Subject: home-openssh-service-type creates .ssh/config with wrong permissions

From: Elias Kueny <[email-masked]>
Date: Sun, 14 Aug 2022 18:04:14 +0000

Hello,

I'm trying to use home-openssh-service-type. I'm testing the configuration by running
  guix home container home-configuration.scm

The files are created with too open permissions, so ssh refuses to run:

  $ ssh xxx
  Bad owner or permissions on ~/.ssh/config

  $ ls -l .ssh
  lrwxrwxrwx 1 user users 59 Aug 14 18:17 authorized_keys -> /gnu/store/y8g2d9kmlrhfna23r26cfgp5mr1sxl72-authorized_keys
  lrwxrwxrwx 1 user users  52 Aug 14 18:17 config -> /gnu/store/dnnzwrz4hp1z6wnr76a6j57v95vyrbf3-ssh.conf

And the file system being read-only, a manual chmod is not possible.

  $ guix describe
  guix 9e46320
    repository URL: https://git.savannah.gnu.org/git/guix.git
    branch: master
    commit: 9e4632081ff31bf0d1715edd66f514614c6dc4bb

Best,
Elias