Active Record Encryption, test environment, without config/master.key, on CI

test.rb.diff

 require "active_support/core_ext/integer/time"

 # The test environment is used exclusively to run your application's
 # test suite. You never need to work with it otherwise. Remember that
 # your test database is "scratch space" for the test suite and is wiped
 # and recreated between test runs. Don't rely on the data there!

 Rails.application.configure do
   # Settings specified here will take precedence over those in config/application.rb.

   # Turn false under Spring and add config.action_view.cache_template_loading = true.
   config.cache_classes = true

   # Eager loading loads your whole application. When running a single test locally,
   # this probably isn't necessary. It's a good idea to do in a continuous integration
   # system, or in some way before deploying your code.
   config.eager_load = ENV["CI"].present?

   # Configure public file server for tests with Cache-Control for performance.
   config.public_file_server.enabled = true
   config.public_file_server.headers = {
     "Cache-Control" => "public, max-age=#{1.hour.to_i}"
   }

   # Show full error reports and disable caching.
   config.consider_all_requests_local       = true
   config.action_controller.perform_caching = false
   config.cache_store = :null_store

   # Raise exceptions instead of rendering exception templates.
   config.action_dispatch.show_exceptions = false

   # Disable request forgery protection in test environment.
   config.action_controller.allow_forgery_protection = false

   # Store uploaded files on the local file system in a temporary directory.
   config.active_storage.service = :test

   config.action_mailer.perform_caching = false

   # Tell Action Mailer not to deliver emails to the real world.
   # The :test delivery method accumulates sent emails in the
   # ActionMailer::Base.deliveries array.
   config.action_mailer.delivery_method = :test

   # Print deprecation notices to the stderr.
   config.active_support.deprecation = :stderr

   # Raise exceptions for disallowed deprecations.
   config.active_support.disallowed_deprecation = :raise

   # Tell Active Support which deprecation messages to disallow.
   config.active_support.disallowed_deprecation_warnings = []

   # Raises error for missing translations.
   # config.i18n.raise_on_missing_translations = true

   # Annotate rendered view with file names.
   # config.action_view.annotate_rendered_view_with_filenames = true
+
+  config.active_record.encryption.primary_key = "0" * 32
+  config.active_record.encryption.key_derivation_salt = "0" * 32
 end

"0" * 32 is modifiable as you like. 32 bytes string is required.

Trackback https://twitter.com/ka_/status/1639514258773004288

To fix the error below:

ActiveRecord::Encryption::Errors::Configuration:
  key_derivation_salt is not configured. Please configure it via credential active_record_encryption.key_derivation_salt or by setting config.active_record.encryption.key_derivation_salt

Do you want to add this into config/initializers/foo_bar.rb ?

Like this:

config/initializers/active_record_encryption_for_test.rb

return unless Rails.env.test?

Rails.application.configure do
  config.active_record.encryption.primary_key = "0" * 32
  config.active_record.encryption.key_derivation_salt = "0" * 32
end

It doesn't affect.

I have no idea about this behavior.