ci: added ci parameter to shell.nix to enable strict error checking for bash scripts

Author: CMCDragonkai

.gitlab-ci.yml

@@ -50,7 +50,7 @@ check:lint:
   needs: []
   script:
     - >
-      nix-shell --run '
+      nix-shell --arg ci true --run $'
       npm run lint;
       npm run lint-shell;
       '
@@ -82,8 +82,8 @@ check:test-generate:
   needs: []
   script:
     - >
-      nix-shell --run '
-      ./scripts/check-test-generate.sh > ./tmp/check-test.yml
+      nix-shell --arg ci true --run $'
+      ./scripts/check-test-generate.sh > ./tmp/check-test.yml;
       '
   artifacts:
     when: always
@@ -124,7 +124,7 @@ build:merge:
     # Required for `gh pr create`
     - git remote add upstream "$GH_PROJECT_URL"
     - >
-      nix-shell --run '
+      nix-shell --arg ci true --run $'
       gh pr create \
         --head staging \
         --base master \
@@ -149,7 +149,7 @@ build:dist:
   needs: []
   script:
     - >
-      nix-shell --run '
+      nix-shell --arg ci true --run $'
       npm run build --verbose;
       '
   artifacts:
@@ -167,8 +167,8 @@ build:platforms-generate:
   needs: []
   script:
     - >
-      nix-shell --run '
-      ./scripts/build-platforms-generate.sh > ./tmp/build-platforms.yml
+      nix-shell --arg ci true --run $'
+      ./scripts/build-platforms-generate.sh > ./tmp/build-platforms.yml;
       '
   artifacts:
     when: always
@@ -210,7 +210,7 @@ build:prerelease:
     - echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > ./.npmrc
     - echo 'Publishing library prerelease'
     - >
-      nix-shell --run '
+      nix-shell --arg ci true --run $'
       npm publish --tag prerelease --access public;
       '
   after_script:
@@ -391,10 +391,7 @@ integration:prerelease:
   script:
     - echo 'Publishing application prerelease'
     - >
-      nix-shell --run $'
-      set -o errexit;
-      set -o nounset;
-      set -o pipefail;
+      nix-shell --arg ci true --run $'
       if gh release view "$CI_COMMIT_TAG" --repo "$GH_PROJECT_PATH" >/dev/null; then \
         gh release \
           upload "$CI_COMMIT_TAG" \
@@ -422,10 +419,7 @@ integration:prerelease:
       '
     - echo 'Prereleasing container image'
     - >
-      nix-shell --run $'
-      set -o errexit;
-      set -o nounset;
-      set -o pipefail;
+      nix-shell --arg ci true --run $'
       skopeo login \
         --username "$CI_REGISTRY_USER" \
         --password "$CI_REGISTRY_PASSWORD" \
@@ -469,7 +463,7 @@ integration:merge:
     GIT_DEPTH: 0
   script:
     - >
-      nix-shell --run '
+      nix-shell --arg ci true --run $'
       printf "Pipeline Succeeded on ${CI_PIPELINE_ID} for ${CI_COMMIT_SHA}\n\n${CI_PIPELINE_URL}" \
       | gh pr comment staging \
         --body-file - \
@@ -538,11 +532,11 @@ release:distribution:
     - echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > ./.npmrc
     - echo 'Publishing library & application release'
     - >
-      nix-shell --run $'
+      nix-shell --arg ci true --run $'
       npm publish --access public;
       '
     - >
-      nix-shell --run $'
+      nix-shell --arg ci true --run $'
       gh release \
         create "$CI_COMMIT_TAG" \
         builds/*.closure.gz \
@@ -557,7 +551,7 @@ release:distribution:
       '
     - echo 'Releasing container image'
     - >
-      nix-shell --run $'
+      nix-shell --arg ci true --run $'
       skopeo login \
         --username "$CI_REGISTRY_USER" \
         --password "$CI_REGISTRY_PASSWORD" \

shell.nix

@@ -1,4 +1,4 @@
-{ pkgs ? import ./pkgs.nix {} }:
+{ pkgs ? import ./pkgs.nix {}, ci ? false }:
 
 with pkgs;
 let
@@ -20,7 +20,15 @@ in
       . ./.env
       set +o allexport
       set -v
-
+      ${
+        lib.optionalString ci
+        ''
+        set -o errexit
+        set -o nounset
+        set -o pipefail
+        shopt -s inherit_errexit
+        ''
+      }
       mkdir --parents "$(pwd)/tmp"
 
       # Built executables and NPM executables