Hi,

https://db.debian.org/doc-mail.html says

cat .ssh/id_rsa.pub | gpg --clearsign | mail changes@db.debian.org

which doesn't work. Today's gpg versions want to seek on the input file.

GPG_TTY="$(tty)" < .ssh/authorized_keys.d/dist/mh-yubikeys.pub gpg --clearsign | mail changes@db.debian.org

works.

Greetings
Marc

Works here.

What kind of error message are you getting?

$ cat test | gpg --clearsign
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi Marc!
(that's from a throw-away key for testing on sid)

cat .ssh/authorized_keys.d/dist/mh-yubikeys.pub | gpg --clearsign
gpg: signing failed: Inappropriate ioctl for device
gpg: [stdin]: clear-sign failed: Inappropriate ioctl for device

(on trixie)

Grüße
Marc

Works for me also on Trixie.

The /dev/tty handling in gpg has bitten some people since about a decade or so.

The corresponding GPG_TTY variable is documented at

https://www.gnupg.org/documentation/manuals/gnupg/Invoking-GPG_002dAGENT.html

and you use it yourself in your initial email.

The above recommends to add

GPG_TTY=$(tty)
export GPG_TTY

to .bashrc.

If you do that, the normal cat ... | gpg --whatever should work for you, too.

How many people are going to need that? If it's harmless, it should be
part of the docs.

Greetings
Marc

Am 12.02.26 um 21:41 schrieb Marc Haber:

Well, it's gpg. It is part of its docs.

What an utter waste of time this bug report is. The actual change to
the web page would have taken half the time

So it is utterly broken and should be reassigned to gnupg and be fixed.

Bastian

And I'm sorry, but this web page is not in the repositories of the web\
team. Currently I do not know to which (pseudo)-package we should
assign this bug.