I suspect that the permissions are wrong:

 ▶ ls -lah /run/wrappers/bin/sudo
.r-s--x--- root wheel 17 KB Mon Mar  6 14:19:11 2023  /run/wrappers/bin/sudo

groups are fine

 ▶ id
uid=1000(sandro) gid=100(users) groups=100(users),1(wheel)

I am trying to get gpg working for my user on nixos wsl.

I have the following in my configuration.nix:

{ pkgs, config, modulesPath, ... }:

let
  #nixvim = import (builtins.fetchGit {
  #  url = "https://github.com/pta2002/nixvim";
  #});
  nixos-wsl = import ./nixos-wsl;
in
{
  imports = [
    #nixvim.nixosModules.nixvim
    nixos-wsl.nixosModules.wsl
    <home-manager/nixos>
  ];

  wsl = {
    enable = true;
    nativeSystemd = true;
    wslConf.automount.root = "/mnt";
    defaultUser = "nixos";
    startMenuLaunchers = true;

    # Enable native Docker support
    # docker-native.enable = true;

    # Enable integration with Docker Desktop (needs to be installed)
    # docker-desktop.enable = true;

  };

  # Enable nix flakes
  nix.package = pkgs.nixFlakes;
  nix.extraOptions = ''
    experimental-features = nix-command flakes
  '';

  #programs.nixvim.enable = true;

  users.users.i97henka = {
    isNormalUser = true;
    extraGroups = [ "wheel"];
  };

  home-manager.users.i97henka = { pkgs, ... }: {
    home.stateVersion = "22.11";
    home.packages = [ pkgs.jq pkgs.ripgrep pkgs.gh ];

    programs.bash = {
      enable = true;
      shellAliases = {
        ll = "ls -l";
        ".." = "cd ..";
        gst = "git status";
        glo = "git log --oneline";
        gfa = "git fetch --all";
        ggfl = "git push --force-with-lease";
      };
    };

    programs.git.enable = true;
    programs.direnv.enable = true;
    programs.direnv.nix-direnv.enable = true;
    programs.fzf.enable = true;
    programs.bat.enable = true;

    programs.gpg.enable = true;

    programs.neovim = {
      enable = true;
      defaultEditor = true;
      viAlias = true;
      vimAlias = true;
      vimdiffAlias = true;
    };
  };


  environment.systemPackages = with pkgs; [
    bat
    git
    vim
  ];

  system.stateVersion = "22.11";
}

I have added programs.gpg.enable = true;
but it didn't improve things.

I have seen this discourse thread:
https://discourse.nixos.org/t/cant-get-gnupg-to-work-no-pinentry/15373

but I am not sure how to apply it to my configuration.nix - I only added gpg in the home manager part - but maybe it should
be in a different part?

Thank you for chatting back K900 .
This is the command and the error:
gpg --symmetric --cipher-algo AES256 file_with_secrets.env

gpg: problem with the agent: No pinentry
gpg: error creating passphrase: Operation cancelled
gpg: symmetric encryption of 'file_with_secrets.env' failed: Operation cancelled

I change my configuration.nix, and I had problems previously to write a correct one, but now I got it through the sudo nixos-rebuild switch.

{ pkgs, config, modulesPath, ... }:

let
  #nixvim = import (builtins.fetchGit {
  #  url = "https://github.com/pta2002/nixvim";
  #});
  nixos-wsl = import ./nixos-wsl;
in
{
  imports = [
    #nixvim.nixosModules.nixvim
    nixos-wsl.nixosModules.wsl
    <home-manager/nixos>
  ];

  wsl = {
    enable = true;
    nativeSystemd = true;
    wslConf.automount.root = "/mnt";
    defaultUser = "nixos";
    startMenuLaunchers = true;

    # Enable native Docker support
    # docker-native.enable = true;

    # Enable integration with Docker Desktop (needs to be installed)
    # docker-desktop.enable = true;

  };

  # Enable nix flakes
  nix.package = pkgs.nixFlakes;
  nix.extraOptions = ''
    experimental-features = nix-command flakes
  '';


  #programs.nixvim.enable = true;

  users.users.i97henka = {
    isNormalUser = true;
    extraGroups = [ "wheel"];
  };

  home-manager.users.i97henka = { pkgs, ... }: {
    home.stateVersion = "22.11";
    home.packages = [ pkgs.jq pkgs.ripgrep pkgs.gh ];

    programs.bash = {
      enable = true;
      shellAliases = {
        ll = "ls -l";
        ".." = "cd ..";
        gst = "git status";
        glo = "git log --oneline";
        gfa = "git fetch --all";
        ggfl = "git push --force-with-lease";
      };
    };



    programs.git.enable = true;
    programs.direnv.enable = true;
    programs.direnv.nix-direnv.enable = true;
    programs.fzf.enable = true;
    programs.bat.enable = true;

    #programs.gpg.enable = true;


    programs.neovim = {
      enable = true;
      defaultEditor = true;
      viAlias = true;
      vimAlias = true;
      vimdiffAlias = true;
    #  plugins = with pkgs.vimPlugins; [
        #nvim-lspconfig
        #nvim-treesitter.withAllGrammars
        #plenary-nvim
        #gruvbox-material
        #mini-nvim
    #  ];
    };
  };


  environment.systemPackages = with pkgs; [
    bat
    git
    vim
  ];

  programs.gnupg.agent = {
    enable = true;
    enableSSHSupport = true;
    pinentryFlavor = "curses";
  };

  system.stateVersion = "22.11";
}

Sorry about the long config file chat.
That worked on my nixos user - now I can generate the env.gpg file.

good point - same one let me share:

gpg --symmetric --cipher-algo AES256 file_with_secrets.env

gpg: problem with the agent: No pinentry
gpg: error creating passphrase: Operation cancelled
gpg: symmetric encryption of 'file_with_secrets.env' failed: Operation cancelled

[i97henka@nixos:~/github]$ which gpg
/run/current-system/sw/bin/gpg

That looks a bit unusual to me, but I haven't got much unix experience 😄