From 2e38c61ca2c0347a85ba44b25de36fe9391ded52 Mon Sep 17 00:00:00 2001 From: missytake Date: Wed, 4 Mar 2026 16:50:39 +0100 Subject: [PATCH] opendkim: chown opendkim: private key --- .github/workflows/test-and-deploy-ipv4only.yaml | 1 - .github/workflows/test-and-deploy.yaml | 1 - cmdeploy/src/cmdeploy/opendkim/deployer.py | 7 +++++++ 3 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.github/workflows/test-and-deploy-ipv4only.yaml b/.github/workflows/test-and-deploy-ipv4only.yaml index 158bab98..990963ec 100644 --- a/.github/workflows/test-and-deploy-ipv4only.yaml +++ b/.github/workflows/test-and-deploy-ipv4only.yaml @@ -89,7 +89,6 @@ jobs: - name: set DNS entries run: | - ssh root@staging-ipv4.testrun.org chown opendkim:opendkim -R /etc/dkimkeys ssh root@staging-ipv4.testrun.org "cd relay && scripts/cmdeploy dns --zonefile staging-generated.zone --ssh-host localhost" ssh root@staging-ipv4.testrun.org cat relay/staging-generated.zone >> .github/workflows/staging-ipv4.testrun.org-default.zone cat .github/workflows/staging-ipv4.testrun.org-default.zone diff --git a/.github/workflows/test-and-deploy.yaml b/.github/workflows/test-and-deploy.yaml index d38a8869..2f744cb8 100644 --- a/.github/workflows/test-and-deploy.yaml +++ b/.github/workflows/test-and-deploy.yaml @@ -82,7 +82,6 @@ jobs: - name: set DNS entries run: | - ssh -o StrictHostKeyChecking=accept-new root@staging2.testrun.org chown opendkim:opendkim -R /etc/dkimkeys cmdeploy dns --zonefile staging-generated.zone --verbose cat staging-generated.zone >> .github/workflows/staging.testrun.org-default.zone cat .github/workflows/staging.testrun.org-default.zone diff --git a/cmdeploy/src/cmdeploy/opendkim/deployer.py b/cmdeploy/src/cmdeploy/opendkim/deployer.py index 54b95024..44d4a3ed 100644 --- a/cmdeploy/src/cmdeploy/opendkim/deployer.py +++ b/cmdeploy/src/cmdeploy/opendkim/deployer.py @@ -103,6 +103,13 @@ class OpendkimDeployer(Deployer): ) need_restart |= service_file.changed + files.file( + name="chown opendkim: /etc/dkimkeys/opendkim.private", + path="/etc/dkimkeys/opendkim.private", + user="opendkim", + group="opendkim", + ) + self.need_restart = need_restart def activate(self):