Android CI: Generate signed apk

.github/workflows/android.yml

@@ -16,10 +16,15 @@ jobs:
     - name: Build
       run: |
         cd android
+        echo "${{ secrets.KEYSTORE_BASE64 }}" | base64 -d > keystore.jks
         ANDROID_NDK_HOME=$ANDROID_SDK_ROOT/ndk-bundle ./gradlew assembleRelease
+      env:
+        KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
+        KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
+        KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
 
     - name: Upload artifacts
       uses: actions/upload-artifact@v3
       with:
-        name: system3-release-unsigned-apk
-        path: android/app/build/outputs/apk/release/app-release-unsigned.apk
+        name: system3-apk
+        path: android/app/build/outputs/apk/release/app-release.apk

.gitignore

@@ -1,5 +1,6 @@
 out
 android/.gradle
+android/keystore.jks
 android/app/.externalNativeBuild
 android/app/build
 android/app/src/main/assets

android/app/build.gradle

@@ -26,10 +26,19 @@ android {
             }
         }
     }
+    signingConfigs {
+        release {
+            storeFile rootProject.file('keystore.jks')
+            storePassword System.getenv('KEYSTORE_PASSWORD')
+            keyAlias System.getenv('KEY_ALIAS')
+            keyPassword System.getenv('KEY_PASSWORD')
+        }
+    }
     buildTypes {
         release {
             minifyEnabled false
             proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro'
+            signingConfig signingConfigs.release
         }
     }
     applicationVariants.all { variant ->