sops/gpg key-pair generation

sops-gpg.sh

# generate a key pair
#   1. choose RSA
#   2. make sure the key does not expire
#   3. don't use a passphrase
gpg --full-generate-key

# export private key in ascii format
gpg --output ci.private.key --armor --export-secret-key your-mail@gmail.com

# export public key in ascii format
gpg --output ci.public.key --armor --export your-mail@gmail.com

# get fingerprint
gpg --list-key your-mail@gmail.com | grep -E [A-Z0-9]{40}