diff options
| author | Danilo M. <danix@danix.xyz> | 2026-10-19 20:53:05 +0200 |
|---|---|---|
| committer | Danilo M. <danix@danix.xyz> | 2026-10-19 20:53:05 +0200 |
| commit | e6ac42e158ed5ceee2c58eaf2f23a0ad3bb82f41 (patch) | |
| tree | af12ae932e9cbbf774f5a03cceeba0dc20c4b1c0 /gpg-agent.conf | |
| parent | 30c6bc22a445105e7e7f37fb00ca054de1ecf3ad (diff) | |
| download | slackrepo_setup-e6ac42e158ed5ceee2c58eaf2f23a0ad3bb82f41.tar.gz slackrepo_setup-e6ac42e158ed5ceee2c58eaf2f23a0ad3bb82f41.zip | |
Track the slackrepo config; add sb-publish and publish gates
slackrepo_SBo-danix.conf is now kept here. Site values (rsync target,
Gotify URL and key) moved to the root-only SBo-danix.local it sources;
make-local.py migrates them out of an old inline config. The rsync push
moved into sb-publish; rsync_push_hook calls it and holds back when
SBB_PUBLISH=n, so sb-builder can build without publishing and publish
later. --preview does not set OPT_DRY_RUN, so the hooks now also check
OPT_PREVIEW: previews no longer notify Gotify or run manage-packages.sh
for real. gpg-agent.conf adds allow-preset-passphrase so sb-builder can
unlock the signing key for jobs without a tty.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Diffstat (limited to 'gpg-agent.conf')
| -rw-r--r-- | gpg-agent.conf | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/gpg-agent.conf b/gpg-agent.conf new file mode 100644 index 0000000..510efcc --- /dev/null +++ b/gpg-agent.conf @@ -0,0 +1,10 @@ +pinentry-program /usr/bin/pinentry-curses +enable-ssh-support +# cache passwords for both gpg and ssh for 4h +max-cache-ttl-ssh 14400 +default-cache-ttl 14400 +# expire passwords after 6h +max-cache-ttl 21600 +max-cache-ttl-ssh 21600 +# let sb-builder unlock the signing key: jobs have no tty for pinentry +allow-preset-passphrase |