gnupg on read-only filesystem

Daniel Kahn Gillmor dkg at fifthhorseman.net
Wed Oct 11 16:42:38 CEST 2017


On Wed 2017-10-11 08:53:59 +0200, Fourhundred Thecat wrote:
>> On 2017-10-10 15:48, Daniel Kahn Gillmor wrote:
>>
>>  You could try the following:
>> 
>>     export GNUPGHOME=$(mktemp -d)
>>     gpg -d file.gpg
>>     rm -rf "$GNUPGHOME"
>
> thank you, that works.
>
> But it still starts the gpg-agent.
>
> How can I use gpg without the agent ?

Modern GnuPG delegates passphrase caching and secret key management to
the gpg-agent co-process.

The gpg-agent process should disappear as soon as you remove the
ephemeral home directory.

Why do you care whether gpg is one process or two processes?

    --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 832 bytes
Desc: not available
URL: </pipermail/gnupg-users/attachments/20171011/55e525a4/attachment.sig>


More information about the Gnupg-users mailing list