ros-infrastructure / cookbook-ros-buildfarm

Apache License 2.0
2 stars 2 forks source link

Configure jenkins-agent to use the GPG vault #55

Closed cottsay closed 3 years ago

cottsay commented 3 years ago

This change drops the private keys from the jenkins-agent user and configures the user to utilize the GPG vault for signing operations.

The change to gpg.conf should prevent most of the GnuPG tools from automatically starting a new gpg-agent process, which should minimize the chances of accidentally overwriting the S.gpg-agent symbolic link with a new socket.

Requires #54