Fix permissions in service

Reviewed-on: #35
refs #1313

CHANGELOG.md

@@ -1,4 +1,8 @@
 # Changelog
+## [0.7.3] - 2025-03-19
+### Changed
+
+- Fix permissions problem and authorized_keys file in debian package
 
 ## [0.7.2] - 2025-03-19
 

debian/ogrepository.postinst

@@ -45,6 +45,14 @@ done
     # Copy ssh keys
     cp /opt/opengnsys/ogrepository/etc/opengnsys $OPENGNSYS_HOME/.ssh/id_ed25519
     cp /opt/opengnsys/ogrepository/etc/opengnsys.pub $OPENGNSYS_HOME/.ssh/id_ed25519.pub
+    # Change permissions
+    chmod 700 $OPENGNSYS_HOME/.ssh
+    chmod 600 $OPENGNSYS_HOME/.ssh/id_ed25519
+    chmod 644 $OPENGNSYS_HOME/.ssh/id_ed25519.pub
+    # Genera authorized_keys 
+    cat $OPENGNSYS_HOME/.ssh/id_ed25519.pub >> $OPENGNSYS_HOME/.ssh/authorized_keys
+    chmod 600 $OPENGNSYS_HOME/.ssh/authorized_keys
+    chown -R opengnsys:opengnsys $OPENGNSYS_HOME/.ssh
 
     if [ -f /etc/samba/smb.conf ]; then
         dpkg-divert --package ogrepository --add --rename --divert /etc/samba/smb.conf.orig /etc/samba/smb.conf

installer/files/ogrepo-api.service

@@ -3,8 +3,8 @@ Description=Gunicorn instance to serve repo_api
 After=network.target
 
 [Service]
-User=%%OGREPOSITORY_USER%%
+User=opengnsys
-Group=%%OGREPOSITORY_USER%%
+Group=opengnsys
 WorkingDirectory=/opt/opengnsys/ogrepository/api  
 ExecStart=/usr/bin/gunicorn -w 4 -b 0.0.0.0:8006 repo_api:app