Merge pull request #121667 from Mic92/buildkite
nixos/buildkite-agents: fix race-condition when installing secrets
commit846f44e88026f10c114b27e6189f0153d151694a
authorJörg Thalheim <Mic92@users.noreply.github.com>
dateTue 1 Jun 2021, 09:31 (5 years ago)
parent4a41a22503b937
nixos/modules/services/continuous-integration/buildkite-agents.nix+1−2
@@ -238,8 +238,7 @@ in
238238 in
239239 optionalString (cfg.privateSshKeyPath != null) ''
240240 mkdir -m 0700 -p "${sshDir}"
241− cp -f "${toString cfg.privateSshKeyPath}" "${sshDir}/id_rsa"
242− chmod 600 "${sshDir}"/id_rsa
241+ install -m600 "${toString cfg.privateSshKeyPath}" "${sshDir}/id_rsa"
243242 '' + ''
244243 cat > "${cfg.dataDir}/buildkite-agent.cfg" <<EOF
245244 token="$(cat ${toString cfg.tokenPath})"