gpg: set pinentry-mode to loopback

this is the missing piece for getting pinentry in minibuffer in emacs,
for example in eshell, instead of a 'pop up' pinentry that completely
messes everything up.

with this in place, don't greatly extend the key cache ttls, since we
don't have to worry about our tty emacs being interrupted if we
mindlessly stumble into a gpg pinentry.

diff --git a/.gnupg/gpg-agent.conf b/.gnupg/gpg-agent.conf
index ac7ad2c..4905b0e 100644 (file)
--- a/.gnupg/gpg-agent.conf
+++ b/.gnupg/gpg-agent.conf
@@ -1,8 +1,8 @@
-default-cache-ttl 10000000
-max-cache-ttl 10000000
+# default-cache-ttl 10000000
+# max-cache-ttl 10000000
 
-default-cache-ttl-ssh 43200
-max-cache-ttl-ssh 86400
+# default-cache-ttl-ssh 43200
+# max-cache-ttl-ssh 86400
 
 # pinentry-program /home/bandali/.guix-profile/bin/pinentry-emacs
 # pinentry-program /usr/bin/pinentry-gtk-2

diff --git a/.gnupg/gpg.conf b/.gnupg/gpg.conf
new file mode 100644 (file)
index 0000000..065d80c
--- /dev/null
+++ b/.gnupg/gpg.conf
@@ -0,0 +1 @@
+pinentry-mode loopback