split-gpg, can't use keys from gpg VM

20 views
Skip to first unread message

Guerlan

unread,
Mar 9, 2020, 4:30:53 PM3/9/20
to qubes-users
I can't use the keys from the same VM as the gpg VM. I know ideally I'd have a separate VM just for signing but due to my constrained RAM and due to the fact that I use a Yubikey, I'm using the 'social' VM (the one where I use social media only) to sign. The problem is that I also need to use the social VM sometimes to access things. But I can't select 'social' as destination when 'social' is also target in the qubes-gpg-split dialog box.

Also, which VM should I use for signing? I thougth of sys-usb but it does not have internet access for me to install qubes-gpg-split and I don't want to mess with its configurations just for that.

Is there any risks in what I'm doing?

unman

unread,
Mar 10, 2020, 11:52:20 AM3/10/20
to qubes-users
On Mon, Mar 09, 2020 at 01:30:53PM -0700, Guerlan wrote:
> I can't use the keys from the same VM as the gpg VM. I know ideally I'd
> have a separate VM just for signing but due to my constrained RAM and due
> to the fact that I use a Yubikey, I'm using the 'social' VM (the one where
> I use social media only) to sign. The problem is that I also need to use
> the social VM sometimes to access things. But I can't select 'social' as
> destination when 'social' is also target in the qubes-gpg-split dialog box.
>
Why do you want to do this?
Since you're using the same qube, just use gpg.

> Also, which VM should I use for signing? I thougth of sys-usb but it does
> not have internet access for me to install qubes-gpg-split and I don't want
> to mess with its configurations just for that.

You install gpg-split in the template - no need for net access in the
qube.

Reply all
Reply to author
Forward
0 new messages