v2.17.0.1-[Marked as a pre-release while it is deployed to production; will be marked as latest when the deployment completes]

Features

• Add soft lockup trace capture to detection logic (#3653)
• Agent anon-memory self-monitoring with clean-exit mitigation (#3658)
• Update cgroup support matrix (#3662)

Bug Fixes and improvements

• Update comment on certificate rotation and goal state processing (#3640)
• Implement graceful thread shutdown during ext_handler exit (#3600)
• Remove .mrseq state file in disable operation for multi config scenario (#3661)
• Add nftables fallback for missing iptables modules (#3671)
• Redact secret from certificate telemetry (#3675)
• Extend signature telemetry expiry (#3695)

Tests bug fixes and improvements

• Skip CentOS 7.9 and 8.2 on tests that depend on Microsoft.Azure.Monitor.AzureMonitorLinuxAgent (#3632)
• Re-add CentOS 8.2 to cgroups test (#3637)
• Add Azure Linux 4 to test run (#3636)
• Skip suse 12 on tests that depend on Microsoft.Azure.Monitor.AzureMonitorLinuxAgent (#3642)
• Skip ama install on centos82 distro in agent cgroups tests (#3643)
• Http_request retry loop should only break on IOError timeout when fail_fast_on_timeout is True (#3644)
• Remove debian_9 from daily runs (#3652)
• Update CVM Skus to Standard_DC2as_v6 (#3646)
• Add ubuntu24 pro image to FIPS test and remove ubuntu22 pro (#3647)
• Run fips suite on ubuntu pro in Gov cloud (#3655)
• Remove rhel 7.5 and 8.2 from e2e test matrix and add 8.3 (#3656)
• Remove oracle_75, oracle_79 and oracle_82 from e2e test matrix (#3659)
• Enable fips e2e test suite in Mooncake (#3660)
• Add delay for instance view retry (#3664)
• Update retry delay for run command instance view check (#3665)
• ExtPolicy test should own VM until optimized (#3666)
• Ignore ConfigurationForLinux unexpected arch failures in check agent log (#3670)
• SKIP cgroup e2e tests (#3672)
• Use host command for dns lookup in publish_hostname on debian (#3673)
• Debian_10 and oracle_95 images deprecated (#3674)
• Ignore noise from failing extensions in e2e test runs (#3678)
• Add debian 12/13 to the e2e test matrix (#3676)
• SKIP running agent cgroup test run in oracl_97 in USGOV (#3679)
• Enable ARM64 E2E tests in US Government (#3680)
• AzSec doesn't support azlinux4 (#3682)
• Skip ExtPolicyWithDependencies on Debian 12/13 (#3683)
• Add ubuntu 26 images to e2e test matrix (#3677)
• Extend pipeline timeout (#3689)
• Pylint fixes (#3692) (#3694)
• Onboard SUSE 16 (#3691) (#3700)
• install cron in azlinux (#3699) (#3701)

Deployment schedule

Stage	Regions	Deployment Start
Canary	Central US EUAP, East US 2 EUAP	2026-10-13T18:17Z
Pilot	West Central US, East Asia
Medium	UK South
Large	North Europe
Batch 1A-i	Australia East, Brazil South, France Central, Germany West Central
Batch 1A-ii	Korea Central, North Central US, Norway East, Sweden Central, Switzerland North, West India
Batch 1A-iii	Australia Central, Canada Central, Japan East, Jio India West
Batch 1A-iv	Central India, South Africa North, UAE North, UK West
Batch 1A-v	Australia Central 2, Brazil Southeast, Canada East, France South, Germany North, Japan West, Southeast Asia, West US 3
Batch 1B-i	Central US
Batch 1B-ii	West Europe
Batch 1B-iii	East US
Batch 2A-i	Australia Southeast, Jio India Central, Korea South, Norway West, South Africa West, South Central US, South India, Sweden South, Switzerland West, UAE Central
Batch 2A-ii	West US 2
Batch 2B-i	West US
Batch 2B-ii	East US 2
All	Rest of the regions

Deployment schedule - USGov

Stage	Regions	Deployment Start
Stage 1	USDoD Central
Stage 2	USDoD East
Stage 3	USGov Texas
Stage 4	USGov Virginia, USGov Arizona
All	Rest of the USGov regions