[BUG] apt: Repos keys must be readable by non-root user

[cpuguy83]

Expected Behavior

Specifying a repo key should not require explicitly setting permissions on the key file(s).

Actual Behavior

Keys must have the correct permissions already set (or defined in the source type).

Steps To Reproduce

extra_repos:
  - keys:
      msft.asc:
        http:
          url: https://packages.microsoft.com/keys/microsoft.asc

Building a spec with the above extra_repos on any apt-based distro will error with an unrelated error due to apt not being able to read the key.

Are you willing to submit PRs to contribute to this bug fix?

• Yes, I am willing to implement it.

[adamperlin]

What version of Dalec was this in? This seems to be working for me right now on latest, we should have logic for filling in permissions for HTTP sources that are nested under gpg keys:

dalec/load.go

Line 482 in a9a1f25

if keySource.HTTP != nil {

[adamperlin]

To further clarify here, the issue was when extra_repos was nested under target-specific dependencies, since the targets section of the spec wasn't getting defaults fully filled before #481