openstack
/
tripleo-image-elements
Code Issues Proposed changes

Fix permissions on ironic virtual pm key 

Private ssh keys should have permissions of 600. We also should
explicitly make this the case rather than relying on o-a-c to preserve
permissions from cloned code. Additionally, the ironic process needs to
be able to read this key.

Change-Id: I0f4ce9f0b641c8634a927f79a803159a8884aaf2
This commit is contained in:
Gregory Haynes 2014-05-14 13:24:48 -07:00
parent 79486dd395
commit 213195f3f6
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
elements/ironic-conductor/os-refresh-config/post-configure.d/68-ironic-conductor
View File

@ -13,3 +13,9 @@ done
os-svc-enable -n ironic-conductor
service ironic-conductor restart
# ssh really wants these permissions
chmod 600 /mnt/state/var/lib/ironic/virtual-power-key
# make sure ironic can read the ssh key
chown ironic:ironic /mnt/state/var/lib/ironic/virtual-power-key