If rbw-agent is shared with container, the container cannot show pinentry properly (the vault needs to be unlocked outside of the container)

[cielavenir]

Reproduction

$ lsb_release -a
No LSB modules are available.
Distributor ID:	Debian
Description:	Debian GNU/Linux 13 (trixie)
Release:	13
Codename:	trixie

$ docker run -it -e RBW_TTY=$(tty) -v /run/user/$(id -u)/rbw:/tmp/rbw-0:ro -v $HOME/.cache/rbw:/root/.cache/rbw:rw -v $HOME/.config/rbw:/root/.config/rbw:ro -v /etc/alternatives:/etc/alternatives:ro -v /usr:/usr:ro debian:trixie

# rbw unlock

Observation

The typed master password is garbaged

Expectation

I can type master password properly

Note

When rbw-agent is not shared, pinentry works, though unlocking on host does not affect the container.

$ docker run -it -v $HOME/.cache/rbw:/root/.cache/rbw:rw -v $HOME/.config/rbw:/root/.config/rbw:ro -v /etc/alternatives:/etc/alternatives:ro -v /usr:/usr:ro debian:trixie

---

I found this when I was running https://github.com/cielavenir/docker-credential-rbw in the container.

[cielavenir]

The typed master password is garbaged also when I type RBW_TTY=(tty from another terminal simulator) rbw unlock, so it could be the pinentry spec issue