File permissions and ownership of config.boot is set in vyos-router, however, it is set within a conditional branch that is not called in the case of cloud-init. This leaves config.boot without correct group write permissions in that case. This becomes apparent after restoring the correct location for flavor-defined default configs, as used by cloud-init, in T8185. A fix requires a simple adjustment of the logic of vyos-router init_bootfile.