gpg is a complex thing

.gitlab-ci.yml

@@ -296,7 +296,8 @@ update_deb_repo:
       apt-get update && apt-get install google-cloud-cli -y
       curl --silent "https://gitlab.com/gitlab-org/incubation-engineering/mobile-devops/download-secure-files/-/raw/main/installer" | bash
       echo $GCP_SERVICE_KEY > gcloud-service-key.json
-      gpg --import .secure_files/debiankey.asc
+      # export GPG_TTY=$(tty)
+      gpg --pinentry-mode loopback --passphrase ${GPG_PASS} --import .secure_files/debiankey.asc
       gcloud auth activate-service-account --key-file gcloud-service-key.json
       gcloud config set project $GCLOUD_PROJECT_ID
   script:
@@ -308,8 +309,8 @@ update_deb_repo:
       cd debian
       apt-ftparchive packages . > Packages
       apt-ftparchive release . > Release
-      gpg --clearsign -o InRelease Release
-      gpg -abs -o Release.gpg Release
+      gpg --passphrase ${GPG_PASS} --clearsign -o InRelease Release
+      gpg --passphrase ${GPG_PASS -abs -o Release.gpg Release
       if [[ ${CI_COMMIT_TAG} = test_* ]] || [[ ${CI_COMMIT_TAG} = lin_* ]]
       then
         gsutil ./* gs://debian.gridtracker.org/test/