You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When using a centralized location for keys, e.g. /etc/ssh/authorized_keys, that is owned by root, a trusted path error occurs. However, files are created successfully when --debug is used.
Expected Behavior
Trusted path should succeed without running puppet in debug mode.
Steps to Reproduce
Steps to reproduce the behavior:
Add a key with target of, e.g., /etc/ssh/authorized_keys/$user and use "drop_privileges => false".
Run puppet agent -t
Note trusted path error and the key file is not created.
Run puppet agent -t --debug
No error and keyfile is created.
Environment
Version 7.34.0
Platform: Oracle Linux 8
Additional Context
This is somewhat related to #92 . In secure environments, keys are usually managed in central location and key files are owned by root(or other admin user) or not writable by the user.