Secure gpg entrypoint

- enable gpg protection
- remove set -x to prevent logging password
- add checks to prevent re-initing pass and gpg
- present passphrase unlock via docker env variable
  - Note: gpg-agent will not expire gpg-present-passphrases
- fix deb CMD to ENTRYPOINT
This commit is contained in:
Echo Nar 2025-12-21 14:31:18 -06:00
parent 044ea2b034
commit c2e8b88188
No known key found for this signature in database
GPG key ID: 06D33D3795EB43AA
7 changed files with 75 additions and 39 deletions

View file

@ -1,7 +1,6 @@
%no-protection
%echo Generating a basic OpenPGP key
Key-Type: RSA
Key-Length: 2048
Key-Length: 4096
Name-Real: pass-key
Expire-Date: 0
%commit