- rm -rf /var/secrets
- install -m0750 -o root -g keys -d /var/secrets
- ${pkgs.gnutar}/bin/tar --strip-components 1 -C /var/secrets -xf /run/keys/secrets.tar
- sha512sum /run/keys/secrets.tar > /var/secrets/currentSecrets
- find /var/secrets -type d -exec chown root:keys {} \; -exec chmod o-rx {} \;
+ rm -rf ${location}
+ install -m0750 -o root -g keys -d ${location}
+ ${pkgs.gnutar}/bin/tar --strip-components 1 -C ${location} -xf /run/keys/secrets.tar
+ sha512sum /run/keys/secrets.tar > ${location}/currentSecrets
+ find ${location} -type d -exec chown root:keys {} \; -exec chmod o-rx {} \;