From 09930023ab3a533c5eef824930ef38ae555b1aca Mon Sep 17 00:00:00 2001
From: aram price <aram.price@broadcom.com>
Date: Tue, 9 Jun 2026 18:19:03 -0700
Subject: [PATCH] CI: use explicit list with `--preserve-env`

---
 ci/tasks/build.sh           | 8 +++-----
 ci/tasks/os-images/build.sh | 9 +++------
 2 files changed, 6 insertions(+), 11 deletions(-)

diff --git a/ci/tasks/build.sh b/ci/tasks/build.sh
index a9c4a178ca..bcd52fd9f4 100755
--- a/ci/tasks/build.sh
+++ b/ci/tasks/build.sh
@@ -77,11 +77,9 @@ chown -R ubuntu:ubuntu "${REPO_PARENT}/bosh-linux-stemcell-builder"
 chown -R ubuntu:ubuntu /mnt
 sudo chmod u+s "$(which sudo)"
 
-sudo --set-home --user ubuntu -- \
-  env GEM_HOME="${GEM_HOME}" \
-      UBUNTU_ADVANTAGE_TOKEN="${UBUNTU_ADVANTAGE_TOKEN:-}" \
-      UBUNTU_FIPS_USE_IAAS_KERNEL="${UBUNTU_FIPS_USE_IAAS_KERNEL:-}" \
-  /bin/bash --login -i <<SUDO
+sudo --set-home --user ubuntu \
+  --preserve-env=GEM_HOME,UBUNTU_ADVANTAGE_TOKEN,UBUNTU_FIPS_USE_IAAS_KERNEL \
+  -- /bin/bash --login -i <<SUDO
 set -e
 
 cd "${REPO_PARENT}/bosh-linux-stemcell-builder"
diff --git a/ci/tasks/os-images/build.sh b/ci/tasks/os-images/build.sh
index 62bb14b479..f8f31b58a7 100755
--- a/ci/tasks/os-images/build.sh
+++ b/ci/tasks/os-images/build.sh
@@ -35,12 +35,9 @@ chown -R ubuntu:ubuntu "${REPO_PARENT}/bosh-linux-stemcell-builder"
 chown -R ubuntu:ubuntu /mnt
 sudo chmod u+s "$(which sudo)"
 
-sudo --set-home --user ubuntu -- \
-  env GEM_HOME="${GEM_HOME}" \
-      BUILD_TIME="${BUILD_TIME:-}" \
-      UBUNTU_ADVANTAGE_TOKEN="${UBUNTU_ADVANTAGE_TOKEN:-}" \
-      UBUNTU_DEBOOTSTRAP_MIRROR="${UBUNTU_DEBOOTSTRAP_MIRROR:-}" \
-  /bin/bash --login -i <<SUDO
+sudo --set-home --user ubuntu \
+  --preserve-env=GEM_HOME,BUILD_TIME,UBUNTU_ADVANTAGE_TOKEN,UBUNTU_DEBOOTSTRAP_MIRROR \
+  -- /bin/bash --login -i <<SUDO
 set -e
 
 cd "${REPO_PARENT}/bosh-linux-stemcell-builder"