summaryrefslogtreecommitdiffstats
path: root/nixos/modules/virtualisation/google-compute-image.nix
diff options
context:
space:
mode:
authorEelco Dolstra <eelco.dolstra@logicblox.com>2015-01-15 18:36:38 +0100
committerEelco Dolstra <eelco.dolstra@logicblox.com>2015-01-15 18:37:55 +0100
commitefa8fc2b0a5e94fd22e26c31c82b643d2352e92a (patch)
tree60b227c2470b03cdcc2f12e826d4a9cd39b0bef9 /nixos/modules/virtualisation/google-compute-image.nix
parentb9c4569b6b4c7fc3eb96b55cbf4043f2ba35a901 (diff)
Paranoia
Diffstat (limited to 'nixos/modules/virtualisation/google-compute-image.nix')
-rw-r--r--nixos/modules/virtualisation/google-compute-image.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/virtualisation/google-compute-image.nix b/nixos/modules/virtualisation/google-compute-image.nix
index 41c7dd62f3ed..4d493b3896f2 100644
--- a/nixos/modules/virtualisation/google-compute-image.nix
+++ b/nixos/modules/virtualisation/google-compute-image.nix
@@ -139,7 +139,7 @@ in
# Don't download the SSH key if it has already been downloaded
if ! [ -e /root/.ssh/authorized_keys ]; then
echo "obtaining SSH key..."
- mkdir -p /root/.ssh
+ mkdir -m 0700 -p /root/.ssh
${wget} -O /root/authorized-keys-metadata http://metadata/0.1/meta-data/authorized-keys
if [ $? -eq 0 -a -e /root/authorized-keys-metadata ]; then
cat /root/authorized-keys-metadata | cut -d: -f2- > /root/key.pub