Enhance security by ensuring unique SSH host keys for VMs and protecting registry credentials. Update documentation to reflect changes in SSH key management and improve state file permissions.

2026-09-04 21:31:54 +00:00
parent 1022f24c34
commit a8dbc704e9
7 changed files with 147 additions and 16 deletions
@@ -88,3 +88,12 @@ class StateStoreTests(unittest.TestCase):
        self.store.initialize()

        self.assertEqual(stat.S_IMODE(self.settings.state_path.stat().st_mode), 0o600)
+
+    def test_load_protects_registry_credentials_without_initialization(self) -> None:
+        self.base.mkdir(parents=True)
+        self.settings.state_path.write_text('{"vms": {}}', encoding="utf-8")
+        self.settings.state_path.chmod(0o644)
+
+        self.store.load()
+
+        self.assertEqual(stat.S_IMODE(self.settings.state_path.stat().st_mode), 0o600)