automation - 如何在不手动执行的情况下信任一堆您信任的公共(public) pgp key ？

Question

我只需要信任一堆公钥就可以通过它使用它。 不幸的是，我没有找到一种简单的方法来信任我在本地存储的所有公钥。 我发现它的 yield 按时间顺序相当昂贵:

> gpg --edit-key XXXXXXXXXXXXXXXX
  gpg (GnuPG) 2.2.10; Copyright (C) 2018 Free Software Foundation, Inc.
  This is free software: you are free to change and redistribute it.
  There is NO WARRANTY, to the extent permitted by law.

pub  rsa4096/XXXXXXXXXXXXXXXX
     created: 2018-11-16  expires: never       usage: SC  
     trust: unknown       validity: unknown
sub  rsa4096/XXXXXXXXXXXXXXXX
     created: 2018-11-16  expires: never       usage: E   
[ unknown] (1). email@example.com

gpg> trust
pub  rsa4096/XXXXXXXXXXXXXXXX
     created: 2018-11-16  expires: never       usage: SC  
     trust: unknown       validity: unknown
sub  rsa4096/XXXXXXXXXXXXXXXX
     created: 2018-11-16  expires: never       usage: E   
[ unknown] (1). email@example.com

Please decide how far you trust this user to correctly verify other users' keys
(by looking at passports, checking fingerprints from different sources, etc.)

  1 = I don't know or won't say
  2 = I do NOT trust
  3 = I trust marginally
  4 = I trust fully
  5 = I trust ultimately
  m = back to the main menu

Your decision? y
Your decision? 5
Do you really want to set this key to ultimate trust? (y/N) y

pub  rsa4096/XXXXXXXXXXXXXXXX
     created: 2018-11-16  expires: never       usage: SC  
     trust: ultimate      validity: unknown
sub  rsa4096/XXXXXXXXXXXXXXXX
     created: 2018-11-16  expires: never       usage: E   
[ unknown] (1). email@example.com
Please note that the shown key validity is not necessarily correct
unless you restart the program.

gpg> q

如何快速完成？

Answer 1

环顾四周，我发现了一个描述该过程的博客: ow-to-ultimately-trust-a-public-key-non-interactively

然而，那里提出的解决方案不适用于当前的 gpg 版本。 为了让它工作，我使用了以下命令:

gpg --list-keys --fingerprint |grep pub -A 1|egrep -Ev "pub|--"|tr -d ' ' \
 | awk 'BEGIN { FS = "\n" } ; { print $1":6:" } ' | gpg --import-ownertrust

基本上它会创建一个 ownertrust 文本，然后由 gpg 即时导入。