When you use keytocard to import GPG secret subkeys into a YubiKey, the secret key material in that GnuPG environment is replaced with references to the card. To keep the secret subkeys on your PC, copy them into a temporary GNUPGHOME and run keytocard there. ...
Codex and GPG Signing In my usual Git workflow, I sign commits with GPG. There is no deep reason for it, but I like seeing Verified in the GitHub commit history. git config --global commit.gpgsign true This setting itself is fine, but I ran into a small issue when asking Codex to handle Git work. When creating a commit, GPG needs the passphrase, and signing fails at that point. At first, I committed by canceling the signing step, but it felt wrong, so I decided to fix it. ...