wrong gpg-agent version running?

Teemu Likonen tlikonen at iki.fi
Thu Jul 11 16:36:03 CEST 2019


Matthias Herrmann [2019-07-11T16:16:29+02] wrote:

> I edited /usr/lib/systemd/user/gpg-agent.service directly and changed
> the ExecStart and ExecReload paths.

It is not a good idea to edit that file directly; it's not a
configuration file. In systemd you should make your own changes in
/etc/systemd/. I quote systemd.unit man page:

    Example 2. Overriding vendor settings

    There are two methods of overriding vendor settings in unit files:
    copying the unit file from /lib/systemd/system to
    /etc/systemd/system and modifying the chosen settings.
    Alternatively, one can create a directory named unit.d/ within
    /etc/systemd/system and place a drop-in file name.conf there that
    only changes the specific settings one is interested in. Note that
    multiple such drop-in files are read if present, processed in
    lexicographic order of their filename.

    The advantage of the first method is that one easily overrides the
    complete unit, the vendor unit is not parsed at all anymore. It has
    the disadvantage that improvements to the unit file by the vendor
    are not automatically incorporated on updates.

    The advantage of the second method is that one only overrides the
    settings one specifically wants, where updates to the unit by the
    vendor automatically apply. This has the disadvantage that some
    future updates by the vendor might be incompatible with the local
    changes.

So in your case the first method (as descibed in the above quote) is to
copy file

    /usr/lib/systemd/user/gpg-agent.service

to

    /etc/systemd/user/gpg-agent.service

and then edit the latter. The former is not used anymore because the
/etc version overrides it completely. The second method is to override
only parts of it by creating a "drop-in"

    /etc/systemd/user/gpg-agent.service.d/my.conf

and define just the [Service] section and the settings one want's to
override:

    [Service]
    ExecStart=
    ExecStart=/usr/local/bin/gpg-agent --supervised
    ExecReload=
    ExecReload=/usr/local/bin/gpgconf --reload gpg-agent

The empty ExecStart= and ExecReload= reset all possible previous
settings.


-- 
///  OpenPGP key: 4E1055DC84E9DFF613D78557719D69D324539450
//  https://keys.openpgp.org/search?q=tlikonen@iki.fi
/  https://keybase.io/tlikonen  https://github.com/tlikonen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 487 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20190711/904d52b5/attachment.sig>


More information about the Gnupg-users mailing list