Set proper permissions to directories holding authorized_keys (#10)

* Set proper permissions to directories holding authorized_keys

* More permission fixes and install sftp server

Author: akariv

cca-operator/Dockerfile

@@ -9,7 +9,7 @@ RUN while ! ( apk update && apk add --no-cache bash python grep jq python3 libcu
 RUN curl https://raw.githubusercontent.com/kubernetes/helm/master/scripts/get > get_helm.sh &&\
     chmod 700 get_helm.sh && ./get_helm.sh --version v2.11.0 && helm version --client && rm ./get_helm.sh
 
-RUN apk update && apk add openssh-server &&\
+RUN apk update && apk add openssh-server openssh-sftp-server &&\
     ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N "" &&\
     ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key -N "" &&\
     ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key -N "" &&\

cca-operator/add-server-authorized-key.sh

@@ -3,7 +3,7 @@
 [ "${1}" == "--help" ] && echo cat ~/.ssh/id_rsa.pub '|' ./add-server-authorized-key.sh && exit 0
 
 mkdir -p /root/.ssh &&\
-mkdir -p /etc/ckan-cloud/cca-operator &&\
+mkdir -p /etc/ckan-cloud/cca-operator && chmod 700 /etc/ckan-cloud && chmod 700 /etc/ckan-cloud/cca-operator && \
 cat >> /etc/ckan-cloud/cca-operator/sshd_authorized_keys
 [ "$?" != "0" ] && exit 1
 

cca-operator/server.sh

@@ -9,7 +9,8 @@ if ! [ -e /etc/ckan-cloud/cca-operator/sshd_authorized_keys ]; then
 fi
 
 mkdir -p /root/.ssh &&\
-ln -s /etc/ckan-cloud/cca-operator/sshd_authorized_keys /root/.ssh/authorized_keys &&\
+cp /etc/ckan-cloud/cca-operator/sshd_authorized_keys /root/.ssh/authorized_keys &&\
+chmod 600 /root/.ssh/authorized_keys &&\
 echo '#!/usr/bin/env bash
 export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 cd /cca-operator