Skip to content

Latest commit

 

History

History
33 lines (27 loc) · 1.01 KB

TIPS.md

File metadata and controls

33 lines (27 loc) · 1.01 KB
Raw

GPG Agent Forwarding

Ensure that you local agent is using the extra socket and add this to local .ssh/config. Replace XXXX with $(id -u) on remote and YYYY with $(id -u) on local device:

Host ...
    ...
    RemoteForward /run/user/XXXX/gnupg/S.gpg-agent /run/user/YYYY/gnupg/S.gpg-agent.extra

echo 'StreamLocalBindUnlink yes' | sudo tee -a /etc/ssh/sshd_config
sudo systemctl reload sshd
logout
...
gpg --import <(curl https://github.com/fjolne.gpg)

GPG Cheatsheet

  • create GPG key (with passphrase): gpg --full-generate-key
  • extract the fingerprint and remove spaces manually: gpg --list-keys
  • add fingerprint as user id to git-crypt: git-crypt add-gpg-user XYZ...ABC
  • put public key on github: gpg --armor --export fjolne
  • extract privkey for transfer (if not using gpg agent forwarding): gpg --output fjolne.privkey.gpg --armor --export-secret-key fjolne