From 1b7a0a023922037410b1606a2d49b936b654ce76 Mon Sep 17 00:00:00 2001
From: Philip Patsch <philip.patsch@tweag.io>
Date: Fri, 19 Jun 2020 15:29:56 +0200
Subject: [PATCH] deploy_nixos/unpack-keys.sh: chown the keys to root:keys
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

They were `root:root` before, so they couldn’t be read by the `keys`
group as intended.
---
 deploy_nixos/unpack-keys.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/deploy_nixos/unpack-keys.sh b/deploy_nixos/unpack-keys.sh
index 37db350..82ead0b 100644
--- a/deploy_nixos/unpack-keys.sh
+++ b/deploy_nixos/unpack-keys.sh
@@ -40,6 +40,7 @@ for keyname in $(jq -S -r 'keys[]' "$keys_file"); do
   echo "unpacking: $keyname"
   jq -r ".\"$keyname\"" < "$keys_file" > "$keys_dir/$keyname"
   chmod 0640 "$keys_dir/$keyname"
+  chown root:keys "$keys_dir/$keyname"
 done
 
 echo "unpacking done"