This repo contains encrypted environment variables, secrets, and setup scripts used by Divvun CI. It's used by the taskcluster-gha repo. During a CI run, this repo is downloaded and decrypted with $DIVVUN_KEY, which is stored in taskcluster secrets (you'll need access).
The following command will decrypt and decompress everything into a folder called enc/:
openssl aes-256-cbc -d -in ./config.txz.enc -pass pass:$DIVVUN_KEY -md md5 | xz -d | tar xvf -
Take the unencrypted data and run:
tar cf - enc | xz -9c | openssl aes-256-cbc -md md5 -pass pass:$DIVVUN_KEY -out config.txz.enc
Commit the encrypted file, delete the unencrypted content.
For development purposes, the unencrypted Android store dev.jks is added. This is purely for testing locally, but normally signing should be done on CI.
Store parameters:
- keyAlias: "developmentStore"
- storePassword: "amazingStorePassword"
- keyPassword: "amazingKeyPassword",