How do I provide credentials for Gradle Wrapper without embedding them in my project's gradle-wrapper.properties file?

Question

In order to bootstrap Gradle-Wrapper, I need to pull the Gradle distribution from an Artifactory which requires HTTP Basic-Auth. There's no way for my build environment to access the outside world - this is blocked by the corporate proxy. My problem is how to provide the credentials so that Gradle can bootstrap.

The Gradle documentation suggests putting the username & password into gradle-werapper.properties.

If I put gradle-wrapper.properties into my project then anybody who has access to my source code would would have access to my credentials. Alternatively, if I put the gradle-wrapper.properties file into my build image then all of my builds will be tied to the same credentials. Neither of these are acceptable.

What I'd much rather do is have Gradle Wrapper pick up it's credentials from environment variables. My run-time environment makes it very easy to provide the credentials in the right way - but is there a way to make Gradle consume the credentials from an environment variable?

Answer 1

From the documents you gave. In {user.home} directory create .gradle folder if it does not exist. enter gradle.properties:

systemProp.gradle.wrapperUser=username
systemProp.gradle.wrapperPassword=password

now all you need is distributionUrl to point to your URL, and gradle will handle credentials.