super/box
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

NetVM: /etc/netvm 711 so operators can stat (not read) identities

Browse Source
This commit is contained in:
Antigravity Agent
2026-10-03 01:06:00 -04:00
parent 9f76e30ff9
commit 1349e8bb7b
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bin/netvm-node-up.sh
+2
View File
@@ -8,6 +8,8 @@ netvm_names "${1:?usage: netvm-node-up.sh <node>}"
CONF="/etc/netvm/${NODE}.conf" CONF="/etc/netvm/${NODE}.conf"
[ -f "$CONF" ] || { echo "missing $CONF (human: netvm-new-identity.sh $NODE)"; exit 1; } [ -f "$CONF" ] || { echo "missing $CONF (human: netvm-new-identity.sh $NODE)"; exit 1; }
chmod 600 "$CONF" chmod 600 "$CONF"
# let the operator user stat (not read) identities: 711 dir, 600 files
chmod 711 /etc/netvm 2>/dev/null || true
nsexec() { ip netns exec "$NETNS" "$@"; } nsexec() { ip netns exec "$NETNS" "$@"; }
ip netns add "$NETNS" 2>/dev/null || true ip netns add "$NETNS" 2>/dev/null || true
bin/netvm-provision-edge.sh
+1 -1
View File
@@ -41,7 +41,7 @@ sudo visudo -c -f "$SUDOERS_FILE" > /dev/null && echo "ok: sudoers valid"
# 4. dir for human-placed WireGuard identities # 4. dir for human-placed WireGuard identities
sudo mkdir -p /etc/netvm sudo mkdir -p /etc/netvm
sudo chmod 700 /etc/netvm sudo chmod 711 /etc/netvm
echo "ok: /etc/netvm ready" echo "ok: /etc/netvm ready"
# 5. tailnet check # 5. tailnet check