From 4224cfc4c8b44bd38344b8b8f77e3a0d64e5a766 Mon Sep 17 00:00:00 2001
From: Jean-Paul Calderone <exarkun@twistedmatrix.com>
Date: Fri, 2 Jul 2021 15:13:26 -0400
Subject: [PATCH] Give ownership of these ssh files to the deployment user
---
nixos/modules/deployment.nix | 2 ++
1 file changed, 2 insertions(+)
diff --git a/nixos/modules/deployment.nix b/nixos/modules/deployment.nix
index 2f4462ac..773c2fa4 100755
--- a/nixos/modules/deployment.nix
+++ b/nixos/modules/deployment.nix
@@ -75,10 +75,12 @@ in {
TMP="$KEY"_tmp
if [ ! -e "$KEY" ]; then
mkdir -p ~deployment/.ssh ~root/.ssh
+ chown deployment ~deployment/.ssh
${pkgs.openssh}/bin/ssh-keygen -f "$TMP"
cat "$TMP".pub >> ~root/.ssh/authorized_keys
mv "$TMP".pub "$KEY".pub
mv "$TMP" "$KEY"
+ chown deployment "$KEY"
fi
'';
};
--
GitLab