aboutsummaryrefslogtreecommitdiff
path: root/scripts/build-release
diff options
context:
space:
mode:
authorCraig Jennings <c@cjennings.net>2026-02-23 06:06:55 -0600
committerCraig Jennings <c@cjennings.net>2026-02-23 06:06:55 -0600
commit499b3da410f92d58fed05e1a0cb68c3a20421b69 (patch)
tree00cc8eccd698785d53fe4541b334f3aa71651d5b /scripts/build-release
parentb37f0b357bb2ad7da0d2de311540af5553de96cd (diff)
downloadarchangel-499b3da410f92d58fed05e1a0cb68c3a20421b69.tar.gz
archangel-499b3da410f92d58fed05e1a0cb68c3a20421b69.zip
chore: add set -euo pipefail to scripts for safety
Enable undefined variable checking (set -u) and pipefail across standalone scripts. Guard SUDO_USER references with ${SUDO_USER:-} for set -u compatibility.
Diffstat (limited to 'scripts/build-release')
-rwxr-xr-xscripts/build-release6
1 files changed, 3 insertions, 3 deletions
diff --git a/scripts/build-release b/scripts/build-release
index 2fbf004..9c6614e 100755
--- a/scripts/build-release
+++ b/scripts/build-release
@@ -12,13 +12,13 @@
# - $ARCHSETUP_INBOX (notification for test VM rebuild, if set)
# - $DIST_REMOTE_HOST:$DIST_REMOTE_PATH (if set and reachable)
-set -e
+set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
PROJECT_DIR="$(dirname "$SCRIPT_DIR")"
# Get actual user (not root when running with sudo)
-if [[ -n "$SUDO_USER" ]]; then
+if [[ -n "${SUDO_USER:-}" ]]; then
REAL_USER="$SUDO_USER"
REAL_HOME=$(getent passwd "$SUDO_USER" | cut -d: -f6)
else
@@ -140,7 +140,7 @@ distribute_remote() {
# Run SCP as the real user (not root) to use their SSH keys
local scp_cmd="scp"
- if [[ -n "$SUDO_USER" ]]; then
+ if [[ -n "${SUDO_USER:-}" ]]; then
scp_cmd="sudo -u $SUDO_USER scp"
fi