feat: upgrade blobfuse version to v2.5.4 on Ubuntu node

[andyzhangx]

What this PR does / why we need it:

Upgrades the fallback blobfuse2 version on Ubuntu nodes from v2.5.3 → v2.5.4 in parts/linux/cloud-init/artifacts/ubuntu/cse_install_ubuntu.sh (LEGACY_FALLBACK_BLOBFUSE2_VERSION).

This fallback is only used when the VHD image lacks the pre-baked blobfuse2 component (e.g. old images or unusual component combinations), so most nodes with recent VHDs will not hit this code path. Keeping the fallback aligned with the latest upstream release ensures those nodes still get an up-to-date binary with the latest fixes.

What's new in blobfuse2 v2.5.4 (release: https://github.com/Azure/azure-storage-fuse/releases/tag/blobfuse2-2.5.4):

Features

• FIPS-compliant binary built with Microsoft Go toolchain (systemcrypto GOEXPERIMENT, CGO_ENABLED=1), routing all crypto/* calls through system OpenSSL FIPS provider (remove 1804-arm64-gen2-containerd #2226).
• Memory-bounded attribute cache with LRU eviction and background TTL sweeper; new max-size-mb / --attr-cache-max-size-mb (auto-tuned to 1% of RAM, clamped to [64 MB, 1 GB] by default).
• Kernel directory-listing cache (fuse3 only) via libfuse.kernel-list-cache-expiration-sec (default 120s, set 0 to disable) — repeat ls served entirely from kernel page cache.

Bug fixes

• Fix CPK-encrypted blob attribute lookup duplicating prefix path when subdirectory is configured (chore: move the installation of containerd from containerdfunc.ps1 to windowscsehelper.ps1 #2199).
• Return ENAMETOOLONG instead of EIO when creating/renaming a directory path exceeding ADLS 63-segment depth limit (Add CI-Syslog systemd service #2221, add kernel-headers package by default to Mariner 2.0 images #2251).
• Fix Debian 13 (trixie) release by publishing a dedicated package built against libfuse3.so.4 (libfuse 3.17+) (remove: images for vhd space #2264).
• Fixed filtering of blobs by blob index tags via azstorage.filter / --filter (arm64 ubuntu sig 2022.09.27 release notes #2261).

Other

• CBL-Mariner 2.0 EOL — no more Blobfuse2 packages published to Mariner 2.0 repos.
• Default block-cache memory pool reduced from 80% of free memory to 60% of available memory when block_cache.mem-size-mb is not set (upgrade azure csi drivers #2260).
• Mirror Go runtime panic/fatal stack traces into the Blobfuse2 log file (in addition to per-mount .trace).

Which issue(s) this PR fixes:
Fixes #

[Copilot]

Pull request overview

Updates the Ubuntu CSE dependency install script’s legacy fallback blobfuse2 package version so older VHDs (that don’t have blobfuse2 managed via components.json and don’t have it preinstalled) will install blobfuse2 2.5.4 instead of 2.5.3.

Changes:

• Bump LEGACY_FALLBACK_BLOBFUSE2_VERSION from 2.5.3 → 2.5.4 in the Ubuntu CSE install fallback path.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

[aks-node-assistant]

AgentBaker Linux gate detective

Run: 171695816
Failed job/stage/task: Run AgentBaker E2E / E2E test validation
Detective summary: Deterministic blobfuse2 expectation mismatch: PR installs blobfuse2 2.5.4, while E2E package validation still expects 2.5.3 across Ubuntu scenarios.

Likely cause/signature: AgentBaker E2E expected package version/test data was not updated with the intended blobfuse2 2.5.4 bump.
Confidence: High
Recommended owner/action: PR/package-version owner: update the E2E expected blobfuse2 package version to 2.5.4; keep SecondaryNIC customData noise under existing repair #38757358.
Strongest alternative: SecondaryNIC customData failures also appear, but the first repeated Ubuntu failures directly match this blobfuse2 version change.

Evidence: build timeline/logs and E2E test results for run 171695816.
Wiki signature: agentbaker-e2e-blobfuse2-version-expectation-mismatch

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.