packages/nix-cleanup: rewrite it to avoid IFD

packages/nix-cleanup/default.nix

@@ -1,30 +1,52 @@
-{ writeShellApplication
-, lib
+{ lib
+, stdenvNoCC
 , coreutils
 , gawk
+, findutils
 , gnugrep
 , home-manager
 , nix
+, shellcheck
 , substituteAll
 , isNixOS ? false
 }:
 
-writeShellApplication {
+stdenvNoCC.mkDerivation {
   name =
     if isNixOS
     then "nixos-cleanup"
     else "nix-cleanup";
 
-  text = lib.readFile (substituteAll {
+  src = substituteAll {
     src = ./nix-cleanup.sh;
     isNixOS = if isNixOS then "1" else "0";
-  });
-
-  runtimeInputs = [
-    coreutils
-    gawk
-    gnugrep
-    home-manager
-    nix
-  ];
+    path = lib.makeBinPath [
+      coreutils
+      findutils
+      gawk
+      gnugrep
+      home-manager
+      nix
+    ];
+  };
+
+  dontUnpack = true;
+
+  installPhase = ''
+    runHook preInstall
+
+    install -Dm0755 $src $out/bin/nix-cleanup
+
+    runHook postInstall
+  '';
+
+  doCheck = true;
+
+  checkPhase = ''
+    runHook preCheck
+
+    ${lib.getExe shellcheck} $src
+
+    runHook postCheck
+  '';
 }

packages/nix-cleanup/nix-cleanup.sh

@@ -1,6 +1,9 @@
 #!/usr/bin/env bash
 
+set -euo pipefail
+
 readonly NIXOS=@isNixOS@
+PATH=@path@
 AUTO=0
 OPTIMIZE=0
 HM_PROFILE=0