···145145 # This installCredentials script is written so that it's as easy as
146146 # possible for a user to audit before confirming the `sudo`
147147 installCredentials = hostPkgs.writeShellScript "install-credentials" ''
148148+ set -euo pipefail
149149+148150 KEYS="''${1}"
149151 INSTALL=${hostPkgs.coreutils}/bin/install
150152 "''${INSTALL}" -g nixbld -m 600 "''${KEYS}/${user}_${keyType}" ${privateKey}
···154156 hostPkgs = config.virtualisation.host.pkgs;
155157156158 script = hostPkgs.writeShellScriptBin "create-builder" (
159159+ ''
160160+ set -euo pipefail
161161+ '' +
157162 # When running as non-interactively as part of a DarwinConfiguration the working directory
158163 # must be set to a writeable directory.
159164 (if cfg.workingDirectory != "." then ''