commit 586ff5440ccf0c2aba1065a4527fa1cd1fca4a90
author Scott Baker <smbaker@gmail.com> Tue May 12 18:54:36 2015 -0700
committer Scott Baker <smbaker@gmail.com> Tue May 12 18:54:36 2015 -0700
tree b8cc7bba2fd0ec0408348c3ad1028bef55368781
parent 2d6d74dbe7245bb5ba550b91bb323e71ff070c51

private key must not be world or group readable

xos/openstack_observer/ansible.py

diff --git a/xos/openstack_observer/ansible.py b/xos/openstack_observer/ansible.py
index 5f7e77d..5b6bd1d 100644
--- a/xos/openstack_observer/ansible.py
+++ b/xos/openstack_observer/ansible.py
@@ -162,6 +162,9 @@
     f.write("%s ansible_ssh_private_key_file=%s\n" % (hostname, private_key_pathname))
     f.close()
 
+    # SSH will complain if private key is world or group readable
+    os.chmod(private_key_pathname, 0600)
+
     print "ANSIBLE_CONFIG=%s" % config_pathname
     print "ANSIBLE_HOSTS=%s" % hosts_pathname