Hi!

The guide on installing from another distribution at [1] proposes running

# pacman-key --init
# pacman-key --populate archlinux

from inside the Arch chroot. Fine.
Both of these call GPG binaries internally. Okay.

At some point, GPG started autostarting an instance of gpg-agent unless it is invoked with --no-autostart, an option missing in --help output but documented in man page of GPG.
The trouble with starting gpg-agent is that the agent process outlives the call to pacman-key and causes trouble when unmounting the chroot stack since gpg-agent is still using files from inside the chroot.
Especially in a context where calls to pacman-key are automated, one would have to

a) find that very gpg-agent process (the host system may have another)
and terminate it or

b) prefix the call to pacman-key by something like "unshare --pid --fork"
to have put it into a dedicated process ID namespasce and have it
killed when pacman-key terminates, automatically.


I am wondering, if you would be willing to do something like that from inside pacman-key, i.e. be willing to

a) pass --no-autostart to calls of GPG or

b) prefix calls to GPG with "unshare --pid --fork" or so
inside pacman-key.


I'm curious for your reply.

Best,



Sebastian

[1] https://wiki.archlinux.org/index.php/Install_from_existing_Linux