Sign APK builds from CI

.drone.yml

@@ -103,17 +103,23 @@ steps:
 - name: mobile_app_build
   image: ghcr.io/cirruslabs/flutter:latest
   depends_on:
-  - backend_build # prevent synchronous backend & frontend build
+  #temp - backend_build # prevent synchronous backend & frontend build
   - mobile_app_code_quality
-  when:
-    event:
-      - tag
+  #temp when:
+  #temp   event:
+  #temp     - tag
+  environment:
+    JKS_KEYSTORE:
+      from_secret: JKS_KEYSTORE
+    JKS_KEYSTORE_PASSWORD:
+      from_secret: JKS_KEYSTORE_PASSWORD
   volumes:
   - name: release
     path: /tmp/release
   commands:
   - cd moneymgr_mobile
   - flutter --disable-analytics
+  - bash android/ci_write_keystore.sh
   - flutter pub get --enforce-lockfile
   - dart run build_runner build
   - flutter build apk

moneymgr_mobile/android/ci_write_keystore.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+SCRIPT_DIR="$(temp=$( realpath "$0"  ) && dirname "$temp")"
+
+KEYSTORE_PATH="$SCRIPT_DIR/keystore.jks"
+PROPERTIES_PATH="$SCRIPT_DIR/publish_key.properties"
+
+[ ! -n "$JKS_KEYSTORE" ] && echo 'Missing JKS_KEYSTORE variable!'&& exit 1
+[ ! -n "$JKS_KEYSTORE_PASSWORD" ] && echo 'Missing JKS_KEYSTORE_PASSWORD variable!' && exit 1
+
+# Write keystore
+echo $JKS_KEYSTORE | base64 -d > "$KEYSTORE_PATH"
+
+# Write keystore config
+cat > "$PROPERTIES_PATH" <<_EOF
+storePassword=$JKS_KEYSTORE_PASSWORD
+keyPassword=$JKS_KEYSTORE_PASSWORD
+keyAlias=moneymgr
+storeFile="$KEYSTORE_PATH"
+_EOF