Bash strict mode

Author: thomasleplus

aws-cli/Dockerfile

@@ -6,7 +6,7 @@ ARG USER_NAME=default
 ARG USER_HOME=/home/default
 ARG USER_ID=1000
 
-SHELL ["/bin/bash", "-o", "pipefail", "-c"]
+SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
 
 # Upgrade python to 3.8 (best we can do with Amazon Linux 2)
 RUN yum remove python3 \
@@ -24,7 +24,7 @@ RUN yum update -y \
     tar-1.26-35.amzn2.0.4 \
     unzip-6.0-57.amzn2.0.1 \
     zip-3.0-11.amzn2.0.2 \
-    && if yum list updates | grep -q -e '^Updated Packages' ; then \
+    && IFS=$'\n\t' if yum list updates | grep -q -e '^Updated Packages' ; then \
        yum list updates ; \
        exit 1 ; \
     fi \
@@ -35,7 +35,7 @@ RUN yum update -y \
 # @TL FIXME: --break-system-packages not supported until Python 3.11.
 RUN pip3 install --no-cache-dir --upgrade \
     cfn-policy-validator==0.0.29 \
-    && msg="$(pip3 list --outdated | grep -i -e '^cfn-policy-validator ' || true)" \
+    && IFS=$'\n\t' msg="$(pip3 list --outdated | grep -i -e '^cfn-policy-validator ' || true)" \
     && if [ -n "${msg}" ]; then \
        >&2 echo "ERROR: outdated: ${msg}" ; \
        exit 1 ; \