pipe nix-shell env through buil;d task

bob/nix-builder/nix_builder.go

@@ -2,11 +2,11 @@ package nixbuilder
 
 import (
 	"fmt"
-	"os"
 
 	"github.com/benchkram/bob/pkg/boblog"
 	"github.com/benchkram/bob/pkg/envutil"
 	"github.com/benchkram/bob/pkg/file"
+	"github.com/benchkram/bob/pkg/filehash"
 	"github.com/benchkram/errz"
 
 	"github.com/benchkram/bob/bob/bobfile"
@@ -101,9 +101,9 @@ func (n *NB) BuildNixDependencies(ag *bobfile.Bobfile, buildTasksInPipeline, run
 		nixShellEnv, err := nix.NixShell(ag.Shell)
 		errz.Fatal(err)
 
-		f, err := os.ReadFile(ag.Shell)
+		hash, err := filehash.Hash(ag.Shell)
 		errz.Fatal(err)
-		hash := envutil.Hash(string(f))
+
 		n.envStore[envutil.Hash(hash)] = nixShellEnv
 		for _, name := range buildTasksInPipeline {
 			t := ag.BTasks[name]

pkg/nix/nix.go

@@ -349,21 +349,21 @@ func NixShell(path string) ([]string, error) {
 	args = append(args, []string{"--pure", "--command", "env"}...)
 	args = append(args, path)
 	cmd := exec.Command("nix-shell", args...)
+	boblog.Log.V(5).Info(fmt.Sprintf("Executing command:\n  %s", cmd.String()))
 
 	var out bytes.Buffer
 	var errBuf bytes.Buffer
 	cmd.Stdout = &out
 	cmd.Stderr = &errBuf
 
-	env := strings.Split(out.String(), "\n")
 	err := cmd.Run()
 	if err != nil {
 		return nil, prepareRunError(err, cmd.String(), errBuf)
 	}
 
 	// if NIX_SSL_CERT_FILE && SSL_CERT_FILE are set to /no-cert-file.crt unset them
 	var clearedEnv []string
-	for _, e := range env {
+	for _, e := range strings.Split(out.String(), "\n") {
 		pair := strings.SplitN(e, "=", 2)
 		if pair[0] == "NIX_SSL_CERT_FILE" && pair[1] == "/no-cert-file.crt" {
 			continue