···

       
145
       
145
       
 
       
        # This installCredentials script is written so that it's as easy as

     

       
146
       
146
       
 
       
        # possible for a user to audit before confirming the `sudo`

     

       
147
       
147
       
 
       
        installCredentials = hostPkgs.writeShellScript "install-credentials" ''

     

       
148
       
148
       
+
       
          set -euo pipefail

     

       
149
       
149
       
+
       


     

       
148
       
150
       
 
       
          KEYS="''${1}"

     

       
149
       
151
       
 
       
          INSTALL=${hostPkgs.coreutils}/bin/install

     

       
150
       
152
       
 
       
          "''${INSTALL}" -g nixbld -m 600 "''${KEYS}/${user}_${keyType}" ${privateKey}

     
···

       
154
       
156
       
 
       
        hostPkgs = config.virtualisation.host.pkgs;

     

       
155
       
157
       
 
       


     

       
156
       
158
       
 
       
        script = hostPkgs.writeShellScriptBin "create-builder" (

     

       
159
       
159
       
+
       
          ''

     

       
160
       
160
       
+
       
            set -euo pipefail

     

       
161
       
161
       
+
       
          '' +

     

       
157
       
162
       
 
       
          # When running as non-interactively as part of a DarwinConfiguration the working directory

     

       
158
       
163
       
 
       
          # must be set to a writeable directory.

     

       
159
       
164
       
 
       
        (if cfg.workingDirectory != "." then ''