gpg does not work even with correct gnupg.home set about sops-nix

[DAlperin]

Interestingly manually testing by way of sudo su also works. I copied over the prudent information from the gpg-agent process /proc/environ

[root@DovDev:/etc/nixos]# export GNUPGHOME=/var/lib/gnupg
[root@DovDev:/etc/nixos]# /nix/store/wh4g47b3l5prx25iyf9rlcl5qasjrzzf-gnupg-2.2.27/bin/gpg --list-keys
gpg: WARNING: unsafe permissions on homedir '/var/lib/gnupg'
/var/lib/gnupg/pubring.kbx
--------------------------
pub   rsa3072 2022-01-04 [SC] [expires: 2024-01-04]
---snip---

[Mic92]

Does it work, if you fix this warning?

gpg: WARNING: unsafe permissions on homedir '/var/lib/gnupg'

[DAlperin]

No:

[root@DovDev:/etc/nixos]# export GNUPGHOME=/var/lib/gnupg

[root@DovDev:/etc/nixos]# /nix/store/wh4g47b3l5prx25iyf9rlcl5qasjrzzf-gnupg-2.2.27/bin/gpg --list-keys
/var/lib/gnupg/pubring.kbx
--------------------------
---snip---

dovalperin in nixos at DovDev on  main [!+?] took 12s ➜ sudo nixos-rebuild switch
building the system configuration...
warning: Git tree '/etc/nixos' is dirty
updating GRUB 2 menu...
activating the configuration...
setting up /etc...
/nix/store/cx01anlvsgf23y7m801wmwmmrm9jark4-sops-install-secrets-0.0.1/bin/sops-install-secrets: Failed to decrypt '/nix/store/kyygj6xkax7qziizh8lhlh00s69jhgbf-example.yaml': Error getting data key: 0 successful groups required, got 0
Activation script snippet 'setupSecrets' failed (1)
reloading user units for dovalperin...
setting up tmpfiles
warning: error(s) occurred while switching to the new configuration

[Mic92]

If you run sops <yoursecret.yaml> as root with the gpg2 executable in your $PATH, does it than works with your export GNUPGHOME=/var/lib/gnupg?

[Mic92]

Closing because lack of feedback. In general if you have issues with gpg, I would suggest to use age instead. GPG is not good software.