From a76a504cec75c3cfc7e8af01f8c5502dd9d6d50e Mon Sep 17 00:00:00 2001 From: Ahmed Abdelhalim Date: Sun, 26 Jul 2026 17:37:09 +0200 Subject: Fix apt config files unreadable by non-root users after install MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Configure apt in chroot wrote sources.list (and friends) with mode 0640 across ubuntu, proxmox, and raspberry bootstrap — apt-cache, GNOME Software, PackageKit, and update-notifier all read these as the regular desktop user, not root, so every non-root apt query failed with permission denied post-install. Standard 0644. Co-Authored-By: Claude.ai --- roles/bootstrap/tasks/install-proxmox.yml | 2 +- roles/bootstrap/tasks/install-raspberry.yml | 2 +- roles/bootstrap/tasks/install-ubuntu.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) (limited to 'roles') diff --git a/roles/bootstrap/tasks/install-proxmox.yml b/roles/bootstrap/tasks/install-proxmox.yml index f523d9f..6824b06 100644 --- a/roles/bootstrap/tasks/install-proxmox.yml +++ b/roles/bootstrap/tasks/install-proxmox.yml @@ -34,7 +34,7 @@ - name: "Configure apt in chroot" ansible.builtin.copy: dest: "{{ item.dest }}" - mode: "0640" + mode: "0644" content: "{{ item.content }}" loop: - dest: "{{ mnt_root_path }}/etc/apt/sources.list" diff --git a/roles/bootstrap/tasks/install-raspberry.yml b/roles/bootstrap/tasks/install-raspberry.yml index 179b6a8..b86480b 100644 --- a/roles/bootstrap/tasks/install-raspberry.yml +++ b/roles/bootstrap/tasks/install-raspberry.yml @@ -29,7 +29,7 @@ - name: "Configure apt in chroot" ansible.builtin.copy: dest: "{{ item.dest }}" - mode: "0640" + mode: "0644" content: "{{ item.content }}" loop: - dest: "{{ mnt_root_path }}/etc/apt/preferences.d/ignored-package" diff --git a/roles/bootstrap/tasks/install-ubuntu.yml b/roles/bootstrap/tasks/install-ubuntu.yml index 3329ff5..00815b5 100644 --- a/roles/bootstrap/tasks/install-ubuntu.yml +++ b/roles/bootstrap/tasks/install-ubuntu.yml @@ -28,7 +28,7 @@ - name: "Configure apt in chroot" ansible.builtin.copy: dest: "{{ item.dest }}" - mode: "0640" + mode: "0644" content: "{{ item.content }}" loop: - dest: "{{ mnt_root_path }}/etc/apt/preferences.d/ignored-package" -- cgit v1.2.3