Commit 307abf0
committed
fix(gpg): remove --pinentry-mode loopback from key import
loopback mode corrupts the at-rest storage of passphrase-less cv25519
secret keys under GnuPG 2.4.x: the keygrip is listed as present but
unusable for pkdecrypt, so pillar decryption fails at render time with
"Bad secret key" while the master still starts cleanly. loopback does
not bypass gpg-agent and is pointless for passphrase-less keys;
--batch --no-tty already covers the non-interactive CI case.1 parent f921905 commit 307abf0
1 file changed
Lines changed: 1 addition & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
556 | 556 | | |
557 | 557 | | |
558 | 558 | | |
559 | | - | |
560 | | - | |
561 | | - | |
| 559 | + | |
562 | 560 | | |
563 | 561 | | |
564 | 562 | | |
| |||
0 commit comments