From: Scott Worley <scottworley@scottworley.com>
Date: Wed, 20 May 2020 04:33:12 +0000 (-0700)
Subject: Specify key by long key id, not fingerprint
X-Git-Url: http://git.scottworley.com/auto-upgrade-with-pinch/commitdiff_plain/10f5329ab87c69585e2a9a821e524a6cc7218700?ds=sidebyside

Specify key by long key id, not fingerprint

The GnuPG manual says "The best way to specify a key Id is by using the
fingerprint," but --trusted-key doesn't accept fingerprints.  ಠ_ಠ
---

diff --git a/overlays/keyedgit.nix b/overlays/keyedgit.nix
index a4465dc..7688ace 100644
--- a/overlays/keyedgit.nix
+++ b/overlays/keyedgit.nix
@@ -13,7 +13,7 @@ self: super: {
       '';
       keyids = super.runCommand "keyids" {} ''
         ${homelessGPG} --no-default-keyring --with-colons --show-keys ${keys} |
-          ${self.gawk}/bin/awk -F: 'prev == "pub" && $1 == "fpr" { print $10 } { prev = $1 }' > $out
+          ${self.gawk}/bin/awk -F: '$1 == "pub" { print $5 }' > $out
       '';
       keyedGPG = super.writeShellScript "keyed-gpg" ''
         trusted_key_args=()