security/SSH: add fix for nonconfigurable GPG socket directory

hashbang · Aug 15, 2021 · c62007d · c62007d · RyanSquared · Aug 15, 2021
1 parent 95fe016
commit c62007d
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/content/docs/security/SSH.md b/content/docs/security/SSH.md
@@ -101,6 +101,11 @@ if [ -z "$SSH_TTY" ]; then
        );
     then
         killall gpg-agent
+	# This isn't strictly required but helps prevents issues when trying to
+	# mount a socket in the /run tmpfs into a Docker container, and puts
+	# the socket in a consistent location under GNUPGHOME
+        rm -r /run/user/`id -u`/gnupg
+        touch /run/user/`id -u`/gnupg
         gpg-agent --daemon --enable-ssh-support > $envfile
     fi