GPG: "Decryption failed: No secret key"

News Knowledge Base
1

How to create a new GPG Key if error GPG: "Decryption failed: No secret key" is thrown?

  1. Create a new GPG key
  • gpg --generate-key
  1. Re-init pass, using the newly created GPG key (that we therefore have the private key for) (e.g. pass init "{key id}")
    • The current key id can be verified by `cat ~\.password-store\.gpg-id`
  2. Retrieve BOTH secret values that the Insights Linux install uses pass to store: cert_password and looker_password
    1. These can be dumped from the currently running docker environment (e.g. `sudo docker exec -it looker-container env`)
  3. Re-insert BOTH secret values back into the pass store, which will properly encrypt them using the new value
    1. E.g. `pass Insights/looker-password <<SECRET
  • {enter value once}
  • {enter value twice}
  • SECRET`