From e2da9bd7318c3811b344c756358104fd8c7e4994 Mon Sep 17 00:00:00 2001 From: sommerfeld Date: Fri, 17 Apr 2026 14:47:34 +0100 Subject: refactor: remove pam-gnupg and simplify gpg-agent config With GPG key passphrases being removed (LUKS provides at-rest encryption), pam-gnupg is no longer needed. Remove: - pam-gnupg config file and keygrip list - pam-gnupg-git from base metapackage - Cache TTL overrides (defaults are fine without passphrase caching) - allow-preset-passphrase (only needed by pam-gnupg) --- home/.gnupg/gpg-agent.conf | 5 ----- 1 file changed, 5 deletions(-) (limited to 'home/.gnupg/gpg-agent.conf') diff --git a/home/.gnupg/gpg-agent.conf b/home/.gnupg/gpg-agent.conf index 0826efe..6c27318 100644 --- a/home/.gnupg/gpg-agent.conf +++ b/home/.gnupg/gpg-agent.conf @@ -1,8 +1,3 @@ -max-cache-ttl 60480000 -default-cache-ttl 60480000 -allow-preset-passphrase enable-ssh-support -default-cache-ttl-ssh 60480000 -max-cache-ttl-ssh 60480000 pinentry-program /usr/bin/pinentry-curses allow-loopback-pinentry -- cgit v1.2.3-70-g09d2