PIUS(1)

💖 PIUS(1) — PGP Individual UID Signer 💖

okay bestie, so this is a General Commands Manual page for pius, and it's genuinely one of the most useful little tools out there, no cap. let's get into it ✨

✨ NAME ✨

pius — PGP Individual UID Signer 🫶

🌸 SYNOPSIS 🌸

pius [options] -s <signer-keyid> <keyid> [ <keyid>  ... ]
pius [options] -A -r <keyring-path> -s <signer-keyid>

🦋 DESCRIPTION 🦋

so like. pius is a tool for individually signing all of the UIDs on a set of keys, and then emailing an encrypted copy of each such signature to the email address associated with that UID. the way that it does them one at a time is the whole point, iykyk 💅

and the consequences of that? iconic honestly:

• the recipient can choose which signatures to import — their inbox, their rules 💖
• signatures of inactive uids are not delivered at all 🙈
• and it greatly reduces time and error when signing keys, which is the part where you're like "wait this used to take me all afternoon" 😭

it's giving "I have my life together." periodt.

💅 OPTIONS 💅

• --version — show program's version number and exit 👋
• -h, --help — show this help message and exit 🫶
• -A, --all-keys — sign all keys on the keyring. requires -r. ⚠️
• -d, --debug — enable debugging output 🔍
• -b PATH, --gpg-path=PATH — path to the gpg binary. [default: /usr/bin/gpg2] 🛠️
• -e, --encrypt-outfiles — encrypt the output files with their respective keys 🔐
• -H HOSTNAME, --mail-host=HOSTNAME — hostname of the SMTP server. [default: localhost] 📮
• -I, --import — also import the unsigned keys from the keyring into the default keyring. it gets ignored if -r isn't specified, or if it's the same as the default keyring. 💫
• -m FROM-EMAIL, --mail=FROM-EMAIL — email the encrypted, signed keys to the respective email addresses, using FROM-EMAIL as the sender. see also -H and -P. ✉️
• -M FILE, --mail-text=FILE — use the text in FILE as the body of the email when sending out emails, instead of the default text. to see the default text, use --print-default-email. requires -m. 📝
• -N, --no-sort-keyring — do not sort the keyring by name. 🙅
• -n TO-EMAIL, --override-email=TO-EMAIL — rather than send to the user, send to this address. mostly useful for debugging. 🐛
• -o OUTPUT-DIR, --out-dir=OUTPUT-DIR — directory to put signed keys in. [default: /tmp/pius_out] 📁
• -O, --no-pgp-mime — do not use PGP/Mime when sending email. 📧
• -P PORT, --mail-port=PORT — port of the SMTP server. [default: 587] 🔌
• -r KEYRING, --keyring=KEYRING — the keyring to use. be sure to specify a full or relative path — just a filename will cause GPG to assume relative to ~/.gnupg. [default: ~/.gnupg/pubring.gpg] 🗝️
• -s SIGNER-KEYID, --signer=SIGNER-KEYID — the keyid to sign with (required). 👑
• -f KEYID, --force-signer=KEYID — force GnuPG to use this exact keyid to sign (do not guess the subkey). 🎯
• -S, --no-mail-tls — do not use STARTTLS when talking to the SMTP server. 🚫
• -t TEMP-DIR, --tmp-dir=TEMP-DIR — directory to put temporary stuff in. [default: /tmp/pius_tmp] 🗂️
• -T, --print-default-email — print the default email. 🖨️
• -u USER, --mail-user=USER — authenticate to the SMTP server with username USER. you will be prompted for the password. 🔑
• -U POLICY-URL, --policy-url=POLICY-URL — policy URL to include in each signature. 🌐
• -v, --verbose — be more verbose. 🗣️

real talk bestie: -A and -M both have requirements attached (-r and -m respectively), and -I will straight up get ignored in certain cases. read the fine print, it's not being dramatic, it's just facts 💀

👑 AUTHOR 👑

PIUS was written by Phil Dibowitz <phil@ipom.com> 💜

This manual page was written by Luke Cycon <lcycon@gmail.com> and Felix Lechner <felix.lechner@gmail.com> for the Debian project, but may be used by others. 🌈

okay that's the whole page, mwah 💋 this one's dated DECEMBER 2016 and it lives in the General Commands Manual section — so go sign some keys, bestie, you're gonna slay ✨💖🎀