From fb3be783fc4aeb8636a4d470cebc5071d6a9e63f Mon Sep 17 00:00:00 2001 From: David JULIEN Date: Sun, 14 Feb 2021 12:39:06 +0100 Subject: [PATCH] feat: unlock GPG at login --- .config/gnupg/gpg-agent.conf | 2 ++ .config/paru/pkglist.txt | 1 + .config/root/etc_pamd_system-local-login | 9 +++++++++ .pam_environment | 2 ++ 4 files changed, 14 insertions(+) create mode 100644 .config/gnupg/gpg-agent.conf create mode 100644 .config/root/etc_pamd_system-local-login create mode 100644 .pam_environment diff --git a/.config/gnupg/gpg-agent.conf b/.config/gnupg/gpg-agent.conf new file mode 100644 index 0000000..2d46bba --- /dev/null +++ b/.config/gnupg/gpg-agent.conf @@ -0,0 +1,2 @@ +allow-preset-passphrase +max-cache-ttl 86400 diff --git a/.config/paru/pkglist.txt b/.config/paru/pkglist.txt index 78e8065..a083aa8 100644 --- a/.config/paru/pkglist.txt +++ b/.config/paru/pkglist.txt @@ -52,6 +52,7 @@ neovim notmuch pacman pacman-contrib +pam-gnupg paru pass patch diff --git a/.config/root/etc_pamd_system-local-login b/.config/root/etc_pamd_system-local-login new file mode 100644 index 0000000..ca33b9c --- /dev/null +++ b/.config/root/etc_pamd_system-local-login @@ -0,0 +1,9 @@ +#%PAM-1.0 + +auth include system-login +account include system-login +password include system-login +session include system-login + +auth optional pam_gnupg.so store-only +session optional pam_gnupg.so diff --git a/.pam_environment b/.pam_environment new file mode 100644 index 0000000..4888c58 --- /dev/null +++ b/.pam_environment @@ -0,0 +1,2 @@ +GNUPGHOME DEFAULT=@{HOME}/.config/gnupg +XDG_CONFIG_HOME DEFAULT=@{HOME}/.config