From owner-freebsd-ports@FreeBSD.ORG Mon Dec 22 09:46:34 2014 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 1D678B37 for ; Mon, 22 Dec 2014 09:46:34 +0000 (UTC) Received: from mail.xtaz.uk (tao.xtaz.uk [IPv6:2001:8b0:202::10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D56C66414B for ; Mon, 22 Dec 2014 09:46:33 +0000 (UTC) Received: by mail.xtaz.uk (Postfix, from userid 1001) id 2F655209AF0F; Mon, 22 Dec 2014 09:46:30 +0000 (GMT) Date: Mon, 22 Dec 2014 09:46:30 +0000 From: Matt Smith To: Jonathan Chen Subject: Re: gnupg & pinentry Message-ID: <20141222094630.GF52267@xtaz.uk> Mail-Followup-To: Matt Smith , Jonathan Chen , freebsd-ports@freebsd.org References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.23 (2014-03-12) Cc: freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Dec 2014 09:46:34 -0000 On Dec 22 22:33, Jonathan Chen wrote: >Hi, > >Once upon a time, installing gnupg didn't require pinentry, and I >could run it quite happily on the command line. However, nowadays if I >install the port it drags in pinentry and a whole set of graphical >libraries that I don't really need on a headless box. Is pinentry >really required for gnupg to run correctly? > I believe in version 2.1.x they made entering the passphrase via pinentry basically mandatory and deprecated being able to do it via stdin methods. So it probably pulls in pinentry by default now. For binary packages this is unfortunatly going to default to all the front ends which includes ones for X. For port based source installs you can deselect the ones for X and only leave the ncurses one which then just pulls in one extra dependancy. Unfortunately that's the downside of binary package installs. FYI, you can also re-enable passphrases by stdin if required by adding allow-loopback-pinentry to .gnupg/gpg-agent.conf and using the --pinentry-mode=loopback command line switch to gpg. -- Matt