Repository navigation
pass: docker login does not work after rotating gpg key #299
Description
Repro steps:
- Store a login cred:
aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin 123456789.dkr.ecr.us-east-1.amazonaws.com
- Rotate your gpg key
- Re-store the login cred with the same command as step 1
Expected result:
The creds are stored successfully
Actual result:
The old credentials can't be decrypted, so the credential helper fails with gpg: decryption failed: No secret key
Activity
nicks commentedon Oct 16, 2023
Note that there are other issues with this error message - e.g., #118
but it wasn't clear to me if they're the same issue
nicks commentedon Oct 16, 2023
i actually think this is kind of an interop issue between
docker-credential-helpersand DD, where DD is assuming that if the credential has a decryption error, it means the credential store is corrupted somehow, and so prevents the Store()