diff options
| author | Ludovic Courtès <ludo@gnu.org> | 2025-12-19 08:34:28 +0100 |
|---|---|---|
| committer | Ludovic Courtès <ludo@gnu.org> | 2025-12-22 15:11:27 +0100 |
| commit | f55793c575fcf8667d52e0b458fee62ef0d69d0c (patch) | |
| tree | 4a60fc270ed39c2ea48e699e208bc9d9375ef096 /gnu | |
| parent | 0ac2a0fd1813fb5c04b22f6443d8f8a96d3c9645 (diff) | |
archive: Make /etc/guix/signing-key.* readable by ‘guix-daemon’.
The manual suggests running ‘guix archive --generate-key’ as root, but that
would lead to root-owned /etc/guix/signing-key.{pub,sec}, with the secret key
unreadable by the unprivileged guix-daemon. This fixes it.
Reported in guix/guix#4844.
* guix/scripts/archive.scm (generate-key-pair)[ensure-daemon-ownership]: New
procedure.
Use it for ‘%public-key-file’, ‘%private-key-file’, and their parent
directory.
Reported-by: Rutherther <rutherther@ditigal.xyz>
Change-Id: I7ae980bfd40078fb7ef27a193217b15f366d5d50
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Merges: #4958
Diffstat (limited to 'gnu')
0 files changed, 0 insertions, 0 deletions