gpg needs to be called with --no-tty at that point, since pintentry-tty is used to enter passphrase. Else, gpg complaints of not being able to open /dev/tty, even though GPG_TTY environmenent variable is forced in init

initrd/bin/kexec-sign-config

@@ -49,7 +49,7 @@ if [ -z "$param_files" ]; then
 fi
 
 for tries in 1 2 3; do
-	if sha256sum $param_files | gpg \
+	if sha256sum $param_files | gpg --no-tty\
 		--digest-algo SHA256 \
 		--detach-sign \
 		-a \