(command.CommandList
  children: [
    (C {<set>} {<-e>})
    (C {<set>} {<-x>})
    (C {<cd>} {(command_sub left_token:<Id.Left_DollarParen '$('> child:(C {<mktemp>} {<-d>}))})
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:version)
          op: assign_op.Equal
          rhs: {(DQ <1.29.0>)}
          spids: [21]
        )
      ]
    )
    (C {<export>} {<Id.Lit_VarLike 'DEBIAN_FRONTEND='> <noninteractive>})
    (C {<apt-get>} {<update>})
    (C {<apt-get>} {<install>} {<-y>} {<--no-install-recommends>} {<ca-certificates>} {<gnupg2>} 
      {<bash-completion>} {<checkinstall>} {<curl>} {<iptables>} {<wget>}
    )
    (command.Pipeline
      children: [
        (C {<curl>} {<-sSL>} 
          {<https> <Id.Lit_Colon ':'> <'//coreos.com/dist/pubkeys/app-signing-pubkey.gpg'>}
        )
        (C {<gpg2>} {<--import>} {<->})
      ]
      negated: F
    )
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:key)
          op: assign_op.Equal
          rhs: 
            {
              (command_sub
                left_token: <Id.Left_DollarParen '$('>
                child: 
                  (command.Pipeline
                    children: [
                      (C {<gpg2>} {<--with-colons>} {<--keyid-format>} {<LONG>} {<-k>} 
                        {<security> <Id.Lit_Splice '@coreos'> <.com>}
                      )
                      (C {<egrep>} {<Id.Lit_Other '^'> <pub>})
                      (C {<cut>} {<-d>} {(SQ <':'>)} {<-f5>})
                    ]
                    negated: F
                  )
              )
            }
          spids: [90]
        )
      ]
    )
    (C {<wget>} {<--progress> <Id.Lit_Equals '='> <bar> <Id.Lit_Colon ':'> <force>} 
      {<https> <Id.Lit_Colon ':'> <'//github.com/rkt/rkt/releases/download/v'> 
        (DQ (${ Id.VSub_Name version)) <'/rkt-v'> (DQ (${ Id.VSub_Name version)) <.tar.gz>
      }
    )
    (C {<wget>} {<--progress> <Id.Lit_Equals '='> <bar> <Id.Lit_Colon ':'> <force>} 
      {<https> <Id.Lit_Colon ':'> <'//github.com/rkt/rkt/releases/download/v'> 
        (DQ (${ Id.VSub_Name version)) <'/rkt-v'> (DQ (${ Id.VSub_Name version)) <.tar.gz.asc>
      }
    )
    (C {<gpg2>} {<--trusted-key>} {(DQ (${ Id.VSub_Name key))} {<--verify-files>} 
      {<Id.Lit_Star '*'> <.asc>}
    )
    (C {<tar>} {<xvzf>} {<rkt-v> (DQ (${ Id.VSub_Name version)) <.tar.gz>})
    (command.Simple
      words: [{<cat>}]
      redirects: [
        (redir
          op: <Id.Redir_DLess '<<'>
          loc: (redir_loc.Fd fd:0)
          arg: 
            (redir_param.HereDoc
              here_begin: {<EOF>}
              here_end_span_id: 299
              stdin_parts: [
                <'#!/bin/bash\n'>
                <'\n'>
                <'# abort/fail on any error\n'>
                <'set -e\n'>
                <'\n'>
                <'# fix mkdir issues with checkinstall and fstrans\n'>
                <'for dir in /usr/lib/rkt/stage1-images/'>
                (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\\\'>)
                <'\n'>
                <'        /usr/share/man/man1/'>
                (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\\\'>)
                <'\n'>
                <'        /usr/share/bash-completion/completions/'>
                (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\\\'>)
                <'\n'>
                <'        /usr/lib/tmpfiles.d/'>
                (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\\\'>)
                <'\n'>
                <'        /usr/lib/systemd/system/\n'>
                <'do\n'>
                <'    mkdir -p '>
                (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\$'>)
                <'dir 2>/dev/null || :\n'>
                <'done\n'>
                <'\n'>
                <'for flavor in fly coreos kvm; do\n'>
                <'    install -Dm644 rkt-v'>
                (${ Id.VSub_Name version)
                <'/stage1-'>
                (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\$'>)
                <'{flavor}.aci /usr/lib/rkt/stage1-images/stage1-'>
                (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\$'>)
                <'{flavor}.aci\n'>
                <'done\n'>
                <'\n'>
                <'install -Dm755 rkt-v'>
                (${ Id.VSub_Name version)
                <'/rkt /usr/bin/rkt\n'>
                <'\n'>
                <'for f in rkt-v'>
                (${ Id.VSub_Name version)
                <'/manpages/*; do\n'>
                <'    install -Dm644 '>
                <Id.Right_DoubleQuote '"'>
                (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\$'>)
                <'{f}'>
                <Id.Right_DoubleQuote '"'>
                <' '>
                <Id.Right_DoubleQuote '"'>
                <'/usr/share/man/man1/'>
                (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\$'>)
                <'(basename '>
                (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\$'>)
                <'f)'>
                <Id.Right_DoubleQuote '"'>
                <'\n'>
                <'done\n'>
                <'\n'>
                <'install -Dm644 rkt-v'>
                (${ Id.VSub_Name version)
                <'/bash_completion/rkt.bash /usr/share/bash-completion/completions/rkt\n'>
                <'install -Dm644 rkt-v'>
                (${ Id.VSub_Name version)
                <'/init/systemd/tmpfiles.d/rkt.conf /usr/lib/tmpfiles.d/rkt.conf\n'>
                <'\n'>
                <'for unit in rkt-gc.{timer,service} rkt-metadata.{socket,service}; do\n'>
                <'    install -Dm644 rkt-v'>
                (${ Id.VSub_Name version)
                <'/init/systemd/'>
                (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\$'>)
                <'unit /usr/lib/systemd/system/'>
                (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\$'>)
                <'unit\n'>
                <'done\n'>
              ]
            )
        )
        (redir op:<Id.Redir_Great '>'> loc:(redir_loc.Fd fd:1) arg:{<install-pak>})
      ]
      do_fork: T
    )
    (C {<chmod>} {<Id.Lit_Other '+'> <x>} {<install-pak>})
    (command.Simple
      words: [{<cat>}]
      redirects: [
        (redir
          op: <Id.Redir_DLess '<<'>
          loc: (redir_loc.Fd fd:0)
          arg: 
            (redir_param.HereDoc
              here_begin: {<EOF>}
              here_end_span_id: 321
              stdin_parts: [
                <'#!/bin/sh\n'>
                <'\n'>
                <'groupadd --force --system rkt-admin\n'>
                <'groupadd --force --system rkt\n'>
              ]
            )
        )
        (redir op:<Id.Redir_Great '>'> loc:(redir_loc.Fd fd:1) arg:{<preinstall-pak>})
      ]
      do_fork: T
    )
    (C {<chmod>} {<Id.Lit_Other '+'> <x>} {<preinstall-pak>})
    (C {<cp>} {<rkt-v> (DQ (${ Id.VSub_Name version)) <'/scripts/setup-data-dir.sh'>} 
      {<postinstall-pak>}
    )
    (C {<chmod>} {<Id.Lit_Other '+'> <x>} {<postinstall-pak>})
    (command.Simple
      words: [{<cat>}]
      redirects: [
        (redir
          op: <Id.Redir_DLess '<<'>
          loc: (redir_loc.Fd fd:0)
          arg: 
            (redir_param.HereDoc
              here_begin: {<EOF>}
              here_end_span_id: 361
              stdin_parts: [
                <'systemctl daemon-reload\n'>
                <'systemd-tmpfiles --create /usr/lib/tmpfiles.d/rkt.conf\n'>
              ]
            )
        )
        (redir op:<Id.Redir_DGreat '>>'> loc:(redir_loc.Fd fd:1) arg:{<postinstall-pak>})
      ]
      do_fork: T
    )
    (C {<checkinstall>} {<-y>} {<--pkgname> <Id.Lit_Equals '='> <rkt>} 
      {<--pkgversion> <Id.Lit_Equals '='> (DQ (${ Id.VSub_Name version))} {<'./install-pak'>}
    )
  ]
)