HamWAN / infrastructure-configs

Ansible roles and playbooks for HamWAN servers, applications, and router infrastructure.
http://www.hamwan.org/
Apache License 2.0
8 stars 2 forks source link

Private key permission management for testing #18

Closed bkus closed 1 year ago

bkus commented 1 year ago

ssh refuses to use inventories/test/test_ed25519 with default permissions.

There is no ssh_config override to let ssh use a private key file that's not locked down permission-wise. Git doesn't manage permissions. While a post-checkout hook can do the necessary "chmod 0600" operations, there is no easy way of distributing it to everyone who clones the repo. So, here we are, putting the LocalIdentityFile class of hosts.py in charge of permissions.