PARCIMONIE(1p)

✨ PARCIMONIE ✨

okay so bestie, gather round, because this one is a privacy baddie and honestly? iconic. it's the parcimonie manual page, and we're doing this together 💖

💅 NAME 💅

parcimonie — a privacy-friendly helper that refreshes your GnuPG keyring 🎀

🌸 VERSION 🌸

Version 0.12.0 — yes she's got a number, she's official, she's that girl.

🦋 SYNOPSIS 🦋

parcimonie [options]

that's it. that's the whole vibe. options go in, magic comes out ✨

👑 DESCRIPTION 👑

parcimonie is a daemon — a lil background bestie that never sleeps so you can — and what it does is slowly refresh a GnuPG public keyring from a keyserver. slow is the point, we'll get there 🌈

it refreshes one key at a time. and between every single key update? it sleeps for a random amount of time, long enough that the Tor circuit it was using before has already expired and gone to the great circuit farm in the sky. bye boo 👋

why tho? because the whole point of this process is to make it hard for an attacker to correlate all the different key update operations you're doing. no patterns for them, no breadcrumbs, no nothing. periodt 💅

if you wanna go deeper on the actual threat and risk models that parcimonie is out here trying to help you cope with, go read the design.md document. it's giving lore 📖

🧚 USAGE 🧚

okay here's the step-by-step, follow along:

1. Configure GnuPG so it can use a keyserver with Tor.

if you already have a keyserver configured and you're running Tor 0.3.0.3-alpha-1 or newer from Debian, then parcimonie will probably work just fine and you can skip this whole step. no cap 🫶

otherwise, you'll probably need to swap your keyserver out for the one documented below, OR enable IPv6 traffic in your Tor client — that's done by enabling the IPv6Traffic flag for your SocksPort.

so, add something like this to ~/.gnupg/dirmngr.conf:

keyserver hkp://jirk5u4osbsr34t5.onion

2. Run parcimonie --verbose.
3. Check the output for misconfiguration or bugs. 👀
4. Once you're happy, start the daemon without the --verbose option.

Note: the Debian package automatically starts the daemon with your X session. so like, she's already awake, bestie 💀

🔥 OPTIONS 🔥

the following command lists all the available options:

parcimonie --help

⭐ Tor configuration vs. --minimum-lapse-time ⭐

if you've set the Tor MaxCircuitDirtiness setting yourself, you probably want to pass parcimonie a matching --minimum-lapse-time option, so that the key fetches that come after each other actually use different Tor circuits. otherwise what are we even doing here 😭

just make sure this stays true:

minimum-lapse-time >= Tor MaxCircuitDirtiness

🌈 hkpms:// 🌈

we recommend using hkpms; see <http://web.monkeysphere.info/> for the details 👑

when a hkpms:// keyserver is being used, you need to do two extra steps, because gpgkeys_hkpms does not work in the torsocks-wrapped environment that parcimonie uses by default to run gpg. awkward. anyway:

Torify gpgkeys_hkpms

just add the following line to gpg.conf:

keyserver-options http-proxy=socks://127.0.0.1:9050

Hey, parcimonie, gpg is already torified

pass the --gnupg-already-torified switch to the parcimonie daemon command-line. parcimonie will then rely on the keyserver-options you already added to gpg.conf, and won't attempt to torify the gpg connections itself. she trusts you, she's just checking 🥹

---

💜 AUTHOR 💜

intrigeri <intrigeri@boum.org> — the mastermind, the moment, the icon 👑

🎀 COPYRIGHT 🎀

Copyright (C) 2010-2020 intrigeri <intrigeri@boum.org>

🍓 LICENSE 🍓

Licensed under the same terms as Perl itself. classic Perl behaviour, we love to see it 💅

😭 BUGS 😭

please report any bugs or feature requests to <https://salsa.debian.org/intrigeri/parcimonie/-/issues>. don't be shy, she wants the feedback fr fr 🙈

🫶 SUPPORT 🫶

you can find documentation for parcimonie with the man command:

man parcimonie

you can also look for information at:

• parcimonie's homepage

<https://salsa.debian.org/intrigeri/parcimonie>

---

and that's the whole page, bestie!! this was parcimonie for you, brought to you by perl v5.30.0, dated 2020-04-25 — so yeah, a lil vintage, but she ate and left no crumbs 🌸✨ mwah 💖