tjh.dev
nixpkgs mirror (for testing)
github.com/NixOS/nixpkgs
nix
nixosTests.systemd-journal-gateway: fix permissions on files under /run/secrets
+1
-1
+1
-1
nixos/tests/systemd-journal-gateway.nix
+1
-1
nixos/tests/systemd-journal-gateway.nix
···
47
47
48
48
def copy_pem(file: str):
49
49
machine.copy_from_host(source=f"{tmpdir}/{file}", target=f"/run/secrets/{file}")
50
-
machine.succeed(f"chmod 644 /run/secrets/{file}")
50
+
machine.succeed(f"chmod 600 /run/secrets/{file} && chown systemd-journal-gateway /run/secrets/{file}")
51
51
52
52
with subtest("Copying keys and certificates"):
53
53
machine.succeed("mkdir -p /run/secrets/{client,server}")