apache / apache/maven-gpg-plugin
[MGPG-92] `--pinentry-mode error` cannot be used with gpg-agent "extra" socket
- Dominant language
- Java
- Stars
- 31
- Forks
- 27
- Avg merge
- 4h 44m
- Merged PRs (30d)
- 4
Description
**[Nick Dimiduk](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=ndimiduk)** opened **[MGPG-92](https://issues.apache.org/jira/browse/MGPG-92?redirect=false)** and commented
Over on HBA[SE-27312](https://issues.apache.org/jira/browse/SE-27312), we found an issue in our release automation, which relies on using this plugin and a GnuPG agent for performing builds inside of an isolated environment. With GPG version >= 2.1, the plugin will make use of `--pinentry-mode error`. This feature appears to not be available using the "extra" gpg-agent socket. We had to "upgrade" to using the "standard" socket, which probably exposes more gpg features to the isolated environment than we would like.
---
**Issue Links:**
- [HBASE-27312](https://issues.apache.org/jira/browse/HBASE-27312) Update create-release to work with maven-gpg-plugin-3.0.1 and gnupg >= 2.1.x
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the plugin's GnuPG invocation and investigate how `--pinentry-mode error` is handled when using the gpg-agent "extra" socket. Reproduce the reported failure with GnuPG >= 2.1 and determine what behavior should allow isolated release builds to use the extra socket without exposing the standard socket.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100