How can I have fzf allow me inserting a gpg password when the sink is a call to pass and the passphrase hasn't been cached yet?

[Aster89]

I want to use fzf to pick and insert passwords from my password store.

The following hack works,

let passwordStore = 'find $HOME/.password-store/ -type f | sed "s!$HOME/.password-store/!!;/^\./d;s/\.gpg$//"'
let InsPW = {s -> execute('execute("read!pass show ' . s . '") | execute("normal kdd") | execute("normal :wq\<cr>")')}
nmap <silent> <buffer>
  \ <Leader>fp
  \ :call fzf#run(fzf#wrap({'source': passwordStore,
                          \ 'sink': InsPW,
                          \ 'options': '--no-multi'}))<CR>

except that it only works if I have already inserted and cached the gpg password earlier.

If I haven't, then I can't insert it via the above command.

---

Notice that if I just enter :read!pass show path/to/some/password in Vim, I see the terminal-based pinetry program in the terminal, and if I insert the passphrase, it correcty results in inserting the password in the current buffer.

[hippi345]

not really an fzf thing. :read !pass show ... runs pass without a real terminal, so the curses/tty pinentry has nowhere to ask and gpg just fails. once it's cached there's no prompt, that's why it works then.

easiest fix is a GUI pinentry, it pops its own window no matter where it's called from. in ~/.gnupg/gpg-agent.conf:

pinentry-program /usr/bin/pinentry-gtk-2

(or pinentry-qt / pinentry-gnome3, whatever you have), then gpgconf --kill gpg-agent. after that the first lookup should pop the prompt and then insert the password.

[Aster89]

not really an fzf thing. :read !pass show ... runs pass without a real terminal, so the curses/tty pinentry has nowhere to ask and gpg just fails. once it's cached there's no prompt, that's why it works then.

This is incorrect. Executing :read !pass show ... in Vim works fine if the passphrase is not cached yet (and obviously, thereafter).

It's not working only via the fzf mapping I wrote above.

[hippi345]

yep you're right, my bad. the :read !pass part was fine, it's the execute() wrapper. it runs silent by default, so pass never gets the terminal and pinentry can't draw, like @MohammadThabetHassan said. doing the read as a plain ex command in a function, or execute('read !pass show ' . shellescape(s), '') with the empty 2nd arg, should get the prompt showing up

[Aster89]

In hindsight, your and the other answer really pointed at irrelevant facts that drove me searching in the wrong direction. After all, it was clear you hadn't even read what I wrote in the original post when you posted your first message.

[MohammadThabetHassan]

[Aster89]

To start with, using the snippet above triggers this error:

E81: Using <SID> not in a script context
E475: Invalid argument: s:InsPW

and swapping s: for <sid> inside of 'sink': function(…) I get the same behavior as in my attempt, i.e. no pinentry being shown (as per the :silent used by execute(), according to you).

Besides, calling :call execute('read!pass show path/to/some/password') manually, opens the terminal-based pinentry just fine, so I even doubt the issue is really the one you hypothesized.

[Aster89]

In hindsight, your and the other answer really pointed at irrelevant facts that drove me searching in the wrong direction. After all, as per my previous message, it was clear you produced it with AI, because the code was broken is such a silly way.

[bitraid]

It works for me. What exactly happens if (when the gpg password is not cached) you make a selection using the following command (assumes no spaces in names) directly in command-line mode?

call fzf#run(fzf#wrap({'source': 'pass ls', 'sink': {s -> execute("read!pass show " . fzf#shellescape(s))}, 'options': '--reverse --header-lines=1 --accept-nth=-1'}))

[Aster89]

I sincerely apologize for wasting your time, but the issue is due to a detail I was omitting because I thought it was not relevant, and that is that the Vim session is being spawned by the browser via a keybinding which runs the following command that I defined:

urxvt -e bash -c vim

I've just tried running that command from a terminal (rather than from the browser), and what happens when I call :read!pass show path/to/passoword is that the pinentry program opens on the calling terminal, rather than the one where Vim runs. Realistically, when the caller is not a terminal but the browser, there's nowhere to show the pinentry.

I don't know why that happens, and I'll have to look up and find a solution, but that's truly entirely unrelated to fzf.

The original mapping I posted, works just fine.

Again, sorry 😢

[bitraid]

No worries, it's all good. It is frustrating though that people are rushing to give solutions that obviously come from LLMs, without first trying to reproduce the issue and check whether their suggestion works or even runs. Anyway, I guess this is something we'll have to get used to from now on.

Back to the issue: If you set $GPG_TTY in .bashrc make sure to add the interactive switch for bash (-i), otherwise use urxvt -e bash -c 'GPG_TTY=$(tty) vim'.