GNU bug report logs - #74548
gnupg cannot use pinentry

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 74548 in the body.
You can then email your comments to 74548 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Christopher Howard <christopher <at> librehacker.com>
To: bug-guix <at> gnu.org
Subject: gnupg cannot use pinentry
Date: Tue, 26 Nov 2024 11:12:01 -0900

Something changed recently (last system reconfigure?) where the 'pass' software broke for me, apparently because gnupg is not finding pinentry, or not using it correctly for some reason.

```
christopher <at> theoden ~$ pass gatecode 
gpg: decryption failed: No secret key
christopher <at> theoden ~$ cd .password-store/
christopher <at> theoden ~/.password-store$ gpg -d gatecode.gpg 
gpg: encrypted with 3072-bit RSA key, ID F80E1B3D662D41E9, created 2021-12-14
      "Christopher Howard (pass) <christopher <at> librehacker.com>"
gpg: public key decryption failed: No pinentry
gpg: decryption failed: No secret key
```

I can work around this like so:

```
christopher <at> theoden ~/.password-store$ gpg --pinentry-mode loopback -d gatecode.gpg
<...asks for passcode on command line...>
gpg: encrypted with 3072-bit RSA key, ID F80E1B3D662D41E9, created 2021-12-14
      "Christopher Howard (pass) <christopher <at> librehacker.com>"
<...snipped for confidentiality...>
```

After this, I can then run pass for a little while, as credentials are cached or however that works. 

I might try a rollback or something and see if I can isolate this issue. Pinentry itself is available:

```
christopher <at> theoden ~$ which pinentry
/home/christopher/.guix-home/profile/bin/pinentry
```

``` guix describe
Generation 153	Nov 20 2024 09:29:24	(current)
  guix 804f8b2
    repository URL: https://git.savannah.gnu.org/git/guix.git
    branch: master
    commit: 804f8b2094f3214c5b129047c1b18a7779720496
```

Here is my system information:

```
christopher <at> theoden 
------------------- 
OS: Guix System x86_64 
Host: OptiPlex 9020 00 
Kernel: 6.11.8-gnu 
Uptime: 5 days, 1 hour, 14 mins 
Packages: 159 (guix-system) 
Shell: bash 5.1.16 
Resolution: 1920x1080 
DE: GNOME 
Theme: Adwaita [GTK2/3] 
Icons: Adwaita [GTK2/3] 
Terminal: launch-local-em 
CPU: Intel i5-4570 (4) @ 3.600GHz 
GPU: AMD ATI Radeon HD 8490 / R5 235X OEM 
GPU: Intel HD Graphics 
Memory: 3343MiB / 15907MiB 
```

-- 
📛 Christopher Howard
🚀 gemini://gem.librehacker.com
🌐 http://gem.librehacker.com

בראשית ברא אלהים את השמים ואת הארץ

Message #8 received at 74548 <at> debbugs.gnu.org (full text, mbox):

From: Rodion Goritskov <rodion.goritskov <at> gmail.com>
To: 74548 <at> debbugs.gnu.org
Subject: gnupg cannot use pinentry
Date: Fri, 29 Nov 2024 01:15:32 +0400

Hi!

How do you configure gpg agent?

I use home-gpg-agent-service-type (from the module (gnu home services
gnupg)) [1], where I use a configuration like
this (I use pinentry-qt):

(service home-gpg-agent-service-type
	 (home-gpg-agent-configuration (pinentry-program
                                        (file-append
                                         pinentry-qt
                                         "/bin/pinentry-qt"))))

[1] - https://guix.gnu.org/manual/devel/en/guix.html#GNU-Privacy-Guard

Message #11 received at 74548 <at> debbugs.gnu.org (full text, mbox):

From: Christopher Howard <christopher <at> librehacker.com>
To: Rodion Goritskov <rodion.goritskov <at> gmail.com>
Cc: 74548 <at> debbugs.gnu.org
Subject: Re: bug#74548: gnupg cannot use pinentry
Date: Fri, 29 Nov 2024 08:22:41 -0900

Rodion Goritskov <rodion.goritskov <at> gmail.com> writes:

> Hi!
>
> How do you configure gpg agent?
>
> I use home-gpg-agent-service-type (from the module (gnu home services
> gnupg)) [1], where I use a configuration like
> this (I use pinentry-qt):
>
> (service home-gpg-agent-service-type
> 	 (home-gpg-agent-configuration (pinentry-program
>                                         (file-append
>                                          pinentry-qt
>                                          "/bin/pinentry-qt"))))
>
> [1] - https://guix.gnu.org/manual/devel/en/guix.html#GNU-Privacy-Guard
>

Hi, thanks for the response. As far as I can tell, I don't have any pinentry configuration stuff explicity specified with in my guix home config or in my system config. I think, during the last few years before this suddenly broke, that pinentry-gnome3 would pop up whenever I first tried to access the "pass" utility.

I'll try adding that service, with pinentry-gnome3 or maybe pinentry-emacs.

-- 
Christopher Howard

Message #16 received at 74548-done <at> debbugs.gnu.org (full text, mbox):

From: Christopher Howard <christopher <at> librehacker.com>
To: Rodion Goritskov <rodion.goritskov <at> gmail.com>
Cc: 74548-done <at> debbugs.gnu.org
Subject: Re: bug#74548: gnupg cannot use pinentry
Date: Fri, 29 Nov 2024 09:01:44 -0900

After adding the home service for gnupg as recommended (but with -gnome3) everything seems to be working great. Thanks!

-- 
Christopher Howard

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.