Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

unable to find the signature for the coffin #14

Open
vikasrawal opened this issue Jun 2, 2023 · 7 comments
Open

unable to find the signature for the coffin #14

vikasrawal opened this issue Jun 2, 2023 · 7 comments

Comments

@vikasrawal
Copy link

Why am I getting this error as I do pass open: unable to find the signature for the coffin

@ayushnix
Copy link
Owner

ayushnix commented Jun 2, 2023

Can you share the output of this command?

env | grep 'PASSWORD_STORE_SIGNING_KEY'

@vikasrawal
Copy link
Author

vikasrawal commented Jun 2, 2023

I have this in my cron:
@reboot pass close

The idea is that the password store should be closed whenever machine is rebooted.

This seems to cause it. I do not have a problem when I manually do pass close and pass open from the terminal. But I have a problem when I reboot. The password store is closed, and cannot be opened.

I guess passing the environment variables should fix it. Something like this:

@reboot bash -l -c "pass close"

@vikasrawal
Copy link
Author

@reboot PASSWORD_STORE_SIGNING_KEY=mykeyid pass close
or any other way of specifying the environment variables in the cron does not work.

@ayushnix
Copy link
Owner

ayushnix commented Jun 2, 2023

If you're trying to sign and close a password store without any user interaction, your passphrase should be cached in your gpg-agent. If this isn't the case, the signing operation will fail. This is a known issue.

@vikasrawal
Copy link
Author

That is right. What is the recommended strategy to close the password store on shutdown/reboot?

@ayushnix
Copy link
Owner

ayushnix commented Jun 3, 2023

If you want to close the password store on shutdown/reboot without any user interaction, you'll want to cache your GPG passphrase for an entire session. After that, you can use a systemd service to be executed before shutdown/reboot or the cron method you described to close the password store.

@vikasrawal
Copy link
Author

I think the cron method will not work as gpg passphrase is not cached @reboot. One has to create a systemd service that runs before shutdown.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants