Feature request: File Encryption Support Using GnuPG

[Ratler]

Overview

I would like to propose the addition of a file encryption feature that utilizes GnuPG (and potentially other encryption implementations). This feature would enhance security by ensuring that files are encrypted before being stored in Git.

Key feature suggestions:

1. Encryption Enforcement:
   ▪ Automatically encrypt files before they are committed to the Git repository.

   ▪ Provide an option to enforce encryption for specific file or directories.


2. Key Configuration:
   ▪ Allow users to configure the GnuPG key ID to be used for encryption (recipient).

3. Decryption Options:
   ▪ Implement a command for manual decryption of files or directories as needed.

   ▪ Enable automatic decryption of files or directories when pulling from the repository.

[zx8]

Might I suggest age for the first pass of this feature? Assuming the author wants to add it to begin with. It's written in Go and a more modern take on GPG.

[Ratler]

Might I suggest age for the first pass of this feature? Assuming the author wants to add it to begin with. It's written in Go and a more modern take on GPG.

The main reason for GnuPG is to be able to use hardware tokens for decryption, like a YubiKey.

[reneleonhardt]

@Ratler Is the https://github.com/str4d/age-plugin-yubikey not working for your keys?

[reneleonhardt]

In danger of reinventing the wheel, wouldn't it be easier to use https://github.com/getsops/sops which already supports age and PGP?

[Ratler]

@Ratler Is the https://github.com/str4d/age-plugin-yubikey not working for your keys?

@reneleonhardt I don't, since I use GPG/PGP for other purposes already, so adding one additional tool when there is a good standard already doesn't make much sense. :)

[reneleonhardt]

I understand, but then you may have to wait a little longer until someone takes the time to implement your feature request ;)
age and sops are both usable as go libraries which are arguably easier to integrate into an existing app.

[reneleonhardt]

Another solution would be to let the user do the encryption/decryption automatically instead of lnk implementing it with a lot of effort.
https://github.com/maxisam/git-crypt#using-git-crypt

brew install git-crypt
cd ~/.config/lnk
git-crypt init
echo ".* filter=git-crypt diff=git-crypt" >> .gitattributes

Edit: The original repo isn't maintained anymore.