Fix permissions in service

fix_ssh_keys (#35 )
Reviewed-on: #35 refs #1313
2025-03-19 17:02:53 +01:00 · 2025-03-19 16:51:01 +01:00 · 2025-03-19 16:35:05 +01:00
3 changed files with 14 additions and 2 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -1,4 +1,8 @@
 # Changelog
+## [0.7.3] - 2025-03-19
+### Changed
+
+- Fix permissions problem and authorized_keys file in debian package

 ## [0.7.2] - 2025-03-19

--- a/debian/ogrepository.postinst
+++ b/debian/ogrepository.postinst
@ -45,6 +45,14 @@ done
    # Copy ssh keys
    cp /opt/opengnsys/ogrepository/etc/opengnsys $OPENGNSYS_HOME/.ssh/id_ed25519
    cp /opt/opengnsys/ogrepository/etc/opengnsys.pub $OPENGNSYS_HOME/.ssh/id_ed25519.pub
+    # Change permissions
+    chmod 700 $OPENGNSYS_HOME/.ssh
+    chmod 600 $OPENGNSYS_HOME/.ssh/id_ed25519
+    chmod 644 $OPENGNSYS_HOME/.ssh/id_ed25519.pub
+    # Genera authorized_keys 
+    cat $OPENGNSYS_HOME/.ssh/id_ed25519.pub >> $OPENGNSYS_HOME/.ssh/authorized_keys
+    chmod 600 $OPENGNSYS_HOME/.ssh/authorized_keys
+    chown -R opengnsys:opengnsys $OPENGNSYS_HOME/.ssh

    if [ -f /etc/samba/smb.conf ]; then
        dpkg-divert --package ogrepository --add --rename --divert /etc/samba/smb.conf.orig /etc/samba/smb.conf
--- a/installer/files/ogrepo-api.service
+++ b/installer/files/ogrepo-api.service
@ -3,8 +3,8 @@ Description=Gunicorn instance to serve repo_api
 After=network.target

 [Service]
-User=%%OGREPOSITORY_USER%%
-Group=%%OGREPOSITORY_USER%%
+User=opengnsys
+Group=opengnsys
 WorkingDirectory=/opt/opengnsys/ogrepository/api  
 ExecStart=/usr/bin/gunicorn -w 4 -b 0.0.0.0:8006 repo_api:app
Author	SHA1	Message	Date
Nicolas Arenas	6ba0788bc0	Fix permissions in service ogrepository/pipeline/tag This commit looks good Details	2025-03-19 17:02:53 +01:00
Nicolas Arenas	826625f66a	fix_ssh_keys (#35 ) Reviewed-on: #35 refs #1313	2025-03-19 16:51:01 +01:00
Gerardo GIl Elizeire	d585e992e6	Merge pull request 'add_python_scripts' (#34 ) from add_python_scripts into main ogrepository/pipeline/tag This commit looks good Details Reviewed-on: #34	2025-03-19 16:35:05 +01:00