fetchprivgit.nix

{ stdenv, fetchgit, coreutils, openssh, writeScript }:

attrs:

let
  cleanAttrs = removeAttrs attrs [ "privateKey" ];
in stdenv.lib.overrideDerivation (fetchgit cleanAttrs) (o: {
  inherit (attrs) privateKey;
  GIT_SSH = writeScript "gitssh.sh" ''
    #!${stdenv.shell}
    if privkeyFile="$(${coreutils}/bin/mktemp gitssh.XXXXXXXXXX)"; then
      cleanup() { rm -f "$privkeyFile"; }
      trap cleanup EXIT
      echo -n "$privateKey" > "$privkeyFile"
      ${openssh}/bin/ssh \
        -o UserKnownHostsFile=/dev/null \
        -o StrictHostKeyChecking=no \
        -i "$privkeyFile" \
        "$@"
      exit $?
    fi
  '';
})