gpg decrypt in script

glennbtn · 01-03-2023, 03:52 AM

Hi All

I am having an issue automating the decryption of a file in a bash scrip..

I have a passphrase file and the 1st time I run the bash script it asks for the password, but subsequent runs of the script I don't get this and it runs ok. When added to the cron though it fails.

This is my code hopefully someone can point me in the direction I am going wrong

Code:

pass_phrase=`cat /scripts/passphrase.txt|awk '{print $1}'`
gpg --passphrase $pass_phrase --output cdr.zip --decrypt cdrext.zip.asc

This is running on Ubuntu 20.04.5 LTS & gpg (GnuPG) 2.2.19

Thanks

Michael Uplawski · 01-03-2023, 04:54 AM

Why the call to awk?

Turbocapitalist · 01-03-2023, 07:40 AM

Quote:

Originally Posted by glennbtn

I have a passphrase file and the 1st time I run the bash script it asks for the password, but subsequent runs of the script I don't get this and it runs ok. When added to the cron though it fails.

That's because your interactive session is using an agent. You ought to set up a unique, independent key agent for the cron job to use. That way you can load the key into the agent once per reboot and have the script still work. Scripting like this might be a situation where sq is easier than gpg.

Rouregre · 07-25-2023, 10:22 PM

Quote:

Originally Posted by Turbocapitalist

That's because your interactive session is using an agent. You ought to set up a unique, independent key agent for the cron job to use. That way you can load the key into the agent once per reboot and have the script still work. Scripting like this might be a situation where sq is easier than gpg.tiny fishing

I tried and it works.