From f0e5d78ba78171936a7eebe09cf89d3c6e85fc3a Mon Sep 17 00:00:00 2001 From: Ian Wienand Date: Fri, 27 Nov 2020 10:48:26 +1100 Subject: [PATCH] gerrit: set ownership on ~gerrit2/.ssh directory Currently is is 0700 and owned by root, so the gerrit2 user can't access the keys in there by default (in production this is already correct). This is the key used to push replication to gitea for example. Change-Id: Ie0230cd74aeb3e759a597c999b2507260f2b6c17 --- playbooks/roles/gerrit/tasks/main.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/playbooks/roles/gerrit/tasks/main.yaml b/playbooks/roles/gerrit/tasks/main.yaml index 3c9d895b90..1c13df7508 100644 --- a/playbooks/roles/gerrit/tasks/main.yaml +++ b/playbooks/roles/gerrit/tasks/main.yaml @@ -143,6 +143,8 @@ file: state: directory path: "{{ gerrit_home_dir }}/.ssh" + owner: "{{ gerrit_user_name }}" + group: "{{ gerrit_user_name }}" mode: 0700 # Private key for gerrit user to connect to other systems,