Skip to content

✨ feat(gpg): Add gpg-agent.conf and wire it into --git bootstrap#61

Merged
ladislas merged 1 commit into
mainfrom
ladislas/feature/gpg-agent-config
Apr 24, 2026
Merged

✨ feat(gpg): Add gpg-agent.conf and wire it into --git bootstrap#61
ladislas merged 1 commit into
mainfrom
ladislas/feature/gpg-agent-config

Conversation

@ladislas
Copy link
Copy Markdown
Owner

GPG Suite ships pinentry-mac which stores the passphrase in the macOS
Keychain, meaning you are only prompted once. Without pinentry-program
set, gpg-agent falls back to pinentry-curses (in-memory cache only)
and re-prompts after every reboot.

  • Add gnupg/gpg-agent.conf pointing at GPG Suite's pinentry-mac
  • Symlink it to ~/.gnupg/gpg-agent.conf via the --git bootstrap step
  • Validate symlink creation, conflict backup, and idempotency in
    validate_bootstrap.sh
  • Update README to clarify why gpg-suite-no-mail is required

GPG Suite ships pinentry-mac which stores the passphrase in the macOS
Keychain, meaning you are only prompted once. Without pinentry-program
set, gpg-agent falls back to pinentry-curses (in-memory cache only)
and re-prompts after every reboot.

- Add gnupg/gpg-agent.conf pointing at GPG Suite's pinentry-mac
- Symlink it to ~/.gnupg/gpg-agent.conf via the --git bootstrap step
- Validate symlink creation, conflict backup, and idempotency in
  validate_bootstrap.sh
- Update README to clarify why gpg-suite-no-mail is required
@ladislas ladislas self-assigned this Apr 24, 2026
@ladislas ladislas merged commit 9e13c21 into main Apr 24, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant