bootstrap script in shell

scripts/bootstrap-machine.nix

@@ -0,0 +1,31 @@
+let
+  inputs = import ../deps;
+  pkgs = import inputs.nixpkgs { };
+in
+pkgs.writeShellScriptBin "bootstrap-machine" ''
+  pushd $(git rev-parse --show-toplevel)
+  machine=$1
+  ip=$2
+  extra_args=("''${@:3}")
+  # Create a temporary directory
+  temp=$(mktemp -d)
+  # Function to cleanup temporary directory on exit
+  cleanup() {
+    rm -rf "$temp"
+  }
+  trap cleanup EXIT
+
+  # Create the directory where sshd expects to find the host keys
+  install -d -m755 "$temp/etc/ssh"
+
+  # Decrypt your private key from the password store and copy it to the temporary directory
+  rbw get "$machine"_ssh_host_ed25519_key -f notes > "$temp/etc/ssh/ssh_host_ed25519_key"
+
+  # Set the correct permissions so sshd will accept the key
+  chmod 600 "$temp/etc/ssh/ssh_host_ed25519_key"
+
+  nixos-anywhere --extra-files "$temp" --store-paths $(nix-build -A nixosConfigurations.\"$machine\".config.system.build.diskoScript) $(nix-build -A nixosConfigurations.\"$machine\".config.system.build.toplevel) "''${extra_args[@]}" root@"$ip"
+  popd
+''
+
+

scripts/bootstrap-machine.sh

@@ -1,23 +0,0 @@
-#!/usr/bin/env bash
-
-machine=$1
-ip=$2
-extra_args=("${@:3}")
-# Create a temporary directory
-temp=$(mktemp -d)
-# Function to cleanup temporary directory on exit
-cleanup() {
-  rm -rf "$temp"
-}
-trap cleanup EXIT
-
-# Create the directory where sshd expects to find the host keys
-install -d -m755 "$temp/etc/ssh"
-
-# Decrypt your private key from the password store and copy it to the temporary directory
-rbw get "$machine"_ssh_host_ed25519_key -f notes > "$temp/etc/ssh/ssh_host_ed25519_key"
-
-# Set the correct permissions so sshd will accept the key
-chmod 600 "$temp/etc/ssh/ssh_host_ed25519_key"
-
-nixos-anywhere --extra-files "$temp" --store-paths $(nix-build -A nixosConfigurations.\"$machine\".config.system.build.diskoScript) $(nix-build -A nixosConfigurations.\"$machine\".config.system.build.toplevel) "${extra_args[@]}" root@"$ip"

shell.nix

@@ -3,9 +3,10 @@ let
   pkgs = import inputs.nixpkgs { };
   nixos-anywhere = pkgs.callPackage "${inputs.nixos-anywhere}/src/default.nix" { };
   agenix = pkgs.callPackage "${inputs.agenix}/pkgs/agenix.nix" { };
+  bootstrap = import scripts/bootstrap-machine.nix;
 in
 pkgs.mkShell {
-  nativeBuildInputs = with pkgs; [ colmena npins nixos-anywhere agenix ];
+  nativeBuildInputs = with pkgs; [ colmena npins nixos-anywhere agenix bootstrap ];
 }