Use set -o pipefail on supporting shells (Bash)

Author: kernc

_wrapper_exe.sh

@@ -1,7 +1,8 @@
 #!/bin/sh
 # sandbox-venv: Secure container sandbox venv wrapper (GENERATED CODE)
 set -eu
-
+# shellcheck disable=SC3040
+case "$(set -o)" in *pipefail*) set -o pipefail ;; esac
 alias realpath='realpath --no-symlinks'
 warn () { echo "sandbox-venv/wrapper: $*" >&2; }
 

_wrapper_pip.sh

@@ -2,6 +2,8 @@
 # sandbox-venv: Secure container sandbox venv wrapper (GENERATED CODE)
 # pip wrapper: Re-run sandbox-venv after every pip installation
 set -u
+# shellcheck disable=SC3040
+case "$(set -o)" in *pipefail*) set -o pipefail ;; esac
 alias realpath='realpath --no-symlinks'
 
 venv="$(realpath "${0%/*}/..")"

sandbox-venv.sh

@@ -4,6 +4,8 @@
 # Also re‑wrap any new scripts post installation by pip etc.
 # shellcheck disable=SC2317
 set -eu
+# shellcheck disable=SC3040
+case "$(set -o)" in *pipefail*) set -o pipefail ;; esac
 
 for arg; do case "$arg" in -h|-\?|--help) echo "Usage: ${0##*/} [VENV_DIR] [BWRAP_OPTS]    # Dir defaults to .venv"; exit ;; esac; done