Files
0xWheatyz 52167db085 Re-assert 0600 on deploy key files at every materialize
O_CREAT's mode only applies to brand-new files, so a key whose permissions
were widened externally (e.g. a k8s fsGroup remount chmodding volume files
to group-rw) stayed 0660 forever and ssh refused it. fchmod on each rewrite
makes materialize_private_key self-heal.
2026-08-17 11:22:24 -04:00
..