Importing GPG key in ubuntu:bionic Docker container

I am trying to import a GPG key on a Gitlab CI system with an ubuntu:bionic Docker image. To do this securely, I have to store the key in a so called secret variable (which then simply becomes an environment variable at runtime).

So I tried to export the key in a non-binary format like this:

gpg2 --armor --export-secret-keys "my name <my email>" > my-gpg-key.asc

my-gpg-key.asc looked like this then:

-----BEGIN PGP PRIVATE KEY BLOCK-----
long multi line ascii string
-----END PGP PRIVATE KEY BLOCK-----

Then I copied the file contents and defined a secret variable from it. The variable is called LAUNCHPAD_GPG_PRIVATE_KEY

Here is what I tried:

apt-get -qq update --yes
apt-get -qq install --yes gnupg2 > /dev/null
export GPG_TTY=$(tty) # compensate for ioctl error
gpg2 --list-keys
gpg2 -v --import <(echo "$LAUNCHPAD_GPG_PRIVATE_KEY")
gpg2 --list-keys

This causes:

gpg: key 17B1EA9E090F697D/17B1EA9E090F697D: error sending to agent: No such file or directory
gpg: error building skey array: No such file or directory

I also tried to export and import the key with gpg instead of gpg2: Same result...

I also tried running

gpg-agent --daemon

and

gpg-agent --daemon --allow-loopback-pinentry

before the import... but still: Same error.

Any ideas how this can be done properly?

1 Answer

I managed import it without any errors by adding the batch flag.

gpg2 -v --batch --import <(echo "$LAUNCHPAD_GPG_PRIVATE_KEY")

Don't ask me why this fixes it. It took me hours to figure this out...