diff --git a/confluent_osdeploy/ubuntu20.04-diskless/profiles/default/scripts/imageboot.sh b/confluent_osdeploy/ubuntu20.04-diskless/profiles/default/scripts/imageboot.sh
index 8efdef16..a690530f 100644
--- a/confluent_osdeploy/ubuntu20.04-diskless/profiles/default/scripts/imageboot.sh
+++ b/confluent_osdeploy/ubuntu20.04-diskless/profiles/default/scripts/imageboot.sh
@@ -237,6 +237,8 @@ EOF
         fi
     fi
     echo "  version: 2" >> /sysroot/etc/netplan/10-${iface}-confluentcfg.yaml
+    # netplan warns about configuration readable by others, as confignet knows
+    chmod 600 /sysroot/etc/netplan/10-${iface}-confluentcfg.yaml
 fi
 if grep installtodisk /proc/cmdline > /dev/null; then
     . /etc/confluent/functions