c8-4ce7-b78f-2a7265d5398c-ACLDEVEL'
-            echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_NAME]aclpreview-arm64'
-            echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_VERSION]0.20260318.1072692'
+            echo '##vso[task.setvariable variable=SIG_SOURCE_GALLERY_UNIQUE_NAME]b3e01d89-bd55-414f-bbb4-cdfeb2628caa-ACL'
+            echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_NAME]acl-arm64'
+            echo '##vso[task.setvariable variable=SIG_SOURCE_IMAGE_VERSION]3.0.20260401'
           displayName: Setup Build Variables
         - template: ./templates/.builder-release-template.yaml
           parameters:

vhdbuilder/packer/cleanup-vhd.sh

@@ -12,6 +12,11 @@ rm -rf /var/log/stunnel4/ /etc/logrotate.d/stunnel4
 rm -f /etc/machine-id
 touch /etc/machine-id
 chmod 644 /etc/machine-id
+# Restore the UKI firstboot addon consumed by ignition-quench during this build
+# Without this, VMs created from this VHD won't get flatcar.first_boot=detected on the kernel cmdline
+if [ -f /boot/acl/uki-addons/firstboot.addon.efi ] && [ ! -f /boot/EFI/Linux/acl.efi.extra.d/firstboot.addon.efi ]; then
+  install -D -m 0644 /boot/acl/uki-addons/firstboot.addon.efi /boot/EFI/Linux/acl.efi.extra.d/firstboot.addon.efi
+fi
 # Cleanup disk usage diagnostics file (created by generate-disk-usage.sh)
 rm -f /opt/azure/disk-usage.txt
 # remove image-fetcher binary from the image since it's only needed during build and is not expected to be present on the final image