Re: [ptxdist] Installing a file in the /root directory.

[Michael Olbrich <m.olbrich@pengutronix.de>]

On Tue, Jun 23, 2020 at 05:16:45PM +0200, Mircea Ciocan wrote:
> On 23.06.20 15:59, Alexander Dahl wrote:
> > Hei hei,
> > 
> > On Tue, Jun 23, 2020 at 02:20:30PM +0200, Mircea Ciocan wrote:
> > > I want to install /root/.ssh/authorized_keys file from my board projectroot
> > > directory.
> > > 
> > > Sadly even after reading the previous mail regarding a similar issue with
> > > systemd directory I'm not able to correctly install the file.
> > > 
> > > I can create the /root/.ssh empty directory with the correct 0700
> > > permissions, but I haven't found any way of putting a file there, everything
> > > fails with:
> > > 
> > > Incompatible ownership or permissions for '/root':
> > > dropbear: 0.0 0755 (implicit)
> > > rootfs: 0.0 0700
> > > 
> > > One of these packages must be fixed!
> > > 
> > > Could a kind soul give me a quick hint how to do this, in my projectroot,
> > > the directories and file are having proper permissions.
> > > 
> > > 
> > > Line that fails:
> > > 
> > >          @$(call install_alternative, dropbear, 0, 0, 0600,
> > > /root/.ssh/authorized_keys, n)
> > This is not part of ptxdist master branch 'rules/dropbear.make' and
> > from a quick glance in Git it was not for the last 10 years.  Do you
> > have a customized rule in your BSP?
> > 
> > Greets
> > Alex
> > 
> That's the only "customization" made, I want to install an access key, the
> rest of the rule is vanilla dropbear.make

1. Don't overwrite the dropbear package for this. Just create a new package
   with the 'files' template to install your file.

2. You need to explicitly create /root in your package (or dropbear if you
   want to stick with that) with the same permissions as the rootfs
   package. And you should probably create /root/.ssh with the correct
   permissions as well:

	@$(call install_copy, dropbear, 0, 0, 0700, /root)
	@$(call install_copy, dropbear, 0, 0, 0700, /root/.ssh)
	@$(call install_alternative, dropbear, 0, 0, 0600, \
		/root/.ssh/authorized_keys, n)

Note, there is a bug in the latest ptxdist release. I think this will still
fail, so you need to copy scripts/lib/ptxd_lib_check_dir_permissions.awk
from ptxdist master into your BSP.

Michael

-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de