How do you create secret with pass option?

[Pshemas]

I'm trying to get secrets working with GPG encryption via pass driver on Rocky 10 with no luck so far. How do you do it? Any working examples?

The docs are severely lacking in this instance:

https://docs.podman.io/en/v5.3.0/markdown/podman-secret-create.1.html

I've created GPG key and I can seet it via gpg --list-secret-keys --keyid-format=long.
I've created config/containers/containers.conf and added this :

[secrets]
driver = "pass"

[secrets.opts]
root = "~/.password-store"
key = "B687958B34BD86075D875C74BA57BF38BAC22C48"

Followed it by podman system migrate.
But when I try to add secret with echo -n "SuperSecretPassword123" | podman secret create db_pass --driver=pass - I get invalid key error.

When I try without containers.conf and this command (after creating file with secret):

podman secret create --driver=pass my_secret ./secret.txt.gpg

I get completely unhelpful "exit status 2".

[gutizar]

Did you get this one working? I am having the exact same issue.

[tgerczei]

I did now - turns out this really uses the pass utility, so you need to have that and initialize it in addition to GPG, which it depends on and requires a trusted key. (Secrets created with this driver then end up in the password store you have created with and are accessible also via "pass".)