me
/
guix
Archived
1
0
Fork 0
Code

home: Set 700 permissions on .gnupg with home-gpg-agent-service 

* gnu/home/services/gnupg.scm (gpg-agent-activation): New variable.
(home-gpg-agent-service-type) [extensions]: Extend
home-activation-service-type.

Change-Id: If3365c6cade2b03ee53a466ce1d63a5cdf654d6c
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
master
Richard Sent 2024-06-28 14:16:31 -04:00 committed by Ludovic Courtès
parent 31fe177a97
commit b631640f3b
No known key found for this signature in database
GPG Key ID: 090B11993D9AEBB5
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
gnu/home/services/gnupg.scm
View File

@ -19,6 +19,7 @@
(define-module (gnu home services gnupg)
#:use-module (guix gexp)
#:use-module (guix modules)
#:use-module ((guix records) #:select (match-record))
#:use-module (gnu services)
#:use-module (gnu services configuration)
@ -142,6 +143,17 @@ agent, with support for handling OpenSSH material."))))
. "$XDG_RUNTIME_DIR/gnupg/S.gpg-agent.ssh"))
'()))
(define gpg-agent-activation
(with-imported-modules (source-module-closure
'((gnu build activation)))
#~(begin
(use-modules (gnu build activation))
;; Make sure ~/.gnupg is #o700.
(let* ((home (getenv "HOME"))
(dot-ssh (string-append home "/.gnupg")))
(mkdir-p/perms dot-ssh (getpw (getuid)) #o700)))))
(define home-gpg-agent-service-type
(service-type
(name 'home-gpg-agent)
@ -150,6 +162,8 @@ agent, with support for handling OpenSSH material."))))
home-gpg-agent-files)
(service-extension home-shepherd-service-type
home-gpg-agent-shepherd-services)
(service-extension home-activation-service-type
(const gpg-agent-activation))
(service-extension home-environment-variables-service-type
home-gpg-agent-environment-variables)))
(default-value (home-gpg-agent-configuration))