Need help getting Pinentry to talk to KDE wallet in KDE 6.0

[dhs]

Hi all, I’ve recently upgraded from KDE 5 to 6. I followed the forum posts so it was quite a smooth experience. Everything works quite well, except GnuPG agent.

Previously in Manjaro KDE 5.x, I’ve configured GnuPG Agent to use pinentry-kwallet to unlock the GPG private key. It worked really well.

During upgrade to KDE 6.0, I’ve deleted most kde5 packages including pinentry-kwallet, kwalletcli (which I built from AUR).

Following Arch Wiki’s info, I’ve installed pinentry-qt as the new pinentry program. pinentry-qt works okay, except it doesn’t offer to save the passphrase to KDE Wallet.

I’ve read the Arch Wiki pages a few times and changed a few things, for example adding PINENTRY_KDE_USE_WALLET=1 to envrionment variable, enabling Secret Service API, etc., but still pinentry-qt doesn’t use Wallet. Meanwhile, I can confirm my KDE wallet is functioning as ksshaskpass is working well.

If you’ve got a working setup in Manjaro KDE 6, please share what you’ve got thanks!

[Tomek]

Look at this topic

GPG pin-entry broken after reinstall

I had to reinstall Manjaro due to data corruption, and now GPG pin-entry is broken. When I try committing with Git, it returns: error: gpg failed to sign the data fatal: failed to write commit object And when I try signing a message, I get: gpg: signing failed: Inappropriate ioctl for device gpg: [stdin]: clear-sign failed: Inappropriate ioctl for device After adding allow-loopback-pinentry to my gpg-agent.conf and use-agent pinentry-mode loopback to my gpg.conf per this post, I’m able to …

[dhs]

Thanks for your reply. Unfortunately the OP’s issue wasn’t the same as mine.

They got pinentry-qt to work with manually entering GPG passphrase. I’ve got that working too. However, I’d like pinentry to read the passphrase from KDE Wallet, which was working in KDE 5.x.

[dhs]

Bumping this topic. Does anyone have a good alternative setup?

[Tomek]

I tried to create your setup so I installed kwalletcli from AUR and set pinentry program to pinentry-kwallet (now provided by kwalletcli by the way) and it just works even without setting PINENTRY_KDE_USE_WALLET. First time asked for password and save it in kwallet and later just fetch it from kwallet without asking me for anything

So you only need installed kwalletcli from AUR and set in ~/.gnupg/gpg-agent.conf this line:

pinentry-program /usr/bin/pinentry-kwallet

[dhs]

Thank you @Tomek - When you installed kwalletcli - Did it install several KDE 5 dependencies? yay -S kwalletcli wants to install kdewallet5, kservice5, kdbusaddons5.

I hope they won’t conflict with KDE 6?

[Tomek]

Nope, that shouldn’t be problem. I use both kwallet 5 and 6 for other reasons and dependencies and everything is fine