Issue 2585 - Ensure /etc/ssh/ssh_known_hosts being readable

modules/base/manifests/init.pp

 class base ($zone='adblockplus.org') {
   stage {'pre': before => Stage['main']}
   stage {'post': require => Stage['main']}
 
   class {'users':
     stage => 'pre',
   }
 
   if !defined(Class['apt']) {
     class {'apt':
@@ skipping 67 matching lines @@
       $name_key = $dns ? {
         undef => $fqdn_name,
         default => $dns,
       }
 
       @sshkey {$name:
         name => $name_key,
         key => $ssh_public_key,
         type => ssh-rsa,
         host_aliases => $ip,
+        tag => 'base::explicit_host_record',
       }
     }
+  }
 
+  # Work around https://projects.puppetlabs.com/issues/4145
+  Sshkey<| |> ->
+  file {'/etc/ssh/ssh_known_hosts':
+    ensure => 'present',
+    mode => 0644,
   }
 }