gpg

modules/home/gpg/default.nix

@@ -3,6 +3,14 @@
   programs = {
     gpg = {
       enable = true;
+      settings = {
+        # Disable keyboxd (GPG 2.4+ default). keyboxd uses a SQLite-backed
+        # database that gets corrupted easily and is not compatible with the
+        # classic pubring.kbx format used by gpg-agent. Use the legacy keybox
+        # format instead, which is stable and works with home-manager's
+        # publicKeys import mechanism.
+        no-use-keyboxd = true;
+      };
       scdaemonSettings = {
         disable-ccid = true;
         pcsc-shared = true;