GnuPG の概要

The GnuPG package is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described by several RFCs. GnuPG 2 is the stable version of GnuPG integrating support for OpenPGP and S/MIME.

本パッケージは LFS-11.1 において正しくビルドでき動作することが確認されています。


GnuPG 2 の依存パッケージ


Libassuan-2.5.5, libgcrypt-1.9.4, Libksba-1.6.0, npth-1.6



cURL-7.79.1, Fuse-3.10.5, ImageMagick-7.1.0-4 (for the convert utility, used for generating the documentation), libusb-1.0.24, an MTA, OpenLDAP-2.5.8, SQLite-3.36.0, texlive-20210325 (or install-tl-unx), fig2dev (for generating documentation), GNU adns


GnuPG のインストール

By default GnuPG doesn't install the deprecated gpg-zip script, but it is still needed by some programs. Make GnuPG install it with:

sed -e '/noinst_SCRIPTS = gpg-zip/c sbin_SCRIPTS += gpg-zip' \
    -i tools/

以下のコマンドを実行して GnuPG 2 をビルドします。

./configure --prefix=/usr            \
            --localstatedir=/var     \
            --sysconfdir=/etc        \
            --docdir=/usr/share/doc/gnupg-2.2.29 &&
make &&

makeinfo --html --no-split -o doc/gnupg_nochunks.html doc/gnupg.texi &&
makeinfo --plaintext       -o doc/gnupg.txt           doc/gnupg.texi &&
make -C doc html

texlive-20210325 をインストールしていて、種々のフォーマットのドキュメントを生成したい場合は、以下のコマンドを実行します。 (ps フォーマットに対しては fig2dev が必要になります。)

make -C doc pdf ps

ビルド結果をテストする場合は make check を実行します。

Note that if you have already installed GnuPG, the instructions below will overwrite /usr/share/man/man1/gpg-zip.1. Now, as the root user:

make install &&

install -v -m755 -d /usr/share/doc/gnupg-2.2.29/html            &&
install -v -m644    doc/gnupg_nochunks.html \
                    /usr/share/doc/gnupg-2.2.29/html/gnupg.html &&
install -v -m644    doc/*.texi doc/gnupg.txt \
                    /usr/share/doc/gnupg-2.2.29 &&
install -v -m644    doc/gnupg.html/* \

種々のフォーマットのドキュメントを生成した場合は root ユーザーになり以下のコマンドを実行します。

install -v -m644 doc/gnupg.{pdf,dvi,ps} \


sed ... tools/ This command is needed to build the gpg-zip program.

--docdir=/usr/share/doc/gnupg-2.2.29: This switch changes the default docdir to /usr/share/doc/gnupg-2.2.29.

--enable-all-tests: This switch allows more tests to be run with make check.

--enable-g13: This switch enables building the g13 program.


インストールプログラム: addgnupghome, applygnupgdefaults, dirmngr, dirmngr-client, g13 (optional), gpg-agent, gpg-connect-agent, gpg, gpgconf, gpgparsemail, gpgscm, gpgsm, gpgsplit, gpgtar, gpgv, gpg-wks-server, gpg-zip, kbxutil, and watchgnupg
インストールライブラリ: None
インストールディレクトリ: /usr/share/doc/gnupg-2.2.29 and /usr/share/gnupg

Short Descriptions


is used to create and populate a user's ~/.gnupg directories


is a wrapper script used to run gpgconf with the --apply-defaults parameter on all user's GnuPG home directories


is a tool that takes care of accessing the OpenPGP keyservers


is a tool to contact a running dirmngr and test whether a certificate has been revoked


is a tool to create, mount or unmount an encrypted file system container (optional)


is a daemon used to manage secret (private) keys independently from any protocol. It is used as a backend for gpg and gpgsm as well as for a couple of other utilities


is a utility used to communicate with a running gpg-agent


is the OpenPGP part of the GNU Privacy Guard (GnuPG). It is a tool used to provide digital encryption and signing services using the OpenPGP standard


is a utility used to automatically and reasonably safely query and modify configuration files in the ~/.gnupg home directory. It is designed not to be invoked manually by the user, but automatically by graphical user interfaces


is a utility currently only useful for debugging. Run it with --help for usage information


executes the given scheme program or spawns an interactive shell


is a tool similar to gpg used to provide digital encryption and signing services on X.509 certificates and the CMS protocol. It is mainly used as a backend for S/MIME mail processing


splits an OpenPGP message into packets


is a tool to encrypt or sign files into an archive


is a verify only version of gpg


provides a server for the Web Key Service protocol


encrypts or signs files into an archive


is used to list, export and import Keybox data


is used to listen to a Unix Domain socket created by any of the GnuPG tools