1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-05 11:46:02 +02:00

misc/vault-keyring-client.sh: explain flock usage

Fixes: 511b6ca4e1 ("misc/vault-keyring-client.sh: add flock workaround")
This commit is contained in:
Evangelos Foutras 2022-08-25 05:50:30 +03:00
parent 9df19091fc
commit 434763e19c
No known key found for this signature in database
GPG Key ID: 51E8B148A9999C34

View File

@ -2,7 +2,7 @@
readonly vault_password_file_encrypted="$(dirname $0)/vault-$2-password.gpg"
# often getting "gpg: decryption failed: No secret key" in tf-stage2
# seems to work with flock (issue last reproduced with gnupg 2.2.35)
# flock used to work around "gpg: decryption failed: No secret key" in tf-stage2
# would otherwise need 'auto-expand-secmem' (https://dev.gnupg.org/T3530#106174)
flock "$vault_password_file_encrypted" \
gpg --batch --decrypt --quiet "$vault_password_file_encrypted"