如何在不输入密码的情况下签署rpm包？

Question

我正在尝试使用GPG创建的RPM软件包进行签名，而无需输入密码，也无需输入可以签名的密码，但是，如果没有输入密码，则会打开消息框Please enter the passphrase to unlock the OpenPGP secret key，所以我不需要在签名软件包时要求输入密码这将是在“静音模式”下执行的脚本。我可能输入了错误的命令，但是我很难找到解决方案。这是我尝试执行的命令，即使这样，仍要求输入密码：gpg --batch --passphrase "78910" --clearsign test-1-0.x86_64.rpm使用第二个命令，不需要输入密码：echo "78910" | gpg --batch --passphrase-fd 0  --clearsign test-1-0.x86_64.rpm但是，不执行签名，并返回如下所述的错误：gpg: signing failed: Inappropriate ioctl for device gpg: /test-1-0.x86_64.rpm: clear-sign failed: Inappropriate ioctl for device 使用此第三条命令，报告的错误有所不同：echo "78910" | gpg --batch --passphrase-fd 0 ~/.gnupg/trustdb.gpg  --clearsign test-1-0.x86_64.rpm 错误信息：gpg: Note: '--clearsign' is not considered an option gpg: WARNING: no command supplied.  Trying to guess what you mean ... usage: gpg [options] [filename] 这是我创建gpg密钥的代码，我尝试在没有密码的情况下创建，但是当密码值为空时我收到错误消息。#!/bin/bashecho "Key-Type: 1" > gen-key-scriptecho "Key-Length: 1024" >> gen-key-scriptecho "Subkey-Type: 1" >> gen-key-scriptecho "Subkey-Length: 1024" >> gen-key-scriptecho "Name-Real: gpg test" >> gen-key-scriptecho "Name-Email: [e-mail]" >> gen-key-scriptecho "Expire-Date: 0" >> gen-key-scriptecho "Passphrase: 78910" >> gen-key-scriptecho "" >> gen-key-script#---------------------------------------------------------# GENERATE THE KEY#---------------------------------------------------------gpg --batch --gen-key gen-key-script#---------------------------------------------------------# .RPMMACROS#---------------------------------------------------------echo "%_gpg_name gpg test <[e-mail]>" > ~/.rpmmacros

Answer 1

如果您不想输入密码，则需要将私钥存储在磁盘上，而不受密码保护。这意味着有权访问密钥文件的每个人都可以对您的软件包进行签名。确定是否需要。

如果您不想保护密钥的使用%no-protection，例如：

echo "%no-protection" > gen-key-script

echo "Key-Type: 1" >> gen-key-script

echo "Key-Length: 1024" >> gen-key-script

echo "Subkey-Type: 1" >> gen-key-script

echo "Subkey-Length: 1024" >> gen-key-script

echo "Name-Real: gpg test" >> gen-key-script

echo "Name-Email: [e-mail]" >> gen-key-script

echo "Expire-Date: 0" >> gen-key-script

echo "" >> gen-key-script