cherry-pick: fix: remove nvidia pkg list during cleanup (#7333) (#7431)

Co-authored-by: Ganeshkumar Ashokavardhanan <35557827+ganeshkumarashok@users.noreply.github.com>
Co-authored-by: Lily Pan <lilylpan0426@gmail.com>

Author: 3 people

parts/linux/cloud-init/artifacts/azlosguard/cse_install_osguard.sh

@@ -78,6 +78,10 @@ ensureRunc() {
     stub
 }
 
+removeNvidiaRepos() {
+    stub
+}
+
 cleanUpGPUDrivers() {
     stub
 }

parts/linux/cloud-init/artifacts/cse_config.sh

@@ -905,6 +905,11 @@ configGPUDrivers() {
     fi
 
     retrycmd_if_failure 120 5 25 pkill -SIGHUP containerd || exit $ERR_GPU_DRIVERS_INSTALL_TIMEOUT
+
+    # Remove NVIDIA repos after GPU driver installation is complete
+    # This prevents automatic updates from upgrading Nvidia repo dependencies and eliminates
+    # the need for users to allowlist NVIDIA repository URLs in their firewalls
+    removeNvidiaRepos
 }
 
 validateGPUDrivers() {

parts/linux/cloud-init/artifacts/flatcar/cse_install_flatcar.sh

@@ -28,6 +28,10 @@ ensureRunc() {
     stub
 }
 
+removeNvidiaRepos() {
+    stub
+}
+
 cleanUpGPUDrivers() {
     rm -Rf $GPU_DEST /opt/gpu
 }

parts/linux/cloud-init/artifacts/mariner/cse_install_mariner.sh

@@ -447,12 +447,23 @@ ensureRunc() {
   echo "Mariner Runc is included in the Mariner base image or containerd installation. Skipping downloading and installing Runc"
 }
 
+removeNvidiaRepos() {
+  # Remove NVIDIA dnf repository configuration
+  # to prevent unnecessary network calls during dnf makecache/update
+  if [ -f /etc/yum.repos.d/nvidia-built-azurelinux.repo ]; then
+    rm -f /etc/yum.repos.d/nvidia-built-azurelinux.repo
+    echo "Removed NVIDIA dnf repository"
+  fi
+}
+
 cleanUpGPUDrivers() {
   rm -Rf $GPU_DEST /opt/gpu
 
   for packageName in $(managedGPUPackageList); do
     rm -rf "/opt/${packageName}"
   done
+
+  removeNvidiaRepos
 }
 
 downloadContainerdFromVersion() {

parts/linux/cloud-init/artifacts/ubuntu/cse_install_ubuntu.sh

@@ -156,12 +156,27 @@ installNvidiaManagedExpPkgFromCache() {
     done
 }
 
+removeNvidiaRepos() {
+    # Remove NVIDIA apt repository configuration
+    # to prevent unnecessary network calls during apt-get update
+    if [ -f /etc/apt/sources.list.d/nvidia.list ]; then
+        rm -f /etc/apt/sources.list.d/nvidia.list
+        echo "Removed NVIDIA apt repository"
+    fi
+    if [ -f /etc/apt/keyrings/nvidia.pub ]; then
+        rm -f /etc/apt/keyrings/nvidia.pub
+        echo "Removed NVIDIA GPG key"
+    fi
+}
+
 cleanUpGPUDrivers() {
     rm -Rf $GPU_DEST /opt/gpu
 
     for packageName in $(managedGPUPackageList); do
         rm -rf "/opt/${packageName}"
     done
+
+    removeNvidiaRepos
 }
 
 installCriCtlPackage() {