Skip to content

gnupg

Version 2026.144.1443
Repo superproject

GnuPG encryption and signing tools for GPG agent forwarding Installs the GnuPG suite (gpg, gpgconf, gpg-agent, gpg-connect-agent) from the distro package – gnupg on arch/debian/ubuntu, gnupg2 on fedora. The binaries land in /usr/bin and gpg reports its GnuPG version string, so the install and the agent-forwarding tooling are directly verifiable inside the built image.

This candy’s plan: — the runnable spec charly check executes against a live deployment. check: steps are idempotent probes; run: steps change state.

Intent Step
check the gpg encryption/signing binary is present at /usr/bin/gpg
check invoking gpg –version exits cleanly and identifies itself as GnuPG
check the gpg-agent daemon ships so a forwarded host agent can answer key operations
check the gpgconf helper ships so the agent socket path can be resolved
check package=gnupg