Some help with split-gpg2

[Hacking_Overseas]

Someone could provide a beginner friendly tutorial about split-gpg2 secure setup for devs and sysadmins

@disp2222

Simplified:

appvm-vault (network-isolated)
│
├── GPG Email Master Key (certify-only)
│   └── GPG Email Subkey (sign/encrypt)
│
├── GPG Dev Master Key (certify-only)
│   └── GPG Git Subkey (sign commits)
│
└── SSH Keys (for dev)
    ├── SSH GitHub Key
    └── SSH Server Key

appvm-dev (networked)
├── Git commits (signed with GPG Git Subkey from vault)
└── SSH connections (authenticated with SSH keys from vault)

appvm-email (networked)
└── Thunderbird/Evolution (uses GPG Email Subkey from vault)

Someone could provide a beginner friendly tutorial about secure split-gpg2 setup for devs and sysadmins? @mra @ephile