aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/nix/README.md
diff options
context:
space:
mode:
authorLibravatar sommerfeld <sommerfeld@sommerfeld.dev>2026-06-19 16:54:19 +0100
committerLibravatar sommerfeld <sommerfeld@sommerfeld.dev>2026-06-19 16:54:19 +0100
commit259a3b989513f47f6cc5d36eaaf9e5fbef9b4d9a (patch)
tree29238de59acaf7804aa2fe4b78c1f2db71f4f365 /nix/README.md
parent6d151559a199dd54caa3880e699fce80020530cf (diff)
downloaddotfiles-259a3b989513f47f6cc5d36eaaf9e5fbef9b4d9a.tar.gz
dotfiles-259a3b989513f47f6cc5d36eaaf9e5fbef9b4d9a.tar.bz2
dotfiles-259a3b989513f47f6cc5d36eaaf9e5fbef9b4d9a.zip
Mirror GnuPG config on VM
Diffstat (limited to 'nix/README.md')
-rw-r--r--nix/README.md11
1 files changed, 6 insertions, 5 deletions
diff --git a/nix/README.md b/nix/README.md
index 4a27ae1..26699d0 100644
--- a/nix/README.md
+++ b/nix/README.md
@@ -102,8 +102,9 @@ gpg --edit-key 3298945F717C85F8 trust quit
gpg --list-secret-keys --with-keygrip 3298945F717C85F8
```
-Add the authentication subkey keygrip to `~/.gnupg/sshcontrol`. The
-tracked git config already uses normal OpenPGP signing, so no
+The VM profile symlinks the repo-owned `gpg.conf`, `gpg-agent.conf`,
+and `sshcontrol` into `~/.gnupg`. The tracked git config already uses
+normal OpenPGP signing, so no
`~/.config/git/config.local` override is needed for SSH-format signing.
If `~/.config/git/config.local` only contains the old SSH-format
signing override, remove it too.
@@ -119,9 +120,9 @@ git log --show-signature -1
## Caveats
- **GPG / pass**: HM installs `gnupg` and `pass` but does _not_ import
- any private key. On the VM, import the work key manually and add the
- authentication subkey keygrip to `~/.gnupg/sshcontrol`. On the host,
- smartcard access via `pcscd` is configured in `host.nix`
+ any private key. On the VM, import the work key manually; repo-owned
+ `gpg.conf`, `gpg-agent.conf`, and `sshcontrol` are symlinked by
+ `vm.nix`. On the host, smartcard access via `pcscd` is configured in `host.nix`
(`~/.gnupg/scdaemon.conf`).
- **Disk usage**: Nix store + nvim plugins consumes ~3-5 GB. Check
partition size first on the VM.