2019-08-20 10:30:13 +02:00
|
|
|
{ config, lib, pkgs, ... }:
|
|
|
|
|
|
|
|
|
|
{
|
|
|
|
|
programs.gpg = {
|
|
|
|
|
enable = true;
|
|
|
|
|
|
|
|
|
|
mutableKeys = false;
|
|
|
|
|
mutableTrust = false;
|
|
|
|
|
|
|
|
|
|
publicKeys = [
|
|
|
|
|
{
|
|
|
|
|
source = pkgs.fetchurl {
|
|
|
|
|
url =
|
|
|
|
|
"https://keybase.io/rycee/pgp_keys.asc?fingerprint=36cacf52d098cc0e78fb0cb13573356c25c424d4";
|
2022-12-08 14:34:18 +01:00
|
|
|
hash = "sha256-5z2kTUXQp0f7kyP0Id6NS3rCdzGGrrkIYzGK42Qy9Sw=";
|
2019-08-20 10:30:13 +02:00
|
|
|
};
|
2021-12-16 04:54:56 +01:00
|
|
|
trust = 1; # "unknown"
|
2019-08-20 10:30:13 +02:00
|
|
|
}
|
|
|
|
|
{
|
|
|
|
|
source = pkgs.fetchurl {
|
|
|
|
|
url = "https://www.rsync.net/resources/pubkey.txt";
|
|
|
|
|
sha256 = "16nzqfb1kvsxjkq919hxsawx6ydvip3md3qyhdmw54qx6drnxckl";
|
|
|
|
|
};
|
2021-12-16 04:54:56 +01:00
|
|
|
trust = "never";
|
2019-08-20 10:30:13 +02:00
|
|
|
}
|
|
|
|
|
];
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
nmt.script = ''
|
|
|
|
|
assertFileNotRegex activate "^export GNUPGHOME='/home/hm-user/.gnupg'$"
|
|
|
|
|
|
|
|
|
|
assertFileRegex activate \
|
|
|
|
|
'^install -m 0700 /nix/store/[0-9a-z]*-gpg-pubring/trustdb.gpg "/home/hm-user/.gnupg/trustdb.gpg"$'
|
|
|
|
|
|
|
|
|
|
# Setup GPGHOME
|
|
|
|
|
export GNUPGHOME=$(mktemp -d)
|
|
|
|
|
cp -r $TESTED/home-files/.gnupg/* $GNUPGHOME
|
|
|
|
|
TRUSTDB=$(grep -o '/nix/store/[0-9a-z]*-gpg-pubring/trustdb.gpg' $TESTED/activate)
|
|
|
|
|
install -m 0700 $TRUSTDB $GNUPGHOME/trustdb.gpg
|
|
|
|
|
|
|
|
|
|
# Export Trust
|
|
|
|
|
export WORKDIR=$(mktemp -d)
|
|
|
|
|
${pkgs.gnupg}/bin/gpg -q --export-ownertrust > $WORKDIR/gpgtrust.txt
|
|
|
|
|
|
|
|
|
|
# Check Trust
|
|
|
|
|
assertFileRegex $WORKDIR/gpgtrust.txt \
|
|
|
|
|
'^36CACF52D098CC0E78FB0CB13573356C25C424D4:2:$'
|
|
|
|
|
|
|
|
|
|
assertFileRegex $WORKDIR/gpgtrust.txt \
|
|
|
|
|
'^BB847B5A69EF343CEF511B29073C282D7D6F806C:3:$'
|
|
|
|
|
'';
|
|
|
|
|
}
|
