Conversation
Vlastimil Babka 🇨🇿🇪🇺🇺🇦
vbabka@mastodon.social
Lazyweb time (I actually tried searching but found nothing). gpg-agent forwarding stopped working for me. Following https://wiki.gnupg.org/AgentForwarding the S.gpg-agent.extra socket is not being created anymore on the local system. Even if I put the extra-socket line explicitly back to gpg-agent.conf. Any ideas? Cc @jarkko
1
0
0
Jarkko Sakkinen
jarkko
@vbabka hmm...
Check first taht you have both of these installed:
1. pcscd (system service check also systemctl)
2. scdaemon (user service)
I've never dared to change my bootstrap script. It's shitty and does stuff that is not probably necessary but seems to always do the trick:
GPG_AGENT_SOCKETS=(gpg-agent-ssh.socket
gpg-agent-browser.socket
gpg-agent-extra.socket
gpg-agent-ssh.socket
gpg-agent.socket)
systemctl --user disable --now "${GPG_AGENT_SOCKETS[@]}"
gpgconf --kill gpg-agent
sudo systemctl disable --now pcscd.socket
systemctl --user enable --now gpg-agent.socket gpg-agent-ssh.socket
sudo systemctl enable --now pcscd.socket
Check first taht you have both of these installed:
1. pcscd (system service check also systemctl)
2. scdaemon (user service)
I've never dared to change my bootstrap script. It's shitty and does stuff that is not probably necessary but seems to always do the trick:
GPG_AGENT_SOCKETS=(gpg-agent-ssh.socket
gpg-agent-browser.socket
gpg-agent-extra.socket
gpg-agent-ssh.socket
gpg-agent.socket)
systemctl --user disable --now "${GPG_AGENT_SOCKETS[@]}"
gpgconf --kill gpg-agent
sudo systemctl disable --now pcscd.socket
systemctl --user enable --now gpg-agent.socket gpg-agent-ssh.socket
sudo systemctl enable --now pcscd.socket
1
0
1
@vbabka Off-topic (a bit): in some cases I need to explicitly delete .gnupg/private-keys-v1.d when I switch Yubikey. Otherwise pinentry keeps asking for the old one.
Right and one more thing: https://codeberg.org/jarkko/skeleton/src/branch/main/.gnupg
Maybe it is better to check and compare (e.g., I have separate config for scdaemon).
Right and one more thing: https://codeberg.org/jarkko/skeleton/src/branch/main/.gnupg
Maybe it is better to check and compare (e.g., I have separate config for scdaemon).
1
0
1
Vlastimil Babka 🇨🇿🇪🇺🇺🇦
vbabka@mastodon.social@jarkko yeah I've had your script already and I don't have problems with using the yubikey as gpg card, it's just the forwarding got suddenly broken because the -extra.socket is mysteriously not being created anymore :(
1
0
1
@vbabka duh :-/
and i'd presume you've tried the off-on-dance:
systemctl --user disable --now gpg-agent-extra.socket
systemctl --user enable --now gpg-agent-extra.socket
(--now's are important here obviously for stop/start)
and i'd presume you've tried the off-on-dance:
systemctl --user disable --now gpg-agent-extra.socket
systemctl --user enable --now gpg-agent-extra.socket
(--now's are important here obviously for stop/start)
0
0
0