Stat Identity file on sys con add

Fixes: #26016

Signed-off-by: Nicola Sella <[email protected]>

Author: inknos

cmd/podman/system/connection/add.go

@@ -16,6 +16,7 @@ import (
 	"go.podman.io/common/pkg/completion"
 	"go.podman.io/common/pkg/config"
 	"go.podman.io/common/pkg/ssh"
+	"go.podman.io/storage/pkg/fileutils"
 )
 
 var (
@@ -141,6 +142,14 @@ func add(cmd *cobra.Command, args []string) error {
 
 	switch uri.Scheme {
 	case "ssh":
+		if cOpts.Identity != "" {
+			if err := fileutils.Exists(cOpts.Identity); err != nil {
+				if errors.Is(err, os.ErrNotExist) {
+					return fmt.Errorf("identity file does not exist: %w", err)
+				}
+				return err
+			}
+		}
 		return ssh.Create(entities, sshMode)
 	case "unix":
 		if cmd.Flags().Changed("identity") {

test/system/272-system-connection.bats

@@ -88,6 +88,32 @@ $c2[ ]\+tcp://localhost:54321[ ]\+true[ ]\+true" \
     run_podman context rm $c1
 }
 
+# Test system connection add bad identities with ssh/unix/tcp
+@test "podman system connection --identity" {
+    run_podman system connection ls -q
+    is "$output" ""
+
+    run_podman system connection add ssh-conn --identity ~/nonexistent ssh://localhost
+    is "$output" \
+        "Error: identity file does not exist: faccessat /home/nsella/nonexistent: no such file or directory"
+    run_podman system connection add unix-conn --identity ~/identity unix://path
+    is "$output"\
+        "Error: --identity option not supported for unix scheme"
+    run_podman system connection add tcp-conn --identity ~/identity tcp://path
+    is "$output"\
+        "Error: --identity option not supported for unix scheme"
+
+    run touch ~/badfile
+    run chmod -r ~/badfile
+    run_podman system connection add bad-conn --identity ~/badfile ssh://localhost
+    is "$output" \
+        "Error: failed to validate: failed to read identity*"
+    run rm ~/badfile
+    # Ensure no connections were added
+    run_podman system connection ls -q
+    is "$output" ""
+}
+
 # Test tcp socket; requires starting a local server
 @test "podman system connection - tcp" {
     # Start server