README.Fedora - keychain opt-in keychain is a manager for both ssh-agent and gpg-agent. It allows your shells and cron jobs to share a single ssh-agent or gpg-agent process. keychain typically runs from the login shell environment setting, i.e. ~/.bash_profile when using bash or ~/.login when running a tcsh shell. It's general usage and different options are documented in keychain(1). Installed from Fedora Extras keychain can be easily activated by simply touching an empty ~/.keychainrc file when using either bash, sh, ksh, zsh, csh or tcsh. This will let the user's shell invoke a default setup of keychain where it loads all user's ssh keys from ~/.ssh/ to an ssh-agent process. gpg keys are not loaded by default as the necessary gpg-agent is not part of the Fedora Core gnupg package, but provided by the additional gnupg2 package of Fedora Extras. The default setup starts keychain in quiet mode, so only messages are printed out in case of warnings, errors or if interactivity is required. To override the default settings with which keychain is activated when the shell environment finds a ~/.keychainrc, the user can customize following variables by setting them inside the ~/.keychainrc. KCHOPTS="" This variable takes options for keychain like "--nocolor" or "--noask". Please see the keychain manpage for a full list. SSHKEYS="" Instead of loading all keys the user can list those keys to be loaded by their file names. The key list has to be space separated. GPGKEYS="" gpg keys to be loaded by keychain have to be specified by their key ID. The user can get a full list of keys and IDs in his secret keyring by running `gpg --list-secret-keys'. GPGKEYS defines a single key ID or a space separated list of key IDs. Please be aware that you still need to source the keychain file with the ssh-agent environment variables along with the crontab entry when you want to make use of ssh public key auth or of gpg signing through cron jobs, because cron uses a non-interactive shell and has a limited environment set. Note: This opt-in is not part of keychain, which is originally written by Daniel Robbins <drobbins@gentoo.org>, but added to the Fedora Extras package of keychain to allow Fedora users an overall ease of use.