From 0d17ab2ac89787c181caa6aa07be517f7ef667f7 Mon Sep 17 00:00:00 2001
From: Tom Foster <tom@tcpip.uk>
Date: Tue, 23 Apr 2024 16:32:14 +0100
Subject: [PATCH] Sudo tee to write config changes

---
 .github/workflows/ci.yml | 30 +++++++++++++++++-------------
 1 file changed, 17 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2bcb04f9..cdfa1d8f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -40,23 +40,27 @@ jobs:
 
             - name: Apply custom Nix configuration
               run: |
-                  sudo echo "experimental-features = nix-command flakes" >> /etc/nix/nix.conf
-                  sudo echo "extra-substituters = https://nix-community.cachix.org" >> /etc/nix/nix.conf
-                  sudo echo "extra-trusted-public-keys = nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=" >> /etc/nix/nix.conf
-                  sudo echo "extra-substituters = https://crane.cachix.org" >> /etc/nix/nix.conf
-                  sudo echo "extra-trusted-public-keys = crane.cachix.org-1:8Scfpmn9w+hGdXH/Q9tTLiYAE/2dnJYRJP7kl80GuRk=" >> /etc/nix/nix.conf
-                  sudo echo "extra-substituters = https://nix.computer.surgery/conduit" >> /etc/nix/nix.conf
-                  sudo echo "extra-trusted-public-keys = conduit:ZGAf6P6LhNvnoJJ3Me3PRg7tlLSrPxcQ2RiE5LIppjo=" >> /etc/nix/nix.conf
-                  sudo echo "extra-substituters = https://attic.kennel.juneis.dog/conduit" >> /etc/nix/nix.conf
-                  sudo echo "extra-trusted-public-keys = conduit:Isq8FGyEC6FOXH6nD+BOeAA+bKp6X6UIbupSlGEPuOg=" >> /etc/nix/nix.conf
-                  sudo echo "extra-substituters = https://attic.kennel.juneis.dog/conduwuit" >> /etc/nix/nix.conf
-                  sudo echo "extra-trusted-public-keys = conduwuit:lYPVh7o1hLu1idH4Xt2QHaRa49WRGSAqzcfFd94aOTw=" >> /etc/nix/nix.conf
+                  sudo tee -a /etc/nix/nix.conf > /dev/null <<EOF
+                  experimental-features = nix-command flakes
+                  extra-substituters = https://nix-community.cachix.org
+                  extra-trusted-public-keys = nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
+                  extra-substituters = https://crane.cachix.org
+                  extra-trusted-public-keys = crane.cachix.org-1:8Scfpmn9w+hGdXH/Q9tTLiYAE/2dnJYRJP7kl80GuRk=
+                  extra-substituters = https://nix.computer.surgery/conduit
+                  extra-trusted-public-keys = conduit:ZGAf6P6LhNvnoJJ3Me3PRg7tlLSrPxcQ2RiE5LIppjo=
+                  extra-substituters = https://attic.kennel.juneis.dog/conduit
+                  extra-trusted-public-keys = conduit:Isq8FGyEC6FOXH6nD+BOeAA+bKp6X6UIbupSlGEPuOg=
+                  extra-substituters = https://attic.kennel.juneis.dog/conduwuit
+                  extra-trusted-public-keys = conduwuit:lYPVh7o1hLu1idH4Xt2QHaRa49WRGSAqzcfFd94aOTw=
+                  EOF
 
             - name: Add alternative Nix binary caches if specified
               if: ${{ (env.ATTIC_ENDPOINT != '') && (env.ATTIC_PUBLIC_KEY != '') }}
               run: |
-                  sudo echo "extra-substituters = ${{ env.ATTIC_ENDPOINT }}" >> /etc/nix/nix.conf
-                  sudo echo "extra-trusted-public-keys = ${{ env.ATTIC_PUBLIC_KEY }}" >> /etc/nix/nix.conf
+                  sudo tee -a /etc/nix/nix.conf > /dev/null <<EOF
+                  extra-substituters = ${{ env.ATTIC_ENDPOINT }}
+                  extra-trusted-public-keys = ${{ env.ATTIC_PUBLIC_KEY }}
+                  EOF
 
             - name: Install and activate `direnv`
               run: |