Split pinentry flavors and enable udisks2 on install media again#71095
Split pinentry flavors and enable udisks2 on install media again#71095worldofpeace merged 6 commits intoNixOS:masterfrom
Conversation
d2ab150 to
2d6cbc3
Compare
jtojnar
left a comment
There was a problem hiding this comment.
Could you also address the change requests from the original PR?
|
Adressed the comments from @jtojnar and @infinisil on the original PR, and @jtojnar's latest comments. |
2d6cbc3 to
9d5a580
Compare
9d5a580 to
9fc3ffb
Compare
worldofpeace
left a comment
There was a problem hiding this comment.
Can we change pinentryFlavour and defaultPinentryFlavour to use the spelling flavor?
It's chiefly British.
40486a7 to
5a7b19e
Compare
5a7b19e to
a812993
Compare
a812993 to
215bb50
Compare
|
Adressed a lot of suggestions, thanks so far! |
215bb50 to
541e4ef
Compare
Co-authored-by: Florian Klink <[email protected]>
This solves the dependency cycle in gcr alternatively so there won't be two gnupg store paths in a standard NixOS system which has udisks2 enabled by default. NixOS users are expected to use the gpg-agent user service to pull in the appropriate pinentry flavour or install it on their systemPackages and set it in their local gnupg agent config instead. Co-authored-by: Florian Klink <[email protected]>
This reverts commit 571fb74. The dependency on gtk2 was removed. Co-authored-by: Florian Klink <[email protected]>
c9c6431 to
e397b94
Compare
worldofpeace
left a comment
There was a problem hiding this comment.
Tested on my local system, migrating from home-manager's gpg-agent to nixos gpg.agent without issues.
And this was using gnome3`s pinentry.
Also tested in a VM with a Gnome config.
|
Ok, reverted that on master because of the rebuilds it should go to staging (I think). Nice working on this together @flokli 🌸 |
Since we stopped shipping graphical frontend with gnupg in NixOS/nixpkgs#71095, we use service overrides to pass the frontend set in NixOS module, offering customizable front-ends without needing to rebuid gnupg. Unfortunately, when GNUPGHOME environment variable is set, gpg-agent uses a different socket directory, so the socket activation fails and gnupg starts the agent manually, without our overrides. NixOS/nixpkgs#72597 (comment) Until GNUPG's non-compliance with XDG basedir specification is fixed upstream, we will need to override the socket directory for the systemd socket activation, so that the properly overridden agent can be run. Unfortunately, with global overrides this is only possible to do when there is only one user using gpg, since the socket directory is based on a hash of the gnupg homedir. For multi-user systems solving it at user level with something like home-manager is necessary.
Motivation for this change
Follow-up of #49270, rebased to latest master and with qt4 removed.
Things done
sandboxinnix.confon non-NixOS)nix-shell -p nix-review --run "nix-review wip"./result/bin/)nix path-info -Sbefore and after)