gpg-agent: switch to gui domain for graphical pinentry support

gpg-agent is commonly configured with graphical pinentry programs
(pinentry-mac, pinentry-gnome3) on macOS that need access to the Aqua
session to display passphrase prompts. Running in the user domain
(LimitLoadToSessionType=Background) prevents these prompts from
rendering, causing passphrase entry to fail silently or hang.

Revert to the default gui domain so the agent runs in the graphical
login session where pinentry can interact with the window server.
This commit is contained in:
Austin Horstman 2026-07-07 21:57:05 -05:00
parent 53ebbdc405
commit 7a62d63707
2 changed files with 0 additions and 3 deletions

View file

@ -454,7 +454,6 @@ in
launchd.agents.gpg-agent = {
enable = true;
domain = lib.mkDefault "user";
config = {
ProgramArguments = [
"${gpgPkg}/bin/gpg-agent"

View file

@ -16,8 +16,6 @@
</dict>
<key>Label</key>
<string>org.nix-community.home.gpg-agent</string>
<key>LimitLoadToSessionType</key>
<string>Background</string>
<key>ProcessType</key>
<string>Background</string>
<key>ProgramArguments</key>