Justfile,nix/devices: sudo only when needed

nix/os/devices/default.nix

@@ -7,7 +7,8 @@
 , gitRoot ? "$(git rev-parse --show-toplevel)"
 }:
 
-let 
+let
+  rebuildargsSudo = [ "switch" "boot" ];
   rebuild = pkgs.writeScript "script" ''
     #!/usr/bin/env bash
     set -xe
@@ -17,6 +18,11 @@ let
 
     [[ -e "''${NIXOS_CONFIG}" ]]
 
+    ${if (builtins.elem rebuildarg rebuildargsSudo) then
+      "sudo -E \\"
+    else
+      ""
+      }
     nixos-rebuild -I nixos-config=''${NIXOS_CONFIG} ${rebuildarg} ${moreargs}
     if test -L result; then
       rm result