I am trying to import a GPG key on a Gitlab CI system with an ubuntu:bionic Docker image. To do this securely, I have to store the key in a so called secret variable (which then simply becomes an environment variable at runtime).
So I tried to export the key in a non-binary format like this:
gpg2 --armor --export-secret-keys "my name <my email>" > my-gpg-key.asc
my-gpg-key.asc looked like this then:
-----BEGIN PGP PRIVATE KEY BLOCK-----
long multi line ascii string
-----END PGP PRIVATE KEY BLOCK-----
Then I copied the file contents and defined a secret variable from it.
The variable is called LAUNCHPAD_GPG_PRIVATE_KEY
Here is what I tried:
apt-get -qq update --yes
apt-get -qq install --yes gnupg2 > /dev/null
export GPG_TTY=$(tty) # compensate for ioctl error
gpg2 --list-keys
gpg2 -v --import <(echo "$LAUNCHPAD_GPG_PRIVATE_KEY")
gpg2 --list-keys
This causes:
gpg: key 17B1EA9E090F697D/17B1EA9E090F697D: error sending to agent: No such file or directory
gpg: error building skey array: No such file or directory
I also tried to export and import the key with gpg instead of gpg2: Same result...
I also tried running
gpg-agent --daemon
and
gpg-agent --daemon --allow-loopback-pinentry
before the import... but still: Same error.
Any ideas how this can be done properly?
I managed import it without any errors by adding the batch flag.
Don't ask me why this fixes it. It took me hours to figure this out...