mirror of
https://github.com/gopasspw/gopass.git
synced 2026-05-30 11:18:48 +02:00
Dominik Schulz
fddf2d124f
* fix(age): detach agent subprocess from parent file descriptors When the age agent is started via startAgent(), it inherits the parent process's stderr (explicitly via cmd.Stderr = os.Stderr) and stdin/stdout (implicitly by not setting them). This causes the parent process to hang when it captures its own output via exec.Cmd.CombinedOutput() or similar pipe-based methods, because the agent subprocess keeps the pipe file descriptors open indefinitely as a daemon. This affects: - Integration tests that use exec.Command + CombinedOutput() - Any external tool that wraps gopass as a subprocess and captures its output The fix sets cmd.Stdin, cmd.Stdout, and cmd.Stderr to nil for the agent process, ensuring it is fully detached from the parent's file descriptors. The agent already uses a Unix domain socket for communication, so it does not need inherited pipes. The cmd.Env = os.Environ() is preserved so the agent inherits the necessary environment variables (GOPASS_HOMEDIR, GOPASS_AGE_PASSWORD, etc.). * Add GOPASS_AGE_STDIN_PASSPHRASE env variable to bypass pinentry for age * fix(age): reload identities on unlock command (#3363) Fix the 'gopass age agent unlock' command to reload identities after unlocking, instead of just setting locked=false. Before this fix, unlock would only set locked=false but leave identities as nil, causing decrypt operations to fail with 'no identity matched any recipient' error instead of triggering auto-reload. After this fix: - unlock command reloads identities via getAllIds (prompts for PIN) - identities are sent to the agent via SendIdentities - agent timeout is set if configured - message updated to 'Age agent unlocked and identities reloaded' Also adds test infrastructure for age backend testing with embedded test identity. This commit was developed with OpenCode (GLM-5 and Kimi K2.5). Fixes #3363 Signed-off-by: Stéphane Klein <contact@stephane-klein.info> Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org> * docs(age): document stdin passphrase override Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org> --------- Signed-off-by: Stéphane Klein <contact@stephane-klein.info> Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org> Co-authored-by: Stéphane Klein <contact@stephane-klein.info>