pyrox.dev
Merge pull request #293846 from amarshall/darwin-linux-builder-fail-on-error
darwin.linux-builder: Exit scripts on error
authored by Robert Hensing and committed by GitHub ecbeabd1 5f583a11
+5
nixos/modules/profiles/macos-builder.nix
+5
nixos/modules/profiles/macos-builder.nix
···
145
# This installCredentials script is written so that it's as easy as
146
# possible for a user to audit before confirming the `sudo`
147
installCredentials = hostPkgs.writeShellScript "install-credentials" ''
148
KEYS="''${1}"
149
INSTALL=${hostPkgs.coreutils}/bin/install
150
"''${INSTALL}" -g nixbld -m 600 "''${KEYS}/${user}_${keyType}" ${privateKey}
···
154
hostPkgs = config.virtualisation.host.pkgs;
155
156
script = hostPkgs.writeShellScriptBin "create-builder" (
157
# When running as non-interactively as part of a DarwinConfiguration the working directory
158
# must be set to a writeable directory.
159
(if cfg.workingDirectory != "." then ''
···
145
# This installCredentials script is written so that it's as easy as
146
# possible for a user to audit before confirming the `sudo`
147
installCredentials = hostPkgs.writeShellScript "install-credentials" ''
148
+
set -euo pipefail
149
+
150
KEYS="''${1}"
151
INSTALL=${hostPkgs.coreutils}/bin/install
152
"''${INSTALL}" -g nixbld -m 600 "''${KEYS}/${user}_${keyType}" ${privateKey}
···
156
hostPkgs = config.virtualisation.host.pkgs;
157
158
script = hostPkgs.writeShellScriptBin "create-builder" (
159
+
''
160
+
set -euo pipefail
161
+
'' +
162
# When running as non-interactively as part of a DarwinConfiguration the working directory
163
# must be set to a writeable directory.
164
(if cfg.workingDirectory != "." then ''