clan_cli secrets_upload: fix permissions

2024-06-02 19:10:48 +02:00
parent 748d9ff6d5
commit 22cb1955e7
1 changed files with 2 additions and 0 deletions
--- a/pkgs/clan-cli/clan_cli/facts/upload.py
+++ b/pkgs/clan-cli/clan_cli/facts/upload.py
@@ -33,6 +33,8 @@ def upload_secrets(machine: Machine) -> None:
                    " ".join(["ssh"] + ssh_cmd[2:]),
                    "-az",
                    "--delete",
+                    "--chown=root:root",
+                    "--chmod=D700,F600",
                    f"{tempdir!s}/",
                    f"{host.user}@{host.host}:{machine.secrets_upload_directory}/",
                ],