From 7e7ceb21ba30cacae05f29b2f574b9175ccfd425 Mon Sep 17 00:00:00 2001
From: Dmitry Vyukov <dvyukov@google.com>
Date: Fri, 29 May 2020 08:30:49 +0200
Subject: pkg/build: chmod output ssh key

ssh is very picky about ssh key permissions.
Let's enforce the right persmissions without bothering user with this.
---
 pkg/build/build.go | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'pkg')

diff --git a/pkg/build/build.go b/pkg/build/build.go
index d9f7a7713..b51f1f78b 100644
--- a/pkg/build/build.go
+++ b/pkg/build/build.go
@@ -7,6 +7,7 @@ package build
 import (
 	"bytes"
 	"fmt"
+	"os"
 	"path/filepath"
 	"regexp"
 	"strings"
@@ -65,6 +66,11 @@ func Image(params *Params) (string, error) {
 	if err != nil {
 		return "", extractRootCause(err, params.TargetOS, params.KernelDir)
 	}
+	if key := filepath.Join(params.OutputDir, "key"); osutil.IsExist(key) {
+		if err := os.Chmod(key, 0600); err != nil {
+			return "", fmt.Errorf("failed to chmod 0600 %v: %v", key, err)
+		}
+	}
 	sign := ""
 	if signer, ok := builder.(signer); ok {
 		sign, err = signer.sign(params)
-- 
cgit mrf-deployment