apache / apache/maven-gpg-plugin

[MGPG-92] `--pinentry-mode error` cannot be used with gpg-agent "extra" socket

Open
#229 5 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Java
Stars
31
Forks
27
Avg merge
4h 44m
Merged PRs (30d)
4

Description

**[Nick Dimiduk](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=ndimiduk)** opened **[MGPG-92](https://issues.apache.org/jira/browse/MGPG-92?redirect=false)** and commented

Over on HBA[SE-27312](https://issues.apache.org/jira/browse/SE-27312), we found an issue in our release automation, which relies on using this plugin and a GnuPG agent for performing builds inside of an isolated environment. With GPG version >= 2.1, the plugin will make use of `--pinentry-mode error`. This feature appears to not be available using the "extra" gpg-agent socket. We had to "upgrade" to using the "standard" socket, which probably exposes more gpg features to the isolated environment than we would like.

---

**Issue Links:**
- [HBASE-27312](https://issues.apache.org/jira/browse/HBASE-27312) Update create-release to work with maven-gpg-plugin-3.0.1 and gnupg >= 2.1.x

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the plugin's GnuPG invocation and investigate how `--pinentry-mode error` is handled when using the gpg-agent "extra" socket. Reproduce the reported failure with GnuPG >= 2.1 and determine what behavior should allow isolated release builds to use the extra socket without exposing the standard socket.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.