QUBES_GPG_AUTOACCEPT not being honored in 4.0

cubit

unread,

Mar 4, 2019, 8:30:46 AM3/4/19

to Qubes Users

Following a move from Qubes 3.2 to 4.0.1 I am struggling to get the split key gpg to honor QUBES_GPG_AUTOACCEPT any more

The rest of the split key functionality works as expected but it's very frustrating the have QUBES_GPG_AUTOACCEPT default to 300 despite having been manually changed to 86400

Relevant config riles. I hope I did not forget to include any important.

.bash_profile in vault

------------------------

user@vault:~$ more .bash_profile

export QUBES_GPG_AUTOACCEPT=86400

gpg-split-domain in work

------------------------

user@work:~$ more /rw/config/gpg-split-domain

vault

qubes.Gpg in dom0

------------------------

[user@dom0 ~]$ more /etc/qubes-rpc/policy/qubes.Gpg

work vault allow

$anyvm $anyvm ask

Cubit

unman

unread,

Mar 4, 2019, 10:10:22 AM3/4/19

to Qubes Users

What shell are you using in gpg?
Try putting the export line in .profile and restart gpg. Any different?

cubit

unread,

Mar 4, 2019, 3:07:05 PM3/4/19

to unman, Qubes Users

Mar 4, 2019, 3:10 PM by un...@thirdeyesecurity.org:

What shell are you using in gpg?
Try putting the export line in .profile and restart gpg. Any different?

That did the job. I had it originally listed as I mentioned in .bash_profile which was sourced by .bashrc which was sourced by .profile but I guess something went wrong along the chain.

unman

unread,

Mar 4, 2019, 7:21:51 PM3/4/19

to Qubes Users

No, it was an (undocumented) change as a result of a change in the
shell used in init. I've updated the docs to make this clear.

Reply all

Reply to author

Forward