Keystore is decoded into /dev/shm (tmpfs, RAM-only) during the build
and cleaned up on exit — never written to physical disk. ANDROID_KEYSTORE_PATH
is now required with no fallback; missing it fails loudly. Dagger CI path
updated to write to /tmp and set ANDROID_KEYSTORE_PATH accordingly.
Also fix check_ci_images.sh: filter out incomplete image tags ending in ':'
that arise from dynamic From("image:"+variable) concatenations.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
16 lines
491 B
Bash
Executable File
16 lines
491 B
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
tmp=$(mktemp /dev/shm/keystore.XXXXXX.jks)
|
|
trap "rm -f $tmp" EXIT
|
|
|
|
printf '%s' "$ANDROID_KEYSTORE_BASE64" | base64 -d > "$tmp"
|
|
|
|
ANDROID_KEYSTORE_PATH="$tmp" \
|
|
ANDROID_HOME="${ANDROID_HOME:-$HOME/Android/Sdk}" \
|
|
fvm flutter build appbundle --release --no-pub \
|
|
--build-number "$(date +%s)" \
|
|
--build-name "$(date +%y%m%d-%H%M)" \
|
|
--dart-define="GIT_HASH=$(git rev-parse --short HEAD)" \
|
|
| grep -Ev "was tree-shaken|Tree-shaking can be disabled"
|