From def1544eadc349dc31ab6e9fd654091fa3ab74e7 Mon Sep 17 00:00:00 2001
From: Nicolas Arenas <narenas@qindel.com>
Date: Wed, 19 Mar 2025 16:44:08 +0100
Subject: [PATCH] Fix ssh keys permissions

---
 debian/ogrepository.postinst | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/debian/ogrepository.postinst b/debian/ogrepository.postinst
index 68bfb7a..acccaf7 100755
--- a/debian/ogrepository.postinst
+++ b/debian/ogrepository.postinst
@@ -45,6 +45,14 @@ done
     # Copy ssh keys
     cp /opt/opengnsys/ogrepository/etc/opengnsys $OPENGNSYS_HOME/.ssh/id_ed25519
     cp /opt/opengnsys/ogrepository/etc/opengnsys.pub $OPENGNSYS_HOME/.ssh/id_ed25519.pub
+    # Change permissions
+    chmod 700 $OPENGNSYS_HOME/.ssh
+    chmod 600 $OPENGNSYS_HOME/.ssh/id_ed25519
+    chmod 644 $OPENGNSYS_HOME/.ssh/id_ed25519.pub
+    # Genera authorized_keys 
+    cat $OPENGNSYS_HOME/.ssh/id_ed25519.pub >> $OPENGNSYS_HOME/.ssh/authorized_keys
+    chmod 600 $OPENGNSYS_HOME/.ssh/authorized_keys
+    chown -R opengnsys:opengnsys $OPENGNSYS_HOME/.ssh
 
     if [ -f /etc/samba/smb.conf ]; then
         dpkg-divert --package ogrepository --add --rename --divert /etc/samba/smb.conf.orig /etc/samba/smb.conf