Prefer sequoia-sq for the option of OpenPGP implementation #849
Conversation
| gnupg | ||
| edge-pkgs.sequoia-sq # Alt `gpg` - nixos-24.05 does not backport recent versions and the older requires to rebuild. https://github.com/NixOS/nixpkgs/pull/331099 |
There was a problem hiding this comment.
For context of replacing gpg, I need https://gitlab.com/sequoia-pgp/sequoia-chameleon-gnupg.
Latest stable is NixOS/nixpkgs#349002, but I don't need to wait the binary cache. I guess I can implement settings with older version.
There was a problem hiding this comment.
Updated commit has been merged in 95cf173
…hich internally uses gpg (#852) * Set $SSH_ASKPASS as same as $RCLONE_PASSWORD_COMMAND * Switch back to ssh-agent from gpg-agent This partially reverts GH-814 However ssh passphrase will be kept by the SSH_ASKPASS and gpg encrypted command --- * Update how to realize #714 with partially reverting #814 with #817 direction * Might be a preparation of GH-849 Since using gpg-agent, it does not remain and hard to handle SSH passphrase. Instead of that, pass command internally uses gpg. It looks enough to me.
|
https://github.com/gopasspw/gopass or https://gitlab.com/timvisee/prs might be required to specify GPG path. Because of pass in nixpkgs having many patches, overriding only gnupg is an annoy task. https://github.com/NixOS/nixpkgs/blob/babe2c97edf3750d3924c1c5eaa1fe94ac94e8d8/pkgs/tools/security/pass/default.nix#L85 |
kachick
changed the title
| # | ||
| # If you faced to decrypt error with gpg-sq, check it with `sq decrypt`. It displays error details. | ||
| # For example, `1: AEAD Encrypted Data Packet v1 is not considered secure` | ||
| # This is caused by encrypted non configured gpg for the AEAD. Disable it with showpref/setpref if you still use gpg. |
There was a problem hiding this comment.
This operation is cannot be done with gpg-sq, because of --edit-key is not yet implemented https://gitlab.com/sequoia-pgp/sequoia-chameleon-gnupg/-/issues/92
Without this, no completion changes after packages changes, it makes much confusion
|
|
||
| pass | ||
| # Alt `pass` for password-store. Candidates: gopass, prs | ||
| gopass # They will respect pass comaptibility: https://github.com/gopasspw/gopass/issues/1365#issuecomment-719655627 |
Resolves GH-830
Checklist of features which I'm using
goldwardenwithpassfor the secret/password manager #817