ryan77627/guix
1
0
Fork 0
mirror of https://git.in.rschanz.org/ryan77627/guix.git synced 2024-11-07 07:26:13 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

home: Set 700 permissions on .gnupg with home-gpg-agent-service

Browse source 
* gnu/home/services/gnupg.scm (gpg-agent-activation): New variable.
(home-gpg-agent-service-type) [extensions]: Extend
home-activation-service-type.

Change-Id: If3365c6cade2b03ee53a466ce1d63a5cdf654d6c
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
This commit is contained in:
Richard Sent 2024-06-28 14:16:31 -04:00 committed by Ludovic Courtès
parent 31fe177a97
commit b631640f3b
No known key found for this signature in database
GPG key ID: 090B11993D9AEBB5
1 changed files with 14 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
gnu/home/services/gnupg.scm
View file

@ -19,6 +19,7 @@
(define-module (gnu home services gnupg)
#:use-module (guix gexp)
#:use-module (guix modules)
#:use-module ((guix records) #:select (match-record))
#:use-module (gnu services)
#:use-module (gnu services configuration)
@ -142,6 +143,17 @@ (define (home-gpg-agent-environment-variables config)
. "$XDG_RUNTIME_DIR/gnupg/S.gpg-agent.ssh"))
'()))
(define gpg-agent-activation
(with-imported-modules (source-module-closure
'((gnu build activation)))
#~(begin
(use-modules (gnu build activation))
;; Make sure ~/.gnupg is #o700.
(let* ((home (getenv "HOME"))
(dot-ssh (string-append home "/.gnupg")))
(mkdir-p/perms dot-ssh (getpw (getuid)) #o700)))))
(define home-gpg-agent-service-type
(service-type
(name 'home-gpg-agent)
@ -150,6 +162,8 @@ (define home-gpg-agent-service-type
home-gpg-agent-files)
(service-extension home-shepherd-service-type
home-gpg-agent-shepherd-services)
(service-extension home-activation-service-type
(const gpg-agent-activation))
(service-extension home-environment-variables-service-type
home-gpg-agent-environment-variables)))
(default-value (home-gpg-agent-configuration))