[pkg-gnupg-maint] Bug#830658: gpg-agent: cannot talk to libsecret when started from systemd

brian m. carlson sandals at crustytoothpaste.net
Sat Jul 9 22:58:43 UTC 2016

Package: gnupg-agent
Version: 2.1.13-5
Severity: normal

The recommended way to use gpg-agent, according to README.Debian, is to
use systemd to start it automatically in the session.  However, when
doing that, the agent does not inherit $DISPLAY.  This prevents dbus,
and hence the libsecret integration in pinentry-gnome3, from working.
Since my passphrases are stored in my desktop's keyring integration, I
can't use my SSH keys:

genre ok % ssh -oGSSAPIAuthentication=no castro
sign_and_send_pubkey: signing failed: agent refused operation
sign_and_send_pubkey: signing failed: agent refused operation
Permission denied (publickey,gssapi-keyex,gssapi-with-mic).

A dump of the environment from such a gpg-agent process follows:


As you'll notice, it's lacking the most rudimentary X environment

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.7.0-rc4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gnupg-agent depends on:
ii  libassuan0                  2.4.2-3
ii  libc6                       2.23-1
ii  libgcrypt20                 1.7.1-2
ii  libgpg-error0               1.23-1
ii  libnpth0                    1.2-3
ii  libreadline6                6.3-8+b4
ii  pinentry-gnome3 [pinentry]  0.9.7-5

Versions of packages gnupg-agent recommends:
ii  gnupg  2.1.13-5

gnupg-agent suggests no packages.

-- no debconf information

brian m. carlson / brian with sandals: Houston, Texas, US
+1 832 623 2791 | https://www.crustytoothpaste.net/~bmc | My opinion only
OpenPGP: https://keybase.io/bk2204
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20160709/da4aeb23/attachment.sig>

More information about the pkg-gnupg-maint mailing list