From 5ac3880764c76dc450a9bd635b8f8c91197ac27e Mon Sep 17 00:00:00 2001
From: Markus Hilger <markus.hilger@megware.com>
Date: Mon, 7 Sep 2026 05:54:16 +0200
Subject: [PATCH] Actually run chkstat on the SUSE image

A trailing comma made args.cmd a tuple holding the argv list, so
fancy_chroot called startswith on a list and the child died before exec.
permissions.local was written but never applied, leaving ssh-keysign
0755 and hostbased auth inoperative on SUSE diskless images.
---
 imgutil/imgutil | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/imgutil/imgutil b/imgutil/imgutil
index cfa5492d..738ebc27 100644
--- a/imgutil/imgutil
+++ b/imgutil/imgutil
@@ -667,7 +667,7 @@ class SuseHandler(OsHandler):
         args.cmd = ['groupadd', 'ssh_keys']
         run_constrainedx(fancy_chroot, (args,
                                         self.targpath))
-        args.cmd = ['chkstat', '--system', '--set'],
+        args.cmd = ['chkstat', '--system', '--set']
         run_constrainedx(fancy_chroot, (args,
                                         self.targpath))