kamal icon indicating copy to clipboard operation
kamal copied to clipboard

SSL private key should be locked down just in case

Open frenkel opened this issue 7 months ago • 2 comments

frenkel avatar Jul 16 '25 09:07 frenkel

Apparently the tests fail in CI. I had tested this manually on a server, where it worked without problems. Any idea why it would fail? The user that owns the file is the same one as the one that execute the proxy process.

frenkel avatar Jul 16 '25 09:07 frenkel

I understand now. The uploads are done as the ssh user, but then the container is started with the directory as volume and the user in the container cannot always access them. In my testing this coincidentally was uid 1000 for both, which made it work.

I think this cannot be fixed when using the simple upload! method, as only when your ssh user is root you are allowed to change the owner uid. Any ideas on how to best solve this @djmb? If you can give some hint at what you prefer, I can update this PR with it.

frenkel avatar Jul 16 '25 11:07 frenkel