feat: netplan security and apply

Author: samrose

ansible/tasks/fix_ipv6_ndisc.yml

@@ -31,3 +31,7 @@
   systemd:
     name: systemd-networkd-check-and-fix.timer
     enabled: true
+
+- name: Apply netplan configuration
+  shell: sudo netplan apply
+  when: debpkg_mode or nixpkg_mode

ansible/vars.yml

@@ -9,9 +9,9 @@ postgres_major:
 
 # Full version strings for each major version
 postgres_release:
-  postgresorioledb-17: "17.0.1.092-orioledb-2404-5"
-  postgres17: "17.4.1.042-2404-5"
-  postgres15: "15.8.1.099-2404-5"
+  postgresorioledb-17: "17.0.1.092-orioledb-2404-6"
+  postgres17: "17.4.1.042-2404-6"
+  postgres15: "15.8.1.099-2404-6"
 
 # Non Postgres Extensions
 pgbouncer_release: "1.19.0"

ebssurrogate/scripts/chroot-bootstrap-nix.sh

@@ -170,6 +170,8 @@ network:
       dhcp4-overrides:
         send-hostname: false
 EOF
+	# Set proper permissions for netplan security
+	chmod 600 /etc/netplan/01-hostname.yaml
 }
 
 # Set options for the default interface
@@ -181,6 +183,8 @@ network:
     eth0:
       dhcp4: true
 EOF
+	# Set proper permissions for netplan security
+	chmod 600 /etc/netplan/eth0.yaml
 }
 
 function disable_sshd_passwd_auth {