Describe the Bug
When using a centralized location for keys, e.g. /etc/ssh/authorized_keys, that is owned by root, a trusted path error occurs. However, files are created successfully when --debug is used.
Expected Behavior
Trusted path should succeed without running puppet in debug mode.
Steps to Reproduce
Steps to reproduce the behavior:
- Add a key with target of, e.g., /etc/ssh/authorized_keys/$user and use "drop_privileges => false".
- Run puppet agent -t
Note trusted path error and the key file is not created.
- Run puppet agent -t --debug
No error and keyfile is created.
Environment
- Version 7.34.0
- Platform: Oracle Linux 8
Additional Context
This is somewhat related to #92 . In secure environments, keys are usually managed in central location and key files are owned by root(or other admin user) or not writable by the user.