GPG fixes

2024-11-21 10:51:14 +01:00 · 2024-11-21 10:51:14 +01:00 · ac668fd1d1
commit ac668fd1d1
parent 5a62a54e3c
1 changed files with 7 additions and 0 deletions
--- a/global/overlay/etc/puppet/modules/soc/manifests/intelmq.pp
+++ b/global/overlay/etc/puppet/modules/soc/manifests/intelmq.pp
@ -311,6 +311,13 @@ class soc::intelmq(
    sunet::snippets::secret_file { "/opt/intelmq/.gnupg/${privkey}.asc":
      hiera_key => 'gnupg.privkey'
    }
+    file { "/opt/intelmq/.gnupg/${privkey}.asc":
+      ensure  => present,
+      replace => false,
+      onwer   => 'intelmq',
+      group   => 'intelmq',
+      mode    => '0500',
+    }
    exec { 'Import private gpg key':
      command => "sudo -u intelmq /usr/bin/gpg -import /opt/intelmq/.gnupg/${privkey}.asc",
      unless  => "gpg -K ${privkey} 2>&1 > /dev/null",