I try to use split-gpg with a debian-11-minimal template.
I followed the instructions from Split GPG | Qubes OS and with the debian-11 template every thing works fine.
But with the minimal-template i can’t unlock my private key from mail- qube.
When i unlock the private key in gpg-qube it works and i can use the mail qube as intended.
Guess the gpg-agent has to be set up the right way…
systemctl --user status gpg-agent:
● gpg-agent.service - GnuPG cryptographic agent and passphrase cache
Loaded: loaded (/usr/lib/systemd/user/gpg-agent.service; static)
Active: active (running) since Sun 2022-10-09 23:28:53 CEST; 1h 5min ago
TriggeredBy: ● gpg-agent-extra.socket
● gpg-agent.socket
● gpg-agent-browser.socket
● gpg-agent-ssh.socket
Docs: man:gpg-agent(1)
Main PID: 678 (gpg-agent)
Tasks: 1 (limit: 4632)
Memory: 584.0K
CPU: 1.020s
CGroup: /user.slice/user-1000.slice/user@1000.service/app.slice/gpg-agent.service
└─678 /usr/bin/gpg-agent --supervised
Oct 09 23:28:53 gpg-qube gpg-agent[678]: using fd 6 for ssh socket (/run/user/1000/gnupg/S.gpg-agent.ssh)
Oct 09 23:28:53 gpg-qube gpg-agent[678]: listening on: std=4 extra=3 browser=5 ssh=6
Oct 09 23:28:53 gpg-qube gpg-agent[678]: failed to unprotect the secret key: End of file
Oct 09 23:28:53 gpg-qube gpg-agent[678]: failed to read the secret key
Oct 09 23:28:53 gpg-qube gpg-agent[678]: command 'PKDECRYPT' failed: End of file
Oct 09 23:28:53 gpg-qube gpg-agent[678]: Assuan processing failed: Broken pipe
Oct 10 00:32:10 gpg-qube gpg-agent[678]: failed to unprotect the secret key: End of file
Oct 10 00:32:10 gpg-qube gpg-agent[678]: failed to read the secret key
Oct 10 00:32:10 gpg-qube gpg-agent[678]: command 'PKDECRYPT' failed: End of file
Oct 10 00:32:10 gpg-qube gpg-agent[678]: Assuan processing failed: Broken pipe