even stricter build phases (unset variables)

Author: eyJhb

modules/base.nix

@@ -306,7 +306,7 @@ in
 
             # Become a fake "root" in a new namespace so we can bind mount sources
             ${pkgs.toybox}/bin/cat << 'EOF' | ${pkgs.util-linux}/bin/unshare -m -r ${pkgs.runtimeShell}
-            set -e -o pipefail
+            set -euo pipefail
             source $stdenv/setup
             genericBuild
             EOF