commit 78548a53623fe60740b14507f57240e23876b678
author Scott Baker <smbaker@gmail.com> Tue May 12 18:54:36 2015 -0700
committer Scott Baker <smbaker@gmail.com> Tue May 12 18:54:36 2015 -0700
tree b8cc7bba2fd0ec0408348c3ad1028bef55368781
parent 93a58b3247813f67d95536af6336c821c92f41b7

private key must not be world or group readable

xos/openstack_observer/ansible.py

diff --git a/xos/openstack_observer/ansible.py b/xos/openstack_observer/ansible.py
index 5f7e77d..5b6bd1d 100644
--- a/xos/openstack_observer/ansible.py
+++ b/xos/openstack_observer/ansible.py
@@ -162,6 +162,9 @@
     f.write("%s ansible_ssh_private_key_file=%s\n" % (hostname, private_key_pathname))
     f.close()
 
+    # SSH will complain if private key is world or group readable
+    os.chmod(private_key_pathname, 0600)
+
     print "ANSIBLE_CONFIG=%s" % config_pathname
     print "ANSIBLE_HOSTS=%s" % hosts_pathname