204000 - Azure CLI Not Installed
Agent error code #204000 indicates that the agent could not find the az binary on the host it is running on. The Azure NSG backend drives network security groups by shelling out to the Azure CLI, so without it no grant can be applied.
Common causes include:
- The Azure CLI is not installed on the agent host
- It is installed somewhere outside the agent service's
PATH - The agent runs in a minimal container image that does not include it
Steps to Resolve
Install the Azure CLI
- Follow the Azure CLI installation steps for the agent host's operating system
- Confirm the binary responds:
az --version
Check the Agent's PATH
The agent inherits the PATH of the service manager, not your login shell.
- Run
command -v azto find the binary - If that directory is not on the service
PATH, add it in the unit file or symlink the binary somewhere already on the path - Restart the agent so it picks up the change
Verify as the Agent's Own Account
sudo -u knocknoc az --version
For the full setup, see the backends chapter.