Make sure the authorized_keys in the vm has correct permissions

anjannath · praveenkumar · commit da18a10f2da2 · 2020-08-17T23:37:18.000-07:00
This is not necessarily needed in case of RHCOS but in case of fedora coreos
the file's initial permissions are too open
diff --git a/pkg/crc/machine/machine.go b/pkg/crc/machine/machine.go
@@ -713,7 +713,7 @@ func updateSSHKeyPair(sshRunner *crcssh.Runner) error {
 	if err != nil {
 		return err
 	}
-	cmd := fmt.Sprintf("echo '%s' > /home/core/.ssh/authorized_keys", publicKey)
+	cmd := fmt.Sprintf("echo '%s' > /home/core/.ssh/authorized_keys; chmod 644 /home/core/.ssh/authorized_keys", publicKey)
 	_, err = sshRunner.Run(cmd)
 	if err != nil {
 		return err

Original file line number	Diff line number	Diff line change
`@@ -713,7 +713,7 @@ func updateSSHKeyPair(sshRunner *crcssh.Runner) error {`
`713`	`713`	`if err != nil {`
`714`	`714`	`return err`
`715`	`715`	`}`
`716`		`- cmd := fmt.Sprintf("echo '%s' > /home/core/.ssh/authorized_keys", publicKey)`
	`716`	`+ cmd := fmt.Sprintf("echo '%s' > /home/core/.ssh/authorized_keys; chmod 644 /home/core/.ssh/authorized_keys", publicKey)`
`717`	`717`	`_, err = sshRunner.Run(cmd)`
`718`	`718`	`if err != nil {`
`719`	`719`	`return err`