Skip to content

Commit

Permalink
move info about issue with ubuntu & brew to sobolevn#760
Browse files Browse the repository at this point in the history
  • Loading branch information
joshrabinowitz authored Jan 24, 2022
1 parent 4c3db4e commit a6c5590
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions man/man7/git-secret.7.md
Original file line number Diff line number Diff line change
Expand Up @@ -111,8 +111,7 @@ You can then create your private key file with:
echo "$GPG_PRIVATE_KEY" | tr ',' '\n' > ./private_key.gpg
```

Also note: the `gpg` version on the CI/CD server **MUST MATCH** the one used locally. Otherwise, `gpg` decryption can fail silently, which leads to `git secret reveal` reporting `cannot find decrypted version of file` error. To be specific, `apt-get install gnupg` points to version [2.2.20](https://packages.ubuntu.com/impish/gnupg), yet `brew install gnupg` points to version [2.3.4](https://formulae.brew.sh/formula/gnupg) (as of 2022-01-17). Thus a `git-secret` encrypted file on macOS using the latest `gpg` installed from `brew` cannot be decrypted on Ubuntu (e.g. GitHub Actions' latest Ubuntu machine) using the latest `gpg` installed from `apt-get`. The work-around for this specific case is to downgrade `gpg` with `brew install gnupg@2.2.33`.

Also note: the `gpg` version on the CI/CD server **MUST MATCH** the one used locally. Otherwise, `gpg` decryption can fail silently, which leads to `git secret reveal` reporting `cannot find decrypted version of file` error.

## Environment Variables and Configuration

Expand Down

0 comments on commit a6c5590

Please sign in to comment.